414029 matches found
CVE-2026-105720 Microsoft Office SharePoint Elevation of Privilege Vulnerability
...
CVE-2026-108398 .NET Framework Security Feature Bypass Vulnerability
...
CVE-2026-105716 Microsoft Office Access Remote Code Execution Vulnerability
...
CVE-2026-105714 Microsoft Office Access Remote Code Execution Vulnerability
...
CVE-2026-105599 Microsoft Office PowerPoint Remote Code Execution Vulnerability
...
CVE-2026-105598 Microsoft Office Access Remote Code Execution Vulnerability
...
CVE-2026-108458 Remote Desktop Client Remote Code Execution Vulnerability
...
CVE-2026-96183 Windows Health and Optimized Experiences Service Information Disclosure Vulnerability
...
CVE-2026-102864 Microsoft Office SharePoint Spoofing Vulnerability
...
CVE-2026-102862 Microsoft Office SharePoint Elevation of Privilege Vulnerability
...
CVE-2026-102866 Microsoft Office SharePoint Elevation of Privilege Vulnerability
...
CVE-2026-102865 Microsoft Office SharePoint Information Disclosure Vulnerability
...
CVE-2026-102867 Microsoft Office Word Information Disclosure Vulnerability
...
CVE-2026-102863 Microsoft Office SharePoint Elevation of Privilege Vulnerability
...
CVE-2026-105596 Microsoft Office Access Remote Code Execution Vulnerability
...
CVE-2026-105597 Microsoft Office Access Remote Code Execution Vulnerability
...
CVE-2026-105592 Microsoft Office Access Remote Code Execution Vulnerability
...
CVE-2026-105591 Microsoft Office Access Remote Code Execution Vulnerability
...
CVE-2026-105595 Microsoft Office Access Remote Code Execution Vulnerability
...
CVE-2026-105593 Microsoft Office Access Remote Code Execution Vulnerability
...
CVE-2026-70098 Visual Studio Code Remote Code Execution Vulnerability
...
CVE-2026-102859 Microsoft Office SharePoint Spoofing Vulnerability
...
CVE-2026-102861 Microsoft Office SharePoint Elevation of Privilege Vulnerability
...
CVE-2026-102860 Microsoft Office SharePoint Elevation of Privilege Vulnerability
...
CVE-2026-102857 Microsoft Office Visio Remote Code Execution Vulnerability
...
CVE-2026-102858 Microsoft Office OneNote Remote Code Execution Vulnerability
...
CVE-2026-102856 Microsoft Office Visio Remote Code Execution Vulnerability
...
CVE-2026-102855 Microsoft Office Visio Remote Code Execution Vulnerability
...
CVE-2026-102238 Visual Studio Code Remote Code Execution Vulnerability
...
CVE-2026-102235 Visual Studio Code Remote Code Execution Vulnerability
...
CVE-2026-102233 Visual Studio Code Security Feature Bypass Vulnerability
...
CVE-2026-102232 Visual Studio Code Security Feature Bypass Vulnerability
...
CVE-2026-102234 Visual Studio Code Security Feature Bypass Vulnerability
...
CVE-2026-102231 Visual Studio Code Security Feature Bypass Vulnerability
...
CVE-2026-102229 Visual Studio Code Information Disclosure Vulnerability
...
CVE-2026-108468 Windows Installer Elevation of Privilege Vulnerability
...
CVE-2026-102227 Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
...
CVE-2026-108457 Microsoft Windows PDF Remote Code Execution Vulnerability
...
CVE-2026-108400 HEVC Video Extensions Remote Code Execution Vulnerability
...
CVE-2026-105728 Dynamics Business Central Information Disclosure Vulnerability
...
CVE-2026-105727 Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability
...
CVE-2026-105725 Windows Security App Elevation of Privilege Vulnerability
...
CVE-2026-103572 Visual Studio Tools for Applications and SQL Server Management Studio Remote Code Execution Vulnerability
...
CVE-2026-102850 Microsoft Office Access Remote Code Execution Vulnerability
...
CVE-2026-102849 Microsoft Office Access Remote Code Execution Vulnerability
...
CVE-2026-110240 Lancet through 2.3.9 SSRF Protection Bypass via netutil.IsInternalIP
Lancet through 2.3.9 contains an SSRF protection bypass vulnerability in netutil.IsInternalIP that misclassifies IPv6 private, link-local, CGNAT and transition addresses as external. Attackers can supply hostnames resolving to these address forms, including NAT64, 6to4 or Teredo embedding interna...
CVE-2026-110239 Rapyd Admin before 9.20.0 Stored XSS via rich-text Component
Rapyd Admin before 9.20.0 contains a stored cross-site scripting vulnerability in the x-rpd::rich-text Blade component that outputs bound model values as raw HTML without sanitisation. Authenticated users can set the bound property through the Livewire client API to store JavaScript that executes...
CVE-2026-110238 Rapyd Admin 9.0.0 before 9.20.0 Authorization Bypass via UsersModalEditEmbed Component
Rapyd Admin from 9.0.0 before 9.20.0 contains an authorization bypass vulnerability that allows authenticated company members with the default customer role to modify or delete arbitrary user accounts through the UsersModalEditEmbed Livewire component. Attackers can dispatch editUser or deleteUse...
CVE-2026-110237 Vifm 0.8.1-beta through 0.14.4 Unverified IPC FIFO Ownership Allows Cross-User Command Execution
Vifm 0.8.1-beta through 0.14.4 reuses a pre-existing IPC FIFO in the shared temporary directory without checking ownership, allowing local users to execute commands as another user. Attackers can pre-create a world-writable vifm-ipc-vifm FIFO and write IPC packets with -c and ! shell commands tha...
CVE-2026-110236 KDE Dolphin 24.08.0 through 26.08.2 OS Command Injection via Crafted Folder Name
KDE Dolphin 24.08.0 through 26.08.2 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted folder names substituted into the path placeholder. Attackers can embed a double quote and shell metacharacters in a directory name to escape quoting i...