CVE-2026-97032

HTTP/2 servers are vulnerable to a crash caused by a race condition in the HPACK encoder . The issue occurs because the server modifies the encoder from two goroutines without proper synchronization: one goroutine encodes a HEADERS frame for a client response, while another modifies the encoder's...

CVE-2026-78669

The net/http component is vulnerable to excessive CPU consumption due to how it handles HTTP/2 connections. A malicious peer can exploit this by opening a large number of streams and repeatedly sending small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values. The documents do not prov...

CVE-2026-78660

The net/http package in the Go programming language contains a vulnerability where the HTTP/2 implementation allows malformed framing-related headers. While these headers do not interfere with HTTP/2 framing, they can be forwarded to an HTTP/1 client when the implementation acts as a reverse prox...

CVE-2026-78667

The net/http package is vulnerable to a CPU exhaustion issue when parsing a Range header that contains a large number of small ranges. Specifically, the functions FileServer(FS) , ServeContent , and ServeFile(FS) can consume an excessive amount of CPU resources during this process. No specific re...

CVE-2026-94439

The net/http package in Go is vulnerable to a connection desynchronization issue when an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request without hijacking the connection. Because a 2xx response converts the connection into a tunnel, the server should cease treating the conne...

CVE-2026-78663

The Go net/http package's HTTP/2 server is vulnerable to a double refund of connection-level flow control. Specifically, the server may refund data twice for the same data: first when a client resets a stream (refunding sent-but-unread portions) and again when a request handler reads the buffered...

CVE-2026-56857

On Windows , the os package functions Root.Mkdir and Root.MkdirAll are vulnerable to a directory traversal-like behavior. When the target path ends in a junction pointing to an empty location (e.g., path/to/junction), the operation can create a directory at the junction target even if it resides ...

CVE-2026-56866

The net/http package's http.Transport is vulnerable to connection desynchronization when sending an HTTP/1 CONNECT request with a non-empty Request.Body . The transport writes the body directly without framing after the headers; if the server rejects the request with a non-2xx keep-alive response...

CVE-2026-94440

A memory limit bypass vulnerability exists in the net/textproto and mime/multipart packages. When parsing a multipart form , an attacker can cause the system to read an arbitrarily long line into memory if the remaining limit at the start of a part is less than 400 bytes. This occurs due to an in...

CVE-2026-97031

The crypto/tls component is vulnerable to a memory exhaustion attack because it previously failed to reject multiple ECH outer extension references , which are prohibited under RFC 9849. An attacker could send a well-crafted packet with multiple references to trigger a memory amplification vector...

CVE-2026-78659

The net/http package in Go is vulnerable to a memory exhaustion attack when handling HTTP/2 requests. A malicious client can send "Trailer" headers with a large number of fields, causing the server to allocate a disproportionate amount of memory to populate the Request.Trailer map . This exploit ...

CVE-2026-94444

The Go toolchain (specifically cmd/go ) is vulnerable to a checksum bypass regarding the golang.org/fips140 module. A user operating within a malicious Go project that defines a bogus golang.org/fips140 dependency and utilizes a malicious GOMODPROXY could serve an arbitrary module in its place. T...

CVE-2026-94447

The golang.org/toolchain component in cmd/go is vulnerable to a checksum database bypass. A user operating within a malicious Go project can define a bogus go.sum entry and utilize a malicious GOMODPROXY to bypass intended checksums. To remediate this, the toolchain is updated to ensure it always...

CVE-2026-97030

The html/template package in Go is affected by an issue where the 'yield' keyword, when used as a regexp preceder keyword, might not be correctly escaped in templates authored by a trusted source. The vulnerability arises from inconsistent escaping logic for valid versus non-keyword uses. Remedia...

CVE-2026-94448

The html/template package in Go is vulnerable because the context tracking state was not properly reset when a JavaScript template literal contained consecutive expressions. This flaw prevents subsequent regular expression literals from being accurately recognized and escaped. The fix ensures tha...

CVE-2026-107802

SumatraPDF (version 3.6.1 and earlier) is vulnerable to Windows command-line argument injection within its AI selection-translate feature. The issue resides in src/SelectionTranslate.cpp, where the functions BuildGrokTranslateCmdLineTemp(), BuildClaudeTranslateCmdLineTemp(), and BuildCodexTransla...

CVE-2026-107738

SumatraPDF versions 3.6.1 and earlier on Windows are vulnerable to an out-of-bounds read. The issue resides in the ChmFile::GetCharZ() function, which narrows file-controlled unsigned string offsets from /#WINDOWS and /#IVB to signed integers without performing a lower-bound check. If an offset b...

CVE-2026-107737

The multi-format reader SumatraPDF for Windows is vulnerable to an out-of-bounds object lookup in versions 3.6.1 and earlier , and in pre-release 3.7.0.20369 when WebView2 is absent or fails to initialize. The root cause lies in the ParseProtoUrl() function, which accepts the signed host componen...

