412514 matches found
CVE-2026-109763: Undefined Security Weakness
Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...
CVE-2026-109764: Undefined Security Weakness
Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...
CVE-2026-109765: Concurrent Execution using Shared Resource with Improper Synchronization
Race condition, use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...
CVE-2026-109767: Exposure of Sensitive Information to an Unauthorized Actor
Information disclosure in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...
CVE-2026-109776: Concurrent Execution using Shared Resource with Improper Synchronization
Race condition in the XPCOM component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...
CVE-2026-109777: Exposure of Sensitive Information to an Unauthorized Actor
Information disclosure in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...
CVE-2026-109781: Uncontrolled Resource Consumption
Denial-of-service in the Printing: Output component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...
CVE-2026-109782: Undefined Security Weakness
Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox ESR 153.5 and Thunderbird 153.5...
CVE-2026-109783: Undefined Security Weakness
Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox ESR 153.5 and Thunderbird 153.5...
CVE-2026-110107: Authorization Bypass Through User-Controlled Key
RuoYi-Cloud-Plus through 6.0.0 contains an insecure direct object reference vulnerability that allows authenticated users to delete other users' social login bindings by supplying their socialId. Attackers can send DELETE /auth/unlock/socialId, which deletes syssocial rows by primary key without...
CVE-2026-110249: Undefined Security Weakness
A malicious, compromised, or MITM-controlled Exchange server can return a single well-formed SOAP response containing an element with enough attributes to keep Thunderbird's main thread CPU-bound for seconds to hours. This vulnerability was fixed in Thunderbird 158 and Thunderbird 153.5...
Microsoft Windows: CVE-2026-83720: Windows Kerberos Elevation of Privilege Vulnerability
Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally...
CVE-2026-96860: Out-of-bounds Read
Out-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose information locally...
CVE-2026-83792: Incorrect Authorization
Incorrect authorization in Windows Device Install Service allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-83792: Windows Device Install Service Elevation of Privilege Vulnerability
Incorrect authorization in Windows Device Install Service allows an authorized attacker to elevate privileges locally...
CVE-2026-14308: Improper Input Validation
Zohocorp ManageEngine Malware Protection Plus versions before 1.0.64.12 are affected by insufficient driver signature validation in MEARWService...
CVE-2026-89197: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in RUGGEDCOM CROSSBOW All versions V6.0. Affected devices do not properly validate or sanitize input in the Value field of notification conditions processed during the Notification Profile configuration. This could allow an authenticated attacker with specific...
CVE-2026-93886: Improper Neutralization of Input During Web Page Generation
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to execute arbitrary script code due to improper validation of user-supplied input...
CVE-2026-104346: Out-of-bounds Write
Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2026-54867: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Griden Responsive Slider responsive-slider allows Stored XSS.This issue affects Responsive Slider: from n/a through 0.1.9...
CVE-2026-102208: Use After Free
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...
CVE-2026-110237: Unverified Ownership
Vifm 0.8.1-beta through 0.14.4 reuses a pre-existing IPC FIFO in the shared temporary directory without checking ownership, allowing local users to execute commands as another user. Attackers can pre-create a world-writable vifm-ipc-vifm FIFO and write IPC packets with -c and ! shell commands tha...
CVE-2026-96918: Incorrect Authorization
Improper access control in Windows NTFS allows an authorized attacker to elevate privileges locally...
CVE-2026-83510: Time-of-check Time-of-use (TOCTOU) Race Condition
Time-of-check time-of-use toctou race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally...
CVE-2026-108135: Improper Link Resolution Before File Access
Improper link resolution before file access 'link following' in Windows Backup Engine allows an authorized attacker to elevate privileges locally...
CVE-2026-96919: Use After Free
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-108467: Microsoft PostScript Printer Driver Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an authorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-83864: Windows NTFS Information Disclosure Vulnerability
Improper access control in Windows NTFS allows an authorized attacker to disclose information locally...
CVE-2026-108495: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Brainstorm Force SureForms sureforms allows Stored XSS.This issue affects SureForms: from n/a through 2.12.7...
Microsoft Windows: CVE-2026-96252: Active Directory Federation Services (AD FS) Spoofing Vulnerability
Improper verification of cryptographic signature in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-88836: Undefined Security Weakness
Rejected reason: Red Hat Product Security determined this is not a security vulnerability. BusyBox internal TLS is intentionally minimal and documents in FEATUREWGETHTTPS that it does not verify peer identity or provide full TLS security; missing Finished verifydata checking is consistent with th...
CVE-2026-96243: Improper Link Resolution Before File Access
Improper link resolution before file access 'link following' in Windows WalletService allows an authorized attacker to elevate privileges locally...
CVE-2026-96231: Improper Link Resolution Before File Access
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-88129: Role: DNS Server Denial of Service Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network...
CVE-2026-85362: Release of Invalid Pointer or Reference
Release of invalid pointer or reference in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-96912: Windows Client License Service Elevation of Privilege Vulnerability
Use after free in Windows Client License Service allows an authorized attacker to elevate privileges locally...
CVE-2026-83847: Heap-based Buffer Overflow
Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally...
CVE-2026-87693: Use After Free
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-87692: Deserialization of Untrusted Data
Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally...
CVE-2026-108381: Improper Control of Generation of Code
dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.44.0 through 0.70.5, the Pydantic and AvroDantic model generators insert a schema field's pydantic-class value after pydantic. in a...
CVE-2026-105142: Undefined Security Weakness
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2026-54870: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpweaver Weaver Xtreme Theme Support weaverx-theme-support allows Stored XSS.This issue affects Weaver Xtreme Theme Support: from n/a through 7.0.1...
CVE-2026-49785: Improper Resource Shutdown or Release
Improper resource shutdown or release in Windows UEFI allows an authorized attacker to bypass a security feature locally...
CVE-2026-103555: Heap-based Buffer Overflow
Heap-based buffer overflow in Virtual Hard Disk VHD Miniport Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-70138: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally...
CVE-2026-85872: Use After Free
Use after free in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-97812: Double Free
Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally...
CVE-2026-95638: Heap-based Buffer Overflow
Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...