261713 matches found
CVE-2026-44618
A flaw was found in Apache CXF. An insecure XML parser configuration within Apache CXF's WS-Transfer module may allow a remote attacker to perform XML External Entity XXE attacks. This could lead to information disclosure, denial of service, or server-side request forgery. Mitigation If using...
CVE-2026-18844
creationtimestamp| type| source ---|---|--- 2026-08-11 20:14:43+00:00| seen| https://bsky.app/profile/cyfar.ca/post/3mstgjkadjw26 2026-08-11 20:15:22+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-223-02...
CVE-2026-62688
creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:52+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 20:15:41+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284 2026-08-12 01:01:50+00:00| seen|...
CVE-2026-62818
creationtimestamp| type| source ---|---|--- 2026-08-11 19:00:49+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 20:16:00+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284 2026-08-12 01:00:45+00:00| seen|...
CVE-2026-12571
creationtimestamp| type| source ---|---|--- 2026-08-11 17:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mst5uzdtc525...
CVE-2026-64909 Microsoft Office Remote Code Execution Vulnerability
...
CVE-2026-62778 Windows DNS Elevation of Privilege Vulnerability
...
CVE-2026-58641 .NET Elevation of Privilege Vulnerability
...
CVE-2026-65783
CVE-2026-65783 is a use-after-free vulnerability in Windows Autopilot that allows an authorized attacker to perform local privilege escalation. The available documents confirm the affected component (Windows Autopilot) and the underlying issue (use-after-free) with a local attacker requiring low ...
CVE-2026-70324 Microsoft SharePoint Elevation of Privilege Vulnerability
...
CVE-2026-70319 Microsoft Office Word Information Disclosure Vulnerability
...
CVE-2026-66799 Windows Key Guard Elevation of Privilege Vulnerability
...
CVE-2026-68792 Microsoft Office Elevation of Privilege Vulnerability
...
CVE-2026-65813 Microsoft Exchange Server Elevation of Privilege Vulnerability
...
CVE-2026-64922 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-62894
CVE-2026-62894 describes a heap-based buffer overflow in the Windows DWM Core Library that allows an authenticated local attacker to elevate privileges. The vulnerability is documented across CVE/NVD listings with a CVSSv3.1 base score of 7.8 (HIGH), vector: LOCAL, LOW attack complexity, and NONE...
CVE-2026-62766 Windows Kerberos Elevation of Privilege Vulnerability
...
CVE-2026-62729
CVE-2026-62729 describes a race condition in Windows Telephony Service caused by concurrent execution on a shared resource with improper synchronization. This allows an authorized, local attacker to elevate privileges. The entry notes a local attack vector with high impact on confidentiality, int...