Microsoft Windows: CVE-2026-100218: Remote Desktop Gateway Service Remote Code Execution Vulnerability

Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-100225: Windows Storage Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally...

CVE-2026-100225: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-100215: Microsoft Graphics Component Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code locally...

CVE-2026-100215: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code locally...

Microsoft Windows: CVE-2026-100216: Windows Storage Elevation of Privilege Vulnerability

Stack-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally...

CVE-2026-100216: Stack-based Buffer Overflow

Stack-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-100200: Windows Update Service Elevation of Privilege Vulnerability

Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-100201: Windows Client License Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Client License Service allows an authorized attacker to elevate privileges locally...

CVE-2026-102855: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network...

Microsoft Office: CVE-2026-102855: Microsoft Office Visio Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network...

CVE-2026-100201: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Client License Service allows an authorized attacker to elevate privileges locally...

CVE-2026-83852: Use After Free

Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-104348: Heap-based Buffer Overflow

Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-89279: Cross-Site Request Forgery (CSRF)

Cross-Site request forgery CSRF vulnerability in AuthTake Technology Inc. Authtake allows Encryption Brute Forcing. This issue affects authtake: from v1.3 before v1.4...

CVE-2026-85372: Use After Free

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

Microsoft Office: CVE-2026-70214: Microsoft Office Excel Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...

CVE-2026-102205: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...

CVE-2026-102208: Use After Free

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...

CVE-2026-102210: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network...

CVE-2026-102209: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-102209: Microsoft Graphics Component Elevation of Privilege Vulnerability

Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-102207: Windows Kernel Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Kernel allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-100202: Windows Message Queuing Queue Manager Remote Code Execution Vulnerability

Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network...

CVE-2026-107460: Server-Side Request Forgery (SSRF)

Server-Side Request Forgery SSRF protection in the UrlImageConverter component of Apache Fesod Incubating fesod-sheet 2.0.2-incubating can be bypassed through DNS rebinding. When an application accepts an attacker-controlled image URL for spreadsheet writing, the converter checks the hostname's...

CVE-2026-100203: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally...

CVE-2026-85368: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally...

CVE-2026-97010: Use After Free

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

CVE-2026-91013: Improper Neutralization of Input During Web Page Generation

Adobe Commerce is affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field,...

CVE-2026-65149: Out-of-bounds Write

NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds write. A successful exploit of this vulnerability might lead to denial of service, information disclosure, and data tampering...

Microsoft Windows: CVE-2026-85318: Servicing Stack Updates Elevation of Privilege Vulnerability

Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally...

CVE-2026-85318: Heap-based Buffer Overflow

Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83506: Servicing Stack Updates Elevation of Privilege Vulnerability

Untrusted search path in Servicing Stack Updates allows an authorized attacker to elevate privileges locally...

CVE-2026-88161: Use After Free

Use after free in Windows Local Security Authority LSA allows an authorized attacker to elevate privileges locally...

CVE-2026-75826: Improper Neutralization of Special Elements used in an OS Command

Command injection in the backup function in Teltonika Networks RUTOS 7.22 before 7.24.6 and 7.25 before 7.25.2 RUT, RUTX, RUTM, RUTC, ATRM, CAP, OXA, DAP, TRB, OTD, and EBG devices, RUTOS 7.22 before 7.25.2 TAP devices, and TSWOS 1.9 before 1.10.4 TSW and SWM devices allows a remote authenticated...

CVE-2026-83923: Relative Path Traversal

Relative path traversal in OpenSSH for Windows allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-83923: Microsoft OpenSSH for Windows Remote Code Execution Vulnerability

Relative path traversal in OpenSSH for Windows allows an unauthorized attacker to execute code over a network...

CVE-2026-108944: Improper Control of Generation of Code

A security vulnerability has been detected in repository RAE up to a4d18c4db766419cbe7cb8c02cd9f7ceb0ec9041. Affected by this vulnerability is the function getobjfromstr of the file src/utils/modelutils.py of the component Config-Driven Model Instantiation. Such manipulation of the argument Targe...

CVE-2026-101899: Protection Mechanism Failure

Axios is a promise-based HTTP client for the browser and Node.js. From 1.15.0 until 1.20.0, Axios shouldBypassProxy treats the NOPROXY CIDR form as a textual hostname suffix instead of evaluating the network range. A request targets an address covered by a CIDR entry in NOPROXY while a proxy is...

CVE-2026-88157: Heap-based Buffer Overflow

Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network...

CVE-2026-96927: Out-of-bounds Read

Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally...

CVE-2026-83704: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

CVE-2026-96535: Improper Neutralization of Input During Web Page Generation

Cross-Site Scripting on the YouMind portal, specifically in the avatar update endpoint, when setting a profile picture via an arbitrary URL. This occurs due to a lack of sanitisation and validation of SVG content when setting an SVG image containing embedded JavaScript code as the avatar. The fil...

CVE-2026-97757: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

CVE-2026-96202: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network...

CVE-2026-77361: Improper Link Resolution Before File Access

obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, read access-control list ACL checks use a lexical vault-relative path while containment checks use the resolved path. An in-vault symlink under an allowed glob that resolves into a denied...

CVE-2026-16753: Undefined Security Weakness

Incorrect authorization in the library-query execution endpoint in Lowcoder version, up to and including 2.4.10, allows an authenticated administrator or developer in one organization to execute a library query belonging to another organization via a crafted request containing the victim...

Microsoft Windows: CVE-2026-70277: Windows Fast FAT File System Driver Information Disclosure Vulnerability

Out-of-bounds read in Windows Fast FAT Driver allows an unauthorized attacker to disclose information locally...

CVE-2026-70302: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-85809: Heap-based Buffer Overflow

Remote Code Execution in Windows Routing and Remote Access Service RRAS allows attacker to gain an unauthorized access to victim's machine...