CVE-2026-107736

SumatraPDF (version 3.6.1 and earlier) on Windows is vulnerable to a stack buffer overflow during the processing of EXIF Orientation metadata. The issue resides in the MaybeFlipBitmap() function, which uses GDI+ to read an attacker-controlled PropertyTagOrientation size via GetPropertyItem() into...

CVE-2026-107735

The multi-format reader SumatraPDF (version 3.6.1 and earlier) on Windows contains a fail-open policy initialization flaw in the InitializePolicies() function. The application initializes the sumatrapdfrestrict.ini path with gPolicyRestrictions set to Perm::All and only performs bitwise OR operat...

CVE-2026-107734

SumatraPDF (version 3.5.2 and earlier) is vulnerable to SyncTeX Argument Injection during an inverse search. The root cause is the substitution of an attacker-controlled SyncTeX source filename for the %f placeholder in an external editor command line without employing safe Windows argument quoti...

CVE-2026-107733

In SumatraPDF version 3.6.1 and earlier for Windows, a null-pointer dereference occurs within the FrameOnCommand() function when handling CmdExec while no document tab is open. The root cause is the passing of a null current-tab pointer to RunWithExe(), leading to the dereferencing of WindowTab::...

CVE-2026-107732

The multi-format reader SumatraPDF for Windows (version 3.6.1 and earlier ) is vulnerable to markup/command-link injection . The issue occurs because untrusted document paths and PDF link targets are interpolated into notification text, which the ParseTip() function interprets as trusted tip mark...

CVE-2026-105674

The TP-Link Tapo C325WB V2 is vulnerable to a predictable media stream pre-shared key generation. The device uses a time-seeded pseudo-random number generator to create keys for its local media streaming service, allowing an unauthenticated attacker on the adjacent network to recover the key. Suc...

CVE-2026-105672

The TP-Link Tapo C325WB V2 contains an unauthenticated authorization bypass vulnerability within the HTTPS JSON API dispatcher on TCP port 443. An attacker located on the adjacent network can exploit this by appending an onboarding-scoped object to a JSON request, effectively bypassing session ve...

CVE-2026-105673

A denial-of-service vulnerability exists in the TP-Link Tapo C325WB v2 within the RTSP streaming service on TCP port 554 when the Camera Account feature is enabled. The root cause is memory corruption triggered by a crafted pair of RTSP-over-HTTP tunneling requests , which can crash the streaming...

CVE-2026-107731

The multi-format reader SumatraPDF version 3.7.0.22298 for Windows contains four independently reachable range-validation flaws in src/LitDoc.cpp . These flaws allow file-controlled offsets and sizes to overflow, narrow to negative values, or wrap before incomplete bounds checks. Specifically, th...

CVE-2026-107730

The multi-format reader SumatraPDF (version 3.7.0.22298 ) contains a signed integer overflow vulnerability in the LitParseHeader() function located in src/LitDoc.cpp . The issue occurs because the software uses signed 32-bit arithmetic to compute the section offset (hdrLen + nPieces * 16) without...

CVE-2026-107651

A heap-based buffer overflow exists in Eye of GNOME (eog) within the PNG metadata reader . The vulnerability is caused by improper state handling during the parsing of split metadata chunks. A remote attacker could exploit this by tricking a user into opening a specially crafted PNG file , which ...

CVE-2026-107729

The multi-format reader SumatraPDF (version 3.7.0.22298) is vulnerable to an out-of-bounds read in src/MobiDoc.cpp during MOBI parsing. The root cause is an unsigned-to-signed conversion where the mobiHdr.hdrLen field is narrowed to a signed integer for validation. Values exceeding INT_MAX become...

CVE-2026-96207

A vulnerability in Microsoft Partner Center due to improper certificate validation (CWE-295) allows an unauthorized attacker to elevate privileges over a network. The vulnerability is classified as CRITICAL with a CVSS 3.1 base score of 10.0 , indicating high impact on confidentiality and integri...

CVE-2026-88131

A critical Remote Code Execution (RCE) vulnerability exists in Microsoft Dataverse due to the deserialization of untrusted data . This flaw allows an unauthorized attacker to execute arbitrary code over the network. The vulnerability has a CVSS 3.1 score of 9.8 , indicating high impact on confide...

CVE-2026-94510

A vulnerability in Microsoft Bookings allows an unauthorized attacker to achieve elevation of privilege over a network. The root cause is an authorization bypass occurring through a user-controlled key . The impact is classified as CRITICAL , with a CVSS 3.1 base score of 9.9 , specifically affec...

