CVE-2026-85831: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to disclose information locally...

CVE-2026-110124: Authorization Bypass Through User-Controlled Key

FastBee through 2.1.0 contains an insecure direct object reference vulnerability in DeviceController that allows authenticated low-privilege users to read and modify other tenants' devices by supplying sequential device IDs. Self-registered attackers can enumerate deviceId or serialNumber values ...

CVE-2026-100136: Integer Overflow or Wraparound

CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not requir...

CVE-2026-110142: Use After Free

Use after free in FileSystem in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-68836: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows kernel32.dll allows an authorized attacker to elevate privileges locally...

CVE-2026-83845: Authentication Bypass by Spoofing

Improper privilege management in Windows Internet wininet.dll allows an authorized attacker to perform spoofing locally...

CVE-2026-97834: Out-of-bounds Read

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...

CVE-2026-89120: Initialization of a Resource with an Insecure Default

A regression caused by an API change in SAP ABAP Platform reintroduces a previously fixed authorization weakness. The session manager can be opened in single transaction mode, including from FLP. A low-privileged attacker could exploit this to bypass restrictions via specially crafted requests,...

CVE-2026-70301: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-89271: Unrestricted Upload of File with Dangerous Type

The WP-BusinessDirectory WordPress plugin through 4.0.2 does not restrict the type or destination of files saved by an unauthenticated upload handler, allowing unauthenticated attackers to write files with arbitrary content to arbitrary locations, though not to execute code on a default server...

CVE-2026-96949: Concurrent Execution using Shared Resource with Improper Synchronization

Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...

CVE-2026-110161: Use After Free

Use after free in Network in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Critical...

CVE-2026-108128: Out-of-bounds Read

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...

CVE-2026-83768: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-74040: Missing Authorization

Wazuh versions from 3.9.0 before 4.14.8 contain an arbitrary file overwrite vulnerability in MasterHandler.processfilesfromworker allowing a cluster worker to overwrite protected master files. Attackers controlling a worker can use a trailing-slash basename bypass and missing extravalid enforceme...

CVE-2026-96245: Out-of-bounds Read

Out-of-bounds read in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to disclose information over a network...

CVE-2026-109143: Improper Privilege Management

A vulnerability was determined in calcom cal.com and cal.diy up to 6.2.0. This vulnerability affects the function credentials.delete of the file /api/trpc/credentials/delete of the component Credentials Handler. This manipulation of the argument teamId causes improper privilege management. The...

CVE-2026-70089: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code over a network...

CVE-2026-83635: Out-of-bounds Read

Out-of-bounds read in DNS Server allows an unauthorized attacker to deny service over a network...

CVE-2026-97761: Stack-based Buffer Overflow

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

CVE-2026-79608: Undefined Security Weakness

The workaround for XSA-433 Zenbleed, CVE-2023-20593 was later re-worked to better integrate with other manipulations of the same MSR. In this rework an inverted conditional was introduced, resulting in the workaround to not be applied when needed and vice versa. For more details, see:...

CVE-2026-102702: Undefined Security Weakness

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. 1 XSA-437 CVE-2023-34321 addressed issues with overflows in calculations involved in guests flushing caches through GNTTABOPcacheflush. Unfortunately the fix there...

CVE-2026-110005: Undefined Security Weakness

The periphery agent's container-management functionality of Komodo version 2.2.0 contains an OS command injection vulnerability. An authenticated low-privileged user with Execute, or Read plus Logs, permission on a managed server can supply shell metacharacters in a container name processed by th...

CVE-2026-107460: Server-Side Request Forgery (SSRF)

Server-Side Request Forgery SSRF protection in the UrlImageConverter component of Apache Fesod Incubating fesod-sheet 2.0.2-incubating can be bypassed through DNS rebinding. When an application accepts an attacker-controlled image URL for spreadsheet writing, the converter checks the hostname's...

CVE-2026-102699: Undefined Security Weakness

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. 1 XSA-437 CVE-2023-34321 addressed issues with overflows in calculations involved in guests flushing caches through GNTTABOPcacheflush. Unfortunately the fix there...

CVE-2026-102194: Use After Free

Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-104935: Authentication Bypass by Spoofing

Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands. This does not impact ICS version 22.7R2.14 or prior...

CVE-2026-96234: Origin Validation Error

Origin validation error in .NET allows an unauthorized attacker to disclose information over a network...

Microsoft .NET: CVE-2026-96234: .NET Information Disclosure Vulnerability

Origin validation error in .NET allows an unauthorized attacker to disclose information over a network...

CVE-2026-96233: Out-of-bounds Write

Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network...

CVE-2026-96956: Stack-based Buffer Overflow

Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-102700: Undefined Security Weakness

With its original introduction, GNTTABcacheflush was made available uniformly. XSA-232 CVE-2017-14318 then covered an omitted NULL pointer check, yet the addition of that check failed to adjust the subsequent error path. That error path fails to drop a page reference in case the specified page is...

CVE-2026-92892: Improper Neutralization of Argument Delimiters in a Command

Potential arbitrary code execution, under specific configurations...

Microsoft .NET: CVE-2026-70007: .NET Framework Remote Code Execution Vulnerability

Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network...

Microsoft SQL Server: CVE-2026-96956: SQL Server Elevation of Privilege Vulnerability

Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network...

Microsoft Visual Studio: CVE-2026-96225: .NET Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...

CVE-2026-70197: Out-of-bounds Write

Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network...

CVE-2026-96225: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...

Microsoft .NET: CVE-2026-70174: .NET Remote Code Execution Vulnerability

Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network...

CVE-2026-96236: Allocation of Resources Without Limits or Throttling

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...

Microsoft .NET: CVE-2026-85363: .NET Framework Elevation of Privilege Vulnerability

Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network...

Microsoft .NET: CVE-2026-96233: ASP.NET Core Denial of Service Vulnerability

Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network...

Microsoft .NET: CVE-2026-83520: .NET Remote Code Execution Vulnerability

Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network...

CVE-2026-70162: Asymmetric Resource Consumption (Amplification)

A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET web application. A remote unauthenticated attacker could exploit this...

Microsoft Visual Studio: CVE-2026-70162: .NET Denial of Service Vulnerability

A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET web application. A remote unauthenticated attacker could exploit this...

CVE-2026-96938: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Distributed File System DFS allows an authorized attacker to elevate privileges locally...

CVE-2026-70007: Out-of-bounds Write

Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network...

CVE-2026-85363: Integer Overflow or Wraparound

Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-79609: Undefined Security Weakness

XPTI Xen Page Table Isolation was introduced to mitigate Meltdown CVE-2017-5754, one aspect of XSA-254. This involves copying 64-bit PV guest page table entries from guest-chosen root page tables to the Xen- chosen one which is in actual use by hardware. To read the guest root page table, the...

CVE-2026-79611: Undefined Security Weakness

For XSA-308 logic was introduced, as VMX VMEntry checks do not like the exact combination of state which occurs when DB in intercepted, Single Stepping is active, and blocked by STI/MovSS is active, despite this being a legitimate state to be in. The resulting VMEntry failure is fatal to the gues...