374385 matches found
CVE-2026-55000 Windows USB Print Driver Elevation of Privilege Vulnerability
...
CVE-2026-54990 Remote Desktop Client Remote Code Execution Vulnerability
...
CVE-2026-50697 Windows Common Log File System Driver Elevation of Privilege Vulnerability
...
CVE-2026-50696 Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability
...
CVE-2026-54987 Windows Overlay Filter Elevation of Privilege Vulnerability
...
CVE-2026-54989 Quality Windows Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability
...
CVE-2026-54129 Windows Hyper-V Elevation of Privilege Vulnerability
...
CVE-2026-50695 Windows Active Directory Federation Services Denial of Service Vulnerability
...
CVE-2026-54983 Windows Active Directory Federation Services Denial of Service Vulnerability
...
CVE-2026-50663 Game: Age of Empires II: Definitive Edition Remote Code Execution Vulnerability
...
CVE-2026-45496 Visual Studio Code Security Feature Bypass Vulnerability
...
CVE-2026-47282 GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability
...
CVE-2026-50506 OData for ASP.NET and ASP.NET Core Denial of Service Vulnerability
...
CVE-2026-49784 Microsoft Windows App Store Elevation of Privilege Vulnerability
...
CVE-2026-49177 Windows TCP/IP Information Disclosure Vulnerability
...
CVE-2026-49173 Windows Kernel Elevation of Privilege Vulnerability
...
CVE-2026-49174 DNS Client Tampering Vulnerability
...
CVE-2026-49175 Windows DNS Client Elevation of Privilege Vulnerability
...
CVE-2026-49172 Windows FTP Service Remote Code Execution Vulnerability
...
CVE-2026-49171 Windows Speech Runtime Elevation of Privilege Vulnerability
...
CVE-2026-49176 Windows WalletService Elevation of Privilege Vulnerability
...
CVE-2026-49169 Windows DNS Server Remote Code Execution Vulnerability
...
CVE-2026-49170 Windows StateRepository API Server file Elevation of Privilege Vulnerability
...
CVE-2026-49168 Storage Spaces Direct Elevation of Privilege Vulnerability
...
CVE-2026-49166 Windows Print Configuration Elevation of Privilege Vulnerability
...
CVE-2026-49167 Windows Kernel Elevation of Privilege Vulnerability
...
CVE-2026-49165 Microsoft Windows App Store Information Disclosure Vulnerability
...
CVE-2026-49164 Windows Active Directory Domain Services Remote Code Execution Vulnerability
...
CVE-2026-49162 Microsoft Brokering File System Elevation of Privilege Vulnerability
...
CVE-2026-48571 Windows App Package Installer Elevation of Privilege Vulnerability
...
CVE-2026-48572 Windows App Package Installer Elevation of Privilege Vulnerability
...
CVE-2026-42990 SQL Server ODBC driver Elevation of Privilege Vulnerability
...
CVE-2026-42975 Windows Bluetooth Port Driver Remote Code Execution
...
CVE-2026-42900 Microsoft Windows App Store Elevation of Privilege Vulnerability
...
CVE-2026-34349 Windows Media Information Disclosure Vulnerability
...
CVE-2026-34346 Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability
...
CVE-2026-47296 Microsoft SQL Server Elevation of Privilege Vulnerability
...
CVE-2026-42982 Windows Secure Kernel Mode Elevation of Privilege Vulnerability
...
CVE-2026-48561 Microsoft Edge Copilot Remote Code Execution Vulnerability
...
CVE-2026-15429 Privilege Escalation via Improper Input Sanitization in TP-Link Archer VX1800v
A privilege escalation vulnerability exists in the HTTP authentication component in Archer VX1800v v1. Improper handling of user-controlled input may allow newline characters to be injected into internally constructed configuration data. An authenticated user with sufficient privileges may be abl...
CVE-2026-15428 OS Command Injection in TR-069 (CWMP) Management Interface in TP-Link Archer VX1800v
An OS command injection vulnerability exists in Archer VX800v v1 due to insufficient input sanitization of the domain name parameter. An adjacent attacker who can access the relevant HTTP interface can modify the parameter to inject shell metacharacters, resulting in arbitrary code execution with...
CVE-2026-15427 OS Command Injection in TR-069 (CWMP) Management Interface in TP-Link Archer VX1800v
An OS command injection vulnerability exists in the TR-069 / CWMP management interface of Archer VX1800v v1 due to insufficient input validation and sanitization of parameters, allowing crafted input to be executed as system-level commands. Exploitation requires specific conditions such as TR-069...
CVE-2026-15703 SourceCodester Simple and Nice Shopping Cart Script userproductdeletequery.php sql injection
A vulnerability was detected in SourceCodester Simple and Nice Shopping Cart Script 1.0. This vulnerability affects unknown code of the file /admin/userproductdeletequery.php. Performing a manipulation of the argument userid results in sql injection. It is possible to initiate the attack remotely...
CVE-2026-59891 Credential confusion in @sigstore/oci can leak registry credentials to an attacker-controlled registry
sigstore-js provides JavaScript libraries for interacting with Sigstore services. Prior to 0.7.1, getRegistryCredentials reads credentials from the Docker config file and selects an entry by checking whether any configured auth key contains the target registry string. Because this is a substring...
CVE-2026-14646 Nexus Repository 3 - Server-Side Request Forgery (SSRF) via HTTP Redirect
Nexus Repository 3 did not apply its existing Server-Side Request Forgery SSRF protections to HTTP redirect targets returned by proxy repository upstream servers. Any user with read access to a proxy repository backed by an attacker-controlled or compromised upstream server — including an anonymo...
CVE-2026-15702 tamagui config.ts updateConfig prototype pollution
A security vulnerability has been detected in tamagui up to 2.3.0. This affects the function updateConfig of the file code/core/web/src/config.ts. Such manipulation leads to improperly controlled modification of object prototype attributes. The attack may be performed from remote. Upgrading to...
CVE-2026-59888 jackson-databind: @JsonIgnore on a Record property is bypassed with a PropertyNamingStrategy
jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.15.0 until 2.18.8, 2.21.4, and 3.1.4, Java Records using a PropertyNamingStrategy can bypass @JsonIgnore because POJOPropertiesCollector.removeUnwantedIgnorals records an...
CVE-2026-59884 pyasn1 BER/CER/DER decoder denial of service via unbounded long-form tag IDs
pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the BER decoder shared by the CER and DER codecs parses long-form tags by accumulating continuation octets without an upper bound on the tag ID size, allowing a crafted input to force construction of an arbitrarily large integer with C...
CVE-2026-59885 pyasn1: Quadratic complexity in OBJECT IDENTIFIER and RELATIVE-OID processing allows denial of service
pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the BER, CER, and DER decoders process OBJECT IDENTIFIER and RELATIVE-OID values in quadratic time relative to the number of arcs, so a small crafted payload containing an OID with many arcs consumes excessive CPU per decode call and c...
CVE-2026-59886 pyasn1: Uncontrolled resource consumption when converting decoded REAL values
pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the univ.Real type converted its mantissa, base, and exponent value to a Python float using exact big-integer exponentiation. A BER, CER, or DER encoded REAL value only a few bytes long can carry a very large exponent, causing float...