CVE-2026-50425

Use after free in Windows Internal System User Profile allows an authorized attacker to elevate privileges locally...

CVE-2026-50422

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally...

CVE-2026-50417

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally...

CVE-2026-50418

Improper access control in Windows System allows an unauthorized attacker to bypass a security feature locally...

CVE-2026-50407

Heap-based buffer overflow in Windows Resilient File System ReFS allows an authorized attacker to elevate privileges locally...

CVE-2026-50402

Incorrect conversion between numeric types in Windows NTFS allows an authorized attacker to elevate privileges locally...

CVE-2026-50386

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally...

CVE-2026-50371

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows LUAFV allows an authorized attacker to elevate privileges locally...

CVE-2026-50361

Double free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...

CVE-2026-50362

Heap-based buffer overflow in Windows Resilient File System ReFS allows an unauthorized attacker to execute code locally...

CVE-2026-50357

Numeric truncation error in Windows Resilient File System ReFS allows an authorized attacker to execute code locally...

CVE-2026-50343

Improper privilege management in Microsoft Install Service allows an authorized attacker to elevate privileges locally...

CVE-2026-50326

Use after free in Windows Unified Consent System allows an authorized attacker to elevate privileges locally...

CVE-2026-50313

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally...

CVE-2026-50305

Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...

[SECURITY] Fedora 44 Update: prometheus-3.13.1-1.fc44

The Prometheus monitoring system and time series database...

MAL-2026-10605 Malicious code in @radivi-ui/react-dialog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5e92ae03eb6adb090fb832665431984cccef31039bb920e3850535f4defe610 @radivi-ui/react-dialog is a typosquat of @radix-ui/react-dialog whose main entry index.js is a self-executing IIFE that runs whoami and hostname via...

CVE-2026-15715

CVE-2026-15715 affects SourceCodester Class and Exam Timetabling System 1.0. The vulnerability targets the file /exam.php where manipulating the argument day enables cross-site scripting. It can be exploited remotely, and a publicly available exploit exists. The available documents do not specify...

MAL-2026-10598 Malicious code in monitoring-service-util (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fb0e7dea7e0302bc22488fbaf436dd36c0763f05ef494977822e8a1b7b3a1ab The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

CVE-2026-4017

The CVE-2026-4017 entry concerns a buffer overflow in the TraceEvent() system call entry handler for the QNX Neutrino kernel (affecting QNX Software Development Platform and QNX OS for Safety). The underlying issue, a buffer overflow in the entry handler, could enable a local attacker to cause in...