CVE-2026-83947

A missing authorization vulnerability in Azure Event Grid allows an authorized attacker to perform spoofing over a network. The issue is classified under CWE-862 and carries a HIGH base severity score of 7.7. While the specific root cause and affected versions are not detailed in the provided doc...

CVE-2026-83943

The Azure API Center is affected by an information disclosure vulnerability (CVE-2026-83943 ) that allows an unauthorized attacker to disclose sensitive information over a network. The vulnerability is characterized by a High base severity (8.7) with a network-based attack vector and high impact ...

CVE-2026-77900

A critical vulnerability in Azure App Service (CVE-2026-77900) stems from missing authentication for a critical function. This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is confirmed with a CVSS 3.1 base score of 9.8 . No specific explo...

CVE-2026-69435

The Azure SRE Agent is susceptible to a missing authorization vulnerability (CWE-918), which allows an authorized attacker to perform a privilege elevation over a network. The vulnerability is classified as CRITICAL with a CVSS 3.1 base score of 9.6 . While the root cause is identified as a lack ...

CVE-2026-107728

The Strawberry GraphQL library (versions 0.217.0 through 0.326.1) contains a vulnerability in PermissionExtension.resolve() where synchronous field resolvers may incorrectly grant access. When a custom permission's has_permission() is a normal function returning an awaitable, the system fails to ...

CVE-2026-107727

The Strawberry GraphQL library (versions 0.312.3 through 0.327.2 ) contains a vulnerability in the legacy graphql-ws subscription handler located in strawberry/subscriptions/protocols/graphql_ws/handlers.py. The root cause is that the handler fails to remove naturally completed operations from se...

CVE-2026-107726

Hazelcast is vulnerable to an arbitrary memory access flaw in versions prior to 5.4.5, 5.5.10, 5.6.1, and 5.7.0 . The root cause is improper validation of data supplied by a malicious client capable of connecting to a cluster. An attacker can perform arbitrary reads from a cluster member's Java h...

CVE-2026-107725

Hazelcast , a unified real-time data platform, contains a vulnerability in the IMap Predicates API due to missing authorization checks. This flaw allows a malicious client with limited privileges to achieve arbitrary code execution on a Hazelcast cluster member. The issue affects versions prior t...

CVE-2026-107724

The fast-jwt library (version 6.2.4 ) contains a vulnerability where raw serialized public JWK or JWKS JSON can be incorrectly classified as an HMAC secret . The root cause is located in src/crypto.js within the performDetectPublicKeyAlgorithms function, which treats non-PEM strings as symmetric ...

CVE-2026-107831

The software Jivejdon (through version 5.0 ) is vulnerable to a cross-site request forgery (CSRF) vulnerability. The root cause is the presence of GET endpoints that lack anti-CSRF tokens, allowing remote attackers to perform state-changing actions. By luring authenticated users into clicking cra...

CVE-2026-107830

The Jivejdon software (from commit e0306088 through ee67a65e ) is vulnerable to a missing rate limiting issue on the unauthenticated /account/smsVRAction endpoint. This endpoint is handled by SmsQQAction , and the lack of restrictions allows for unlimited SMS sending. An attacker can first load n...

CVE-2026-107829

Jivejdon versions through 5.0 are vulnerable to a weak password storage issue. The application uses ToolsUtil.hash() in AccountDaoSql to store account passwords as unsalted MD5 digests . If an attacker gains access to the user table via database access or SQL injection , they can crack the passwo...

CVE-2026-107828

Jivejdon versions through 5.0 are vulnerable to an authentication bypass due to the use of weak credentials. The root cause is located in OAuthAccountServiceImp.transferSina(), which sets a user's password to the first four digits of their public Weibo ID during OAuth registration. This allows un...

CVE-2026-107801

Jivejdon versions through 5.0 are vulnerable to a stored cross-site scripting (XSS) flaw. The root cause is the application's handling of attacker-supplied Content-Type headers during attachment uploads. An authenticated attacker can upload a file declared as text/html , which the UploadShowActio...

CVE-2026-107800

Jivejdon versions through 5.0 are vulnerable to a stored cross-site scripting (XSS) flaw. The root cause is that receiveshortmessage.jsp renders unfiltered message bodies, while the ToolsUtil.convertURL() function fails to strip out malicious scripts. This allows authenticated attackers to inject...

CVE-2026-107799

Jivejdon through version 5.0 contains a stored cross-site scripting (XSS) vulnerability. The flaw exists because the application renders unsanitized forum message bodies via messageListBody.jsp when using filter="false" and non-escaping default filters. This allows authenticated attackers to inje...

CVE-2026-107798

The software jivejdon (from commit 595d8d22 through commit ee67a65e) is susceptible to a stored cross-site scripting (XSS) vulnerability within the default-enabled TextStyle filter . The root cause is the insertion of unvalidated URLs into anchor href attributes. This allows authenticated attacke...