28424 matches found
Chromium: CVE-2026-76037 Link following in CredentialProvider
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-76035 Inappropriate implementation in Media
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-76034 Buffer overflow in WebGL
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-76033 Inappropriate implementation in CORS
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Libdm: lvm2: libdm: denial of service via uncontrolled recursion in config parser
...
Enforce maximum recursion depth in encoding/asn1
...
Fix Javascript regexp context tracking in html/template
...
Apply ReadHeaderTimeout when doing unencrypted HTTP/2 check in net/http
...
go-chi chi 0.9.0 before 5.3.0 IP Spoofing via X-Forwarded-For
...
go-chi chi before 5.3.0 IP Spoofing via RealIP Middleware
...
Add recursion depth guard during decode in encoding/xml
...
Avoid quadratic complexity in resolvePath in net/url
...
Limit handshake messages we are willing to accept post-handshake in crypto/tls
...
Ignore unrelated, unauthenticated hashes in Lookup in golang.org/x/mod/sumdb
...
Fix transparency log tile verification bypass in golang.org/x/mod/sumdb/tlog
...
Dnsmasq: infinite loop dos in dnssec nsec/nsec3 type bitmap parsing
...
Unbounded Memory Growth in QUIC Server Incoming Channel Queue
...
Expat Denial of Service via storeAtts() Quadratic Complexity
...
Packer vulnerable to arbitrary file write via crafted plugin archive during installation
...
Vitess: Missing authorization on vttablet /debug/vrlog exposes live VReplication SQL data
...
Vim: Arbitrary Ex Command Execution in C Omni-Completion
...
netfilter: nft_payload: fix mask build for partial field offload
...
Azure Data Manager for Energy Remote Code Execution Vulnerability
Integer overflow or wraparound in Azure Data Manager for Energy allows an authorized attacker to execute code over a network...
Azure Arc Elevation of Privilege Vulnerability
Use of incorrectly-resolved name or reference in Azure Arc allows an unauthorized attacker to elevate privileges over a network...
Microsoft Entra ID Elevation of Privilege Vulnerability
Server-side request forgery ssrf in Azure Active Directory allows an authorized attacker to elevate privileges over a network...
Azure Stack HCI Information Disclosure Vulnerability
Observable response discrepancy in Azure Stack HCI allows an unauthorized attacker to disclose information over a network...
Microsoft Exchange Online Elevation of Privilege Vulnerability
Server-side request forgery ssrf in Microsoft Exchange Online allows an unauthorized attacker to elevate privileges over a network...
Azure Arc Elevation of Privilege Vulnerability
Incorrect authorization in Azure Arc allows an unauthorized attacker to elevate privileges over a network...
Azure Logic Apps Elevation of Privilege Vulnerability
Improper limitation of a pathname to a restricted directory 'path traversal' in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network...
Azure Data Factory Information Disclosure Vulnerability
Server-side request forgery ssrf in Azure Data Factory allows an unauthorized attacker to disclose information over a network...
Microsoft Fabric Elevation of Privilege Vulnerability
Relative path traversal in Microsoft Fabric allows an authorized attacker to elevate privileges over a network...
Windows Remote Help Defense Spoofing Vulnerability
Uncontrolled search path element in Windows Remote Help Defense allows an authorized attacker to perform spoofing locally...
Microsoft Word Information Disclosure Vulnerability
Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...
Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability
Improper neutralization of argument delimiters in a command 'argument injection' in Azure Managed Instance for Apache Cassandra allows an unauthorized attacker to execute code over a network...
Microsoft Entra ID Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network...
Azure SQL Database Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an sql command 'sql injection' in Azure SQL Database allows an authorized attacker to elevate privileges over a network...
Microsoft Copilot in Azure Information Disclosure Vulnerability
Server-side request forgery ssrf in Microsoft Copilot in Azure allows an authorized attacker to disclose information over a network...
Azure Virtual Machines Elevation of Privilege Vulnerability
Server-side request forgery ssrf in Azure Virtual Machines allows an authorized attacker to elevate privileges over a network...
Azure SQL Database Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an sql command 'sql injection' in Azure SQL Database allows an authorized attacker to elevate privileges over a network...
Microsoft Remote Help Denial of Service Vulnerability
Uncontrolled search path element in Windows Remote Help allows an authorized attacker to deny service locally...
Azure SQL Database Elevation of Privilege Vulnerability
Server-side request forgery ssrf in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network...
Microsoft Partner Center Information Disclosure Vulnerability
Authorization bypass through user-controlled key in Microsoft Partner Center allows an unauthorized attacker to disclose information over a network...
Azure SQL Database Elevation of Privilege Vulnerability
Improper access control in Azure SQL Database allows an authorized attacker to elevate privileges over a network...
Azure Data Factory Elevation of Privilege Vulnerability
Improper verification of cryptographic signature in Azure Data Factory allows an unauthorized attacker to elevate privileges over a network...
Microsoft Copilot Information Disclosure Vulnerability
Improper neutralization of special elements used in a command 'command injection' in Microsoft Copilot allows an unauthorized attacker to disclose information over a network...
PostgreSQL pg_trgm picksplit reads past end of buffer
...
PostgreSQL refint plan cache type confusion executes arbitrary code
...
PostgreSQL fuzzystrmatch writes effectively-arbitrary addresses, via integer wraparound
...