24507 matches found
Microsoft Account Spoofing Vulnerability
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Account allows an unauthorized attacker to perform spoofing over a network...
Azure Logic Apps Elevation of Privilege Vulnerability
Improper limitation of a pathname to a restricted directory 'path traversal' in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network...
Azure Front Door Elevation of Privilege Vulnerability
Improper access control in Azure Front Door AFD allows an unauthorized attacker to elevate privileges over a network...
Word Copilot Information Disclosure Vulnerability
Improper neutralization of escape, meta, or control sequences in Copilot allows an unauthorized attacker to disclose information over a network...
Azure Data Explorer Information Disclosure Vulnerability
Exposure of sensitive information to an unauthorized actor in Azure Data Explorer allows an unauthorized attacker to disclose information over a network...
Azure Resource Manager Elevation of Privilege Vulnerability
Improper access control in Azure Resource Manager allows an authorized attacker to elevate privileges over a network...
Copilot Studio Information Disclosure Vulnerability
Exposure of Sensitive Information to an Unauthorized Actor in Copilot Studio allows a unauthenticated attacker to view sensitive information through network attack vector...
Azure Entra ID Elevation of Privilege Vulnerability
Azure Entra ID Elevation of Privilege Vulnerability...
M365 Copilot Information Disclosure Vulnerability
Improper validation of specified type of input in M365 Copilot allows an unauthorized attacker to disclose information over a network...
Capstone doesn't check Skipdata length, leading to cs_insn.bytes heap buffer overflow
...
slab allows out-of-bounds access in `get_disjoint_mut` due to incorrect bounds check
...
Libsndfile <=1.2.2 contains a memory leak vulnerability in the mpeg_l3_encoder_init() function within the mpeg_l3_encode.c file.
...
In MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation), there is an integer overflow for a large update size to resize() in kdb_log.c. An authenticated attacker can cause an out-of-bounds write and kadmind daemon crash.
...
wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory
...
Libxml2: libxml2: denial of service via crafted xml catalogs
...
Libxml2: unbounded relaxng include recursion leading to stack overflow
...
Libxml2: libxml2: denial of service via uncontrolled recursion in xml catalog processing
...
netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm
...
HID: multitouch: fix slab out-of-bounds access in mt_report_fixup()
...
jbd2: prevent softlockup in jbd2_log_do_checkpoint()
...
In the eap-mschapv2 plugin (client-side) in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted message of size 6 through 8, and cause an integer underflow that potentially results in a heap-based buffer overflow.
...
ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value
...
Libsoup: out-of-bounds read in libsoup websocket frame processing
...
getnetbyaddr and getnetbyaddr_r leak stack contents to DNS resovler
...
Chromium: CVE-2026-0908 Use after free in ANGLE
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-0907 Incorrect security UI in Split View
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-0906 Incorrect security UI
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-0905 Insufficient policy enforcement in Network
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-0904 Incorrect security UI in Digital Credentials
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-0903 Insufficient validation of untrusted input in Downloads
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-0902 Inappropriate implementation in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-0901 Inappropriate implementation in Blink
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-0900 Inappropriate implementation in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-0899 Out of bounds memory access in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
Improper privilege management in Microsoft Edge Chromium-based allows an authorized attacker to bypass a security feature locally...
PowerApps Desktop Client Remote Code Execution Vulnerability
Improper authorization in Microsoft Power Apps allows an authorized attacker to execute code over a network...
Denial of Service in Keras via Excessive Memory Allocation in HDF5 Metadata
...
SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf
...
f2fs: ensure node page reads complete before f2fs_put_super() finishes
...
f2fs: use global inline_xattr_slab instead of per-sb slab cache
...
scs: fix a wrong parameter in __scs_magic
...
drm/msm/dpu: Add missing NULL pointer check for pingpong interface
...
crypto: af_alg - zero initialize memory allocated via sock_kmalloc
...
tracing: Do not register unsupported perf events
...
drm/i915/gem: Zero-initialize the eb.vma array in i915_gem_do_execbuffer
...
crypto: seqiv - Do not use req->iv after crypto_aead_encrypt
...
iommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED
...
wifi: mac80211: Discard Beacon frames to non-broadcast address
...