44264 matches found
CVE-2026-46640
Twig is a template language for PHP. From 3.15.0 until 3.26.0, self. and import-alias dynamic attribute syntax can concatenate an attacker-controlled string into a MacroReferenceExpression name without identifier validation, causing raw PHP to be emitted into the generated template source and...
CVE-2026-46628
Twig is a template language for PHP. Prior to 3.26.0, the deprecated spaceless filter is registered as safe for HTML, causing Twig autoescaping to emit attacker-controlled markup unescaped when spaceless is applied to untrusted input. This issue is fixed in version 3.26.0...
CVE-2026-45045 vulnerabilities
Vulnerabilities for packages: gatus...
CVE-2026-45068
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, SendmailTransport in -t mode appended recipient addresses to the sendmail command line without a -- end-of-options separator, allowing an address beginnin...
CVE-2026-45133
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, when the parser is exposed to attacker-controlled input, deeply nested mappings or sequences cause both the block-level Parser::parseBlock and inline...
EUVD-2026-43897
Improper access control in Windows Operating Systems allows an authorized attacker to elevate privileges locally...
CVE-2026-50317
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Operating Systems allows an authorized attacker to elevate privileges locally...
CVE-2026-45756
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 7.3.0-BETA1 until 7.4.12 and 8.0.12, the JsonPath component compiles attacker-controlled match and search filter patterns directly into pregmatch without a length cap, i-regexp restriction, or...
Upwind Finds Coordinated Supply Chain Campaign Compromising Multiple AsyncAPI npm Packages
Upwind links compromised AsyncAPI npm packages to a coordinated supply chain attack spanning repositories, publishing pipelines, and developer systems at risk...
Malicious code in monitoring-service (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b39cb760b9b8a911efb3acc8389158d2a679ff9eb104da35496a6cccb1df6e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2026-50317 Windows Operating Systems Elevation of Privilege Vulnerability
...
CVE-2026-50317 Windows Operating Systems Elevation of Privilege Vulnerability
...
CVE-2026-50335 Windows Operating Systems Elevation of Privilege Vulnerability
...
CVE-2026-50335 Windows Operating Systems Elevation of Privilege Vulnerability
...
CVE-2026-50335
CVE-2026-50335 is a Windows Operating Systems elevation of privilege vulnerability enabled by improper access control. The entry is supported by multiple connected sources (NVD, CIRCL sighting, MSRC/KB pages) and is documented as a local, privilege-escalation issue with CVSSv3.1 base score 7.8 (H...
2026-07 Cumulative Update for Windows Server 2022 Datacenter: Azure Edition for x64-based Systems (KB5099540)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
2026-07 Dynamic Cumulative Update for Windows 10 Version 21H2 for ARM64-based Systems (KB5099539)
2026-07 Dynamic Cumulative Update for Windows 10 Version 21H2 for ARM64-based Systems KB5099539...
2026-07 Cumulative Update for Windows 10 Version 1809 for x64-based Systems (KB5099538)
2026-07 Cumulative Update for Windows 10 Version 1809 for x64-based Systems KB5099538...