CVE-2026-70097: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to perform spoofing locally...

CVE-2026-85374: Out-of-bounds Read

Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally...

CVE-2026-78628: Improper Input Validation

The Okta Credential Provider for Windows does not validate a serialized credential buffer before interpreting it as a Kerberos logon structure. The buffer size and packed string offsets are not checked. Processing a malformed buffer can cause the credential provider process to terminate...

CVE-2026-85796: Numeric Truncation Error

Numeric truncation error in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-106176: Missing Authorization

A missing authorization vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via Specially crafted HTTP requests...

CVE-2026-53709: Improper Authentication

MCP Context Forge is an MCP gateway and administrative platform. Prior to 1.0.2, mcpgateway/config.py and .env.example ship a known JWTSECRETKEY, while verifyjwttoken accepts HS256 tokens signed with that key and getcurrentuser creates a platform administrator when the token subject matches...

CVE-2026-96523: Out-of-bounds Write

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

Microsoft SharePoint: CVE-2026-96044: Microsoft Office SharePoint Elevation of Privilege Vulnerability

No cwe for this issue in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

CVE-2026-77093: Integer Overflow or Wraparound

CvFWD contained an integer overflow affecting service availability. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommServe, Webserver, Command Center, MediaAgents, Clients and HyperScale...

Microsoft Windows: CVE-2026-83852: Windows Bind Filter Driver Elevation of Privilege Vulnerability

Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-105016: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network...

CVE-2026-103966: Heap-based Buffer Overflow

Adobe Framemaker is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

Microsoft Windows: CVE-2026-70274: Windows Bind Filter Driver Elevation of Privilege Vulnerability

Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-96302: Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83687: Windows Connected User Experiences and Telemetry Elevation of Privilege Vulnerability

Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally...

CVE-2026-103840: Out-of-bounds Read

Substance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this...

CVE-2026-104922: Undefined Security Weakness

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

Microsoft Windows: CVE-2026-88127: Windows SMB Server Elevation of Privilege Vulnerability

Use after free in Windows SMB Server allows an authorized attacker to elevate privileges locally...

CVE-2026-18318: Improper Restriction of Excessive Authentication Attempts

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to perform brute-force attacks to obtain credentials due to improper authentication...

CVE-2026-103841: Out-of-bounds Read

Substance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this...

Microsoft Windows: CVE-2026-70299: Windows Bind Filter Driver Elevation of Privilege Vulnerability

Improper access control in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-105003: Heap-based Buffer Overflow

Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally...

CVE-2026-63316: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability has been identified in Payload CMS. Improper neutralization of input provided by user into "in" and "notin" query paramethers allows an authenticated attacker to perform SQL Injection attacks. This issue was fixed in version 3.90.0 and 4.0.0-canary.34...

Microsoft Windows: CVE-2026-96934: Windows DHCP Server Remote Code Execution Vulnerability

Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network...

CVE-2026-49264: Improper Neutralization of Input During Web Page Generation

OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. From 0.6.1 until 4.0.0, OAuthLib's RevocationEndpoint in oauthlib/oauth2/rfc6749/endpoints/revocation.py reflects an unvalidated callback request parameter into success and error response bodies when enablejsonp=Tru...

CVE-2026-85856: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Internet Connection Sharing ICS allows an authorized attacker to execute code over an adjacent network...

CVE-2026-85925: Improper Restriction of Communication Channel to Intended Endpoints

Improper restriction of communication channel to intended endpoints in Azure Key Vault allows an authorized attacker to elevate privileges over a network...

CVE-2026-69963: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally...

CVE-2026-70566: NULL Pointer Dereference

Null pointer dereference in Windows Schannel allows an authorized attacker to elevate privileges locally...

CVE-2026-70085: Missing Authorization

Missing authorization in DNS Server allows an authorized attacker to perform tampering locally...

CVE-2026-19940: Use After Free

The Bluetooth Classic Hands-Free Profile Audio Gateway implementation in subsys/bluetooth/host/classic/hfpag.c keeps its struct bthfpag objects in a static pool indexed by ACL connection index. On link teardown, hfpagdisconnected cancels ag-txwork and the per-call work items and then clears...

Microsoft SharePoint: CVE-2026-85932: Microsoft Office SharePoint Information Disclosure Vulnerability

Improper limitation of a pathname to a restricted directory 'path traversal' in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network...

CVE-2026-85918: Use After Free

Use after free in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85918: Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability

Use after free in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...

CVE-2026-83680: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-85806: Integer Underflow (Wrap or Wraparound)

Integer underflow wrap or wraparound in Network Policy Server NPS allows an unauthorized attacker to execute code over a network...

CVE-2026-103843: Use After Free

Substance3D - Stager is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-100217: Missing Authorization

Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-69945: Windows AppX Deployment Extensions Elevation of Privilege Vulnerability

Missing authorization in Windows AppX Deployment Extensions allows an authorized attacker to elevate privileges locally...

CVE-2026-83694: Out-of-bounds Read

Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-110255: Server-Side Request Forgery (SSRF)

Finsys Dockhand before 1.0.43 contains a response-disclosing server-side request forgery vulnerability that allows authenticated users to make the server fetch arbitrary URLs by supplying repository URL and stackfile values. Attackers can send stack templates pointing to internal services or clou...

CVE-2026-103842: Out-of-bounds Read

Substance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this...

CVE-2026-108184: Improper Certificate Validation

Improper certificate validation in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an information disclosure via network access...

CVE-2026-83754: Heap-based Buffer Overflow

Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network...

CVE-2026-105443: Improper Access Control

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 has insufficient isolation between servers sharing an install...

CVE-2026-93347: Improper Limitation of a Pathname to a Restricted Directory

Wazuh from 4.1.1 before 4.14.8 contains a path traversal vulnerability in the getlistfile helper that allows malicious cluster workers to read arbitrary files via unvalidated filename values. Attackers holding the cluster key can send DistributedAPI requests with traversal filenames to read...

CVE-2026-109523: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Affected by this vulnerability is an unknown functionality of the file Admin/getclinic.php of the component AJAX Endpoint. The manipulation of the argument city/cid results i...

Microsoft Windows: CVE-2026-83523: Windows Image Acquisition Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Image Acquisition allows an unauthorized attacker to execute code over a network...

CVE-2026-102850: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-70229: Windows Active Directory Domain Services Remote Code Execution Vulnerability

Incorrect authorization in Active Directory Domain Services allows an unauthorized attacker to execute code over a network...