CVE-2026-48386 ColdFusion | Use of a Broken or Risky Cryptographic Algorithm (CWE-327)

ColdFusion is affected by a Use of a Broken or Risky Cryptographic Algorithm vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue does not require user interaction...

EUVD-2026-56539

ColdFusion is affected by an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitatio...

CVE-2026-71386 ColdFusion | Cross-site Scripting (XSS) (CWE-79)

is affected by a Cross-site Scripting XSS vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. The vulnerable component is restricted to an administrative network zone by default...

EUVD-2026-56538

is affected by a Cross-site Scripting XSS vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. The vulnerable component is restricted to an administrative network zone by default...

CVE-2026-71386

CVE-2026-71386 is a cross-site scripting vulnerability affecting Adobe ColdFusion (ColdFusion component). The issue can lead to arbitrary code execution in the context of the current user and is exploitable only when a victim opens a malicious file, with user interaction required. The vulnerable ...

CVE-2026-25652

is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain unauthorized read and write access. Exploitation of this issue does not require user interaction...

CVE-2026-25652 ColdFusion | Incorrect Authorization (CWE-863)

is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain unauthorized read and write access. Exploitation of this issue does not require user interaction...

EUVD-2026-56536

is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain unauthorized read and write access. Exploitation of this issue does not require user interaction...

CVE-2026-25652 ColdFusion | Incorrect Authorization (CWE-863)

is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain unauthorized read and write access. Exploitation of this issue does not require user interaction...

CVE-2026-25652

CVE-2026-25652 is an Incorrect Authorization vulnerability affecting Adobe ColdFusion (per APSB26-90). The issue allows a low-privileged attacker with local access to escalate privileges and perform unauthorized read and write actions. Exploitation does not require user interaction. The CVSS-like...

EUVD-2026-56535

is affected by an Improper Input Validation vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain unauthorized read and write access. Exploitation of this issue requires user interaction in that a victim must open a malicious...

CVE-2026-21273

CVE-2026-21273 affects Adobe ColdFusion . The description shows an Improper Input Validation vulnerability that could lead to privilege escalation . A low-privileged attacker could gain unauthorized read/write access, but exploitation requires a victim to open a malicious file and user interactio...

CVE-2026-21273 ColdFusion | Improper Input Validation (CWE-20)

is affected by an Improper Input Validation vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain unauthorized read and write access. Exploitation of this issue requires user interaction in that a victim must open a malicious...

CVE-2026-21273

is affected by an Improper Input Validation vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain unauthorized read and write access. Exploitation of this issue requires user interaction in that a victim must open a malicious...

CVE-2026-34175

Affected software: Hardware-Aware-Automated-MachineLearning NA (pre-45cd723) within Ring 3: User Applications. Vulnerability: Uncontrolled search path leading to local privilege escalation. Root cause: improper handling of search paths; enables escalation of privilege when a privileged user and u...

CVE-2026-24911

Intel PROSet/Wireless WiFi Software for Windows suffers a stack-based buffer overflow in Ring 0 that may allow a denial of service by an unprivileged, unauthenticated attacker with low complexity and adjacent access, requiring no user interaction. The vulnerability impacts availability (high) wit...

EUVD-2026-56518

Use after free for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service. System software adversary with an unauthenticated user combined with a high complexity attack may enable denial of service. This result may potentially occur via local...

CVE-2026-20908

The CVE concerns the Intel NPU Driver for Windows (Ring 1: Device Drivers). A time-of-check time-of-use race condition in the driver may allow a denial of service by an unprivileged user with authentication, via local access without user interaction. Impact per the documents: confidentiality none...

CVE-2026-20898

Improper access control in the firmware for some in Alias Checking Trusted Module for some IntelR XeonR processors may allow an escalation of privilege. Startup code and SMM adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may...

CVE-2026-20795

Improper buffer restrictions for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur...