CVE-2026-70247: Out-of-bounds Read

Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to execute code locally...

CVE-2026-70150: Use After Free

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

CVE-2026-85840: Files or Directories Accessible to External Parties

Files or directories accessible to external parties in Windows Event Viewer allows an authorized attacker to disclose information over a network...

CVE-2026-70282: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...

CVE-2026-70149: Heap-based Buffer Overflow

Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver csc.sys allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-70072: Windows Netlogon Denial of Service Vulnerability

Allocation of resources without limits or throttling in Windows Netlogon allows an authorized attacker to deny service over a network...

Microsoft Windows: CVE-2026-105009: Windows Server Update Service Elevation of Privilege Vulnerability

Incorrect default permissions in Windows Server Update Service allows an authorized attacker to elevate privileges locally...

CVE-2026-109407: Concurrent Execution using Shared Resource with Improper Synchronization

A security vulnerability has been detected in macrozheng mall up to 1.0.3. This issue affects some unknown processing of the file /order/generateOrder of the component Coupon Redemption. Such manipulation of the argument couponId leads to race condition. The attack may be performed from remote. T...

CVE-2026-74045: Heap-based Buffer Overflow

Wazuh from 3.12.0 before 4.14.8 contains a heap buffer overflow in fimgeneratealert where fulllog is sized from input but written bounded by OSMAXSTR. An enrolled agent can send a crafted FIM syscheck event to corrupt manager heap memory and deterministically crash wazuh-analysisd, causing a...

Microsoft Windows: CVE-2026-105006: HID Class Driver Elevation of Privilege Vulnerability

Use after free in HID class driver allows an unauthorized attacker to elevate privileges with a physical attack...

CVE-2026-88145: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-105010: Microsoft Windows Search Component Elevation of Privilege Vulnerability

Use after free in Microsoft Windows Search Component allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-103850: Out-of-bounds Read

Substance3D - Stager is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious...

CVE-2026-85816: Out-of-bounds Read

Out-of-bounds read in Windows Wi-Fi Driver allows an authorized attacker to disclose information over an adjacent network...

CVE-2026-83703: Out-of-bounds Read

Out-of-bounds read in Windows Wi-Fi Driver allows an unauthorized attacker to deny service over an adjacent network...

CVE-2026-83519: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network...

Microsoft Office: CVE-2026-96996: Microsoft Office Word Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally...

Microsoft Windows: CVE-2026-83584: Windows Smart Card Elevation of Privilege Vulnerability

Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally...

CVE-2026-83705: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of sensitive system information to an unauthorized control sphere in Windows HTTP.sys allows an authorized attacker to disclose information locally...

CVE-2026-108493: Missing Authorization

Missing Authorization vulnerability in Karolína Vyskočilová Pay for Payment for WooCommerce woocommerce-pay-for-payment allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Pay for Payment for WooCommerce: from n/a through 3.0.1...

CVE-2026-109687: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Link Whisper INC Link Whisper Free link-whisper allows Blind SQL Injection.This issue affects Link Whisper Free: from n/a through 0.9.7...

CVE-2026-109956: Improper Limitation of a Pathname to a Restricted Directory

NLTK through 3.10.3 contains a path traversal vulnerability in WekaClassifier that allows attackers to bypass nltk.pathsec containment by supplying unvalidated model paths. Attackers controlling the modelfilename or model argument can make the weka JVM write files via -d or probe files via -l...

CVE-2026-110108: Missing Authorization

MateCloud through 5.0.8 contains a missing authorization vulnerability that allows any authenticated user to manage object storage by calling the unprotected /api/v1/admin/storage endpoints in StorageController. Low-privilege or self-registered users can supply arbitrary bucket and objectName...

CVE-2026-110131: Missing Authorization

ThriveX-Server through 4.0 contains a missing authorization vulnerability in the GET /api/article and /api/article/id endpoints that allows unauthenticated attackers to read unpublished draft and soft-deleted articles. Attackers can request sequential article ids or supply isDraft=true or...

