CVE-2026-97740: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network...

CVE-2026-103844: Out-of-bounds Write

Dimension is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-85805: Improperly Implemented Security Check for Standard

Improperly implemented security check for standard in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-53418: Improper Authorization in Handler for Custom URL Scheme

Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace for Android before version 7.2.1 may allow an unauthenticated user to conduct an escalation of privilege via network access...

CVE-2026-54086: Allocation of Resources Without Limits or Throttling

SLE API for Java is an implementation of CCSDS Space Link Extension Services. Prior to 5.1.7, the ISP1 PDU handling path decodes an attacker-controlled body length and allocates a byte array without an upper bound, while malformed or truncated input can also terminate reads unexpectedly, allowing...

CVE-2026-85927: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...

CVE-2026-96947: Use After Free

Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...

CVE-2026-69916: Integer Overflow or Wraparound

Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally...

CVE-2026-97017: Use After Free

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

CVE-2026-70571: Stack-based Buffer Overflow

Stack-based buffer overflow in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network...

CVE-2026-83722: Use After Free

Use after free in Microsoft Local Security Authority Server lsasrv allows an authorized attacker to elevate privileges locally...

CVE-2026-70048: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Resilient File System ReFS allows an authorized attacker to elevate privileges locally...

Microsoft Office: CVE-2026-97012: Microsoft Office Outlook Remote Code Execution Vulnerability

Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...

CVE-2026-103839: Out-of-bounds Write

Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

Microsoft Windows: CVE-2026-70252: Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability

Use after free in Virtual Hard Disk VHD Miniport Driver allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83870: Windows Aggregated Data Platform Service Information Disclosure Vulnerability

Out-of-bounds read in Windows Aggregated Data Platform Service allows an authorized attacker to disclose information locally...

CVE-2026-96248: Stack-based Buffer Overflow

Stack-based buffer overflow in Windows Host Guardian Service allows an unauthorized attacker to deny service over a network...

CVE-2026-88195: Buffer Over-read

Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network...

CVE-2026-17487: Exposure of Sensitive Information to an Unauthorized Actor

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to enumerate user profiles due to the return of distinct error codes during the sign-on process...

CVE-2026-85869: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-103554: Windows Broadcast DVR User Service Elevation of Privilege Vulnerability

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...

CVE-2026-103554: Use After Free

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...

CVE-2026-88079: NULL Pointer Dereference

Null pointer dereference in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

CVE-2026-96310: Use After Free

Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-74047: Exposure of Sensitive Information to an Unauthorized Actor

Wazuh from 4.0.0 before 4.14.8 contains an information disclosure vulnerability that allows low-privileged users with agent:read to retrieve the plaintext authd.pass enrollment password via the unmasked agent configuration endpoint. Attackers holding the default readonly role can request the auth...

CVE-2026-94453: Use After Free

Libreswan's pluto daemon has a use-after-free vulnerability when a client connecting using IKE over TCP closes the connection and another packet retransmit or malicious is received for the same tuple. IKE state is retained in memory after the client closes the connection, storing a pointer to...

CVE-2026-83706: Use After Free

Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally...

CVE-2026-97334: Improper Handling of Highly Compressed Data (Data Amplification)

The network messaging layer contained improper handling of highly compressed data affecting service availability. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommServe server, Web Server, Command Center, MediaAgents, clients, and...

CVE-2026-83758: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to execute code locally...

CVE-2026-77206: NULL Pointer Dereference

Libreswan's IKEv2 state machine has a null pointer dereference bug in the EAP handling code for authentication. As a result of inconsistency within the IKEv2 state machine code, this bug can be triggered by any IKEv2 connection, even if EAP is not configured at all. The error is caused by a...

CVE-2026-100116: Improper Certificate Validation

CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploit depends on conditions beyond the attacker's...

CVE-2026-69898: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-83857: Stack-based Buffer Overflow

Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...

CVE-2026-69798: Use After Free

Use after free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-105003: HID Class Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally...

CVE-2026-86016: Improper Neutralization of Input During Web Page Generation

VNote is a note-taking platform. Prior to 4.3.0, VNote uses the assignment preNode.innerHTML = pmetaData in src/data/extra/web/js/markdownit.js to insert YAML frontmatter metadata into a pre element before the protectFromXss sanitization path runs. Opening an attacker-supplied Markdown note can...

CVE-2026-97840: Out-of-bounds Read

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...

CVE-2026-88099: Uncaught Exception

Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network...

CVE-2026-96322: Use After Free

Use after free in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally...

CVE-2026-87706: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally...

CVE-2026-97841: Out-of-bounds Read

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...

CVE-2026-92464: Improper Input Validation

Adobe Commerce is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user...

CVE-2026-92910: Incorrect Authorization

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and limited write access. Exploitation of this issue does not require user...

CVE-2026-96119: Improper Control of Generation of Code

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information or execute arbitrary code on the system due to improper data sanitization by the HTTP Server Administration web application...

CVE-2026-83667: Out-of-bounds Read

Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service over a network...

CVE-2026-85319: Allocation of Resources Without Limits or Throttling

Allocation of resources without limits or throttling in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...

CVE-2026-83875: Out-of-bounds Read

Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally...

CVE-2026-83796: Use After Free

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-85356: Out-of-bounds Read

Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-83868: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges locally...