474207 matches found
July 14, 2026—KB5099540 (OS Build 20348.5386)
None None...
July 14, 2026—KB5099539 (OS Builds 19045.7548 and 19044.7548)
None None...
July 14, 2026—KB5099536 (OS Build 26100.33158)
None None...
Description of the security update for SharePoint Server 2016: July 14, 2026 (KB5002891)
None None...
Description of the security update for SharePoint Server 2019: July 14, 2026 (KB5002883)
None None...
Description of the security update for SharePoint Server Subscription Edition: July 14, 2026 (KB5002882)
None None...
CVE-2026-109943 FreeRDP 3.29.0 before 3.32.0 Double Free via Async-Update Polygon Order
FreeRDP 3.29.0 before 3.32.0 contains a double free in the client's async-update message proxy, which shallow-copies the parser-owned PolygonSC or PolygonCB points array when numPoints is zero, so both the queue consumer and parser cleanup free it. A malicious RDP server can send a point-bearing...
CVE-2026-109943
FreeRDP versions 3.29.0 before 3.32.0 are vulnerable to a double free vulnerability in the client's async-update message proxy . The root cause occurs when the proxy shallow-copies the parser-owned PolygonSC or PolygonCB points array while numPoints is zero, leading to both the queue consumer and...
CVE-2026-109943 FreeRDP 3.29.0 before 3.32.0 Double Free via Async-Update Polygon Order
FreeRDP 3.29.0 before 3.32.0 contains a double free in the client's async-update message proxy, which shallow-copies the parser-owned PolygonSC or PolygonCB points array when numPoints is zero, so both the queue consumer and parser cleanup free it. A malicious RDP server can send a point-bearing...
CVE-2026-109704
Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...
CLSA-2026-1791896844 TuxCare security update for org.springframework.ws (7 CVEs)
TuxCare rebuilt 7 org.springframework.ws packages to address 7 CVEs. Fixed in 4.0.11-tuxcare.1...
CLSA-2026-1791895043 TuxCare security update for org.springframework.ws (7 CVEs)
TuxCare rebuilt 6 org.springframework.ws packages to address 7 CVEs. Fixed in 3.1.7-tuxcare.1...
CVE-2026-109704 Privilege escalation in the Application Update component
Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...
CVE-2026-109704
A privilege escalation vulnerability exists in the Application Update component of Mozilla products. This flaw was addressed in Firefox 158 , Firefox ESR 153.5 , Thunderbird 158 , and Thunderbird 153.5 . No specific technical root cause or exploit details are provided in the documents, but the vu...
CVE-2026-109704 Privilege escalation in the Application Update component
Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...
EUVD-2026-98482
Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...
CVE-2026-109704
Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...
Xenstore: Guests can crash xenstored during Live Update
ISSUE DESCRIPTION During Xenstore live update the state record for a Xenstore watch with specified watch depth is written with two bytes missing. This results in an inconsistent state when reading the state back in the new Xenstore, causing a crash of Xenstore or wrong Xenstore data. IMPACT An...