EUVD-2026-2650

EUVD-2026-2650...

EUVD-2026-2638

EUVD-2026-2638...

EUVD-2026-2027

Jervis is a library for Job DSL plugin scripts and shared Jenkins pipeline libraries. Prior to 2.2, Jervis uses deterministic AES IV derivation from a passphrase. This vulnerability is fixed in 2.2...

EUVD-2026-2103

Integer underflow wrap or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

EUVD-2026-2112

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...

EUVD-2026-2123

External control of file name or path in Windows Telephony Service allows an authorized attacker to elevate privileges over an adjacent network...

EUVD-2026-2173

Use after free in Windows Local Security Authority Subsystem Service LSASS allows an authorized attacker to execute code over a network...

EUVD-2026-2166

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows SMB Server allows an authorized attacker to elevate privileges over a network...

EUVD-2026-2131

Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally...

EUVD-2026-2154

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Local Session Manager LSM allows an authorized attacker to elevate privileges locally...

EUVD-2026-2162

Improper access control in Windows Client-Side Caching CSC Service allows an authorized attacker to disclose information locally...

EUVD-2026-2156

Absolute path traversal in Windows Shell allows an unauthorized attacker to perform spoofing with a physical attack...

EUVD-2026-2158

Windows Remote Procedure Call Interface Definition Language IDL Elevation of Privilege Vulnerability...

EUVD-2026-2198

Concurrent execution using shared resource with improper synchronization 'race condition' in Graphics Kernel allows an authorized attacker to elevate privileges locally...

EUVD-2026-2210

Concurrent execution using shared resource with improper synchronization 'race condition' in Printer Association Object allows an authorized attacker to elevate privileges locally...

EUVD-2026-2113

Use of uninitialized resource in Dynamic Root of Trust for Measurement DRTM allows an authorized attacker to disclose information locally...

EUVD-2026-2216

Software installed and run as a non-privileged user may conduct improper GPU system calls to cause mismanagement of resources reference counting creating a potential use after free scenario. Improper resource management and reference counting on an internal resource caused scenario where potentia...

EUVD-2026-2283

In the Linux kernel, the following vulnerability has been resolved: scsi: aic94xx: fix use-after-free in device removal path The asdpciremove function fails to synchronize with pending tasklets before freeing the asdha structure, leading to a potential use-after-free vulnerability. When a device...

EUVD-2026-2258

In the Linux kernel, the following vulnerability has been resolved: ntfs: set dummy blocksize to read bootblock when mounting When mounting, sb-sblocksize is used to read the bootblock without being defined or validated. Set a dummy blocksize before attempting to read the bootblock. The issue can...

EUVD-2026-2280

In the Linux kernel, the following vulnerability has been resolved: Input: alps - fix use-after-free bugs caused by dev3registerwork The dev3registerwork delayed work item is initialized within alpsreconnect and scheduled upon receipt of the first bare PS/2 packet from an external PS/2 device...