CVE-2026-110213: Authorization Bypass Through User-Controlled Key

Stonewuu ai-fusion-video through 1.2.0 contains an insecure direct object reference vulnerability that allows authenticated users to read other users' generation results by supplying arbitrary task ids. Attackers can enumerate auto-increment task ids on the image and video /items endpoints to...

CVE-2026-110233: Improper Neutralization of Special Elements used in an OS Command

Rovr through 0.10.3 on Windows contains an OS command injection vulnerability that allows attackers to execute commands by crafting malicious file names. Attackers can deliver a file named with shell metacharacters like & alongside a payload, which runs with user privileges when the file is opene...

CVE-2026-108488: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in IdeaBox Creations PowerPack Addons for Elementor powerpack-lite-for-elementor allows Stored XSS.This issue affects PowerPack Addons for Elementor: from n/a through 3.1.0...

Microsoft Windows: CVE-2026-70084: Windows Projected File System Information Disclosure Vulnerability

Improper access control in Windows Projected File System allows an authorized attacker to disclose information locally...

CVE-2026-109410: Incorrect Calculation

A vulnerability has been found in macrozheng mall 1.0.3 dcaa93b. The impacted element is the function OmsOrderServiceImpl.updateMoneyInfo of the file /order/update/moneyInfo of the component mall-admin/mall-portal. The manipulation leads to incorrect calculation. The attack can be initiated...

CVE-2026-85825: Concurrent Execution using Shared Resource with Improper Synchronization

Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...

CVE-2026-95636: Integer Overflow or Wraparound

Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-104341: Out-of-bounds Write

Adobe Framemaker is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-103835: Out-of-bounds Write

Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-108969: Incorrect Comparison

A security vulnerability has been detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. The impacted element is the function Session::checkLogin of the file include/session.php of the component Session Handler. Such manipulation of the argument...

Microsoft Windows: CVE-2026-108135: Windows Backup Engine Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Windows Backup Engine allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-105004: Windows Overlay Filter Elevation of Privilege Vulnerability

Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-105008: Windows Schannel Spoofing Vulnerability

No cwe for this issue in Windows Schannel allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-70222: Relative Path Traversal

Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally...

CVE-2026-109691: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BdThemes Prime Slider – Addons For Elementor bdthemes-prime-slider-lite allows Stored XSS.This issue affects Prime Slider – Addons For Elementor: from n/a through 4.7.1...

Microsoft Windows: CVE-2026-70207: Network Policy Server (NPS) Remote Code Execution Vulnerability

Heap-based buffer overflow in Network Policy Server NPS allows an authorized attacker to execute code over a network...

CVE-2026-110235: Improper Limitation of a Pathname to a Restricted Directory

MP Manager through 1.1.0 contains a path traversal vulnerability that allows attackers to write files outside the extraction folder by bypassing the non-recursive sanitizeEntryName filter. Attackers can craft TAR, 7z or RAR entries named ....//file that become ../file, creating or overwriting fil...

CVE-2026-83747: Out-of-bounds Read

Out-of-bounds read in Windows Error Reporting allows an authorized attacker to disclose information locally...

CVE-2026-96096: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network...

CVE-2026-96910: Untrusted Pointer Dereference

Untrusted pointer dereference in Microsoft Windows Search Component allows an authorized attacker to disclose information locally...

CVE-2026-97003: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

CVE-2026-84019: Use After Free

Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally...

CVE-2026-69984: Use After Free

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

CVE-2026-70072: Allocation of Resources Without Limits or Throttling

Allocation of resources without limits or throttling in Windows Netlogon allows an authorized attacker to deny service over a network...

CVE-2026-85812: Files or Directories Accessible to External Parties

Files or directories accessible to external parties in Windows Bind Filter Driver allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-83719: Servicing Stack Updates Information Disclosure Vulnerability

Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally...