boxscore/security
Tuesday, July 14, 2026 · all times UTC← 2026-07-13 · archive · 2026-07-15 →

Edition of July 14, 2026, continued — page 2 of 2. Back to page 1

Results (continued, ranked) — ranks 401–1000 of 1007
CVECVSSEPSS %ileVendorProductCWETitle
CVE-2026-157715.328.7GoogleChromeCWE-20Insufficient validation of untrusted input in Media in Google Chrome on Windo…
CVE-2026-343495.528.5MicrosoftWindows 10 Version 1809CWE-200Windows Media Information Disclosure Vulnerability
CVE-2026-503945.528.5MicrosoftWindows 10 Version 1607CWE-200Windows Media Information Disclosure Vulnerability
CVE-2026-488018.728.3markdown-itlinkify-itCWE-1333linkify-it: Quadratic algorithmic complexity in LinkifyIt#match scan loop
CVE-2026-585477.828.4MicrosoftWindows 10 Version 1809CWE-122Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vul…
CVE-2026-480006.128.4AdobeAdobe CommerceCWE-601Adobe Commerce | URL Redirection to Untrusted Site ('Open Redirect') (CWE-601)
CVE-2026-156225.528.3poco-aipoco-clawCWE-285poco-ai poco-claw Workspace API workspace.py get_workspace_file authorization
CVE-2026-338425.528.4MicrosoftWindows 10 Version 1607CWE-200Windows File Explorer Information Disclosure Vulnerability
CVE-2026-343285.528.4MicrosoftWindows 10 Version 1809CWE-200Windows Audio Service Information Disclosure Vulnerability
CVE-2026-410875.528.4MicrosoftWindows 10 Version 1607CWE-200Windows File Explorer Information Disclosure Vulnerability
CVE-2026-503165.528.4MicrosoftWindows 10 Version 21H2CWE-532Windows Kernel Information Disclosure Vulnerability
CVE-2026-503345.528.4MicrosoftWindows 10 Version 1607CWE-200Windows Push Notification Information Disclosure Vulnerability
CVE-2026-503395.528.4MicrosoftWindows 10 Version 1809CWE-200Windows Push Notification Information Disclosure Vulnerability
CVE-2026-503505.528.4MicrosoftWindows 10 Version 21H2CWE-200Windows Trusted Runtime Interface Driver Information Disclosure Vulnerability
CVE-2026-504095.528.4MicrosoftWindows 10 Version 1607CWE-200Windows Overlay Filter Information Disclosure Vulnerability
CVE-2026-504305.528.4MicrosoftWindows 10 Version 1607CWE-200Windows Push Notification Information Disclosure Vulnerability
CVE-2026-504345.528.4MicrosoftWindows 10 Version 21H2CWE-200Windows Push Notification Information Disclosure Vulnerability
CVE-2026-504425.528.4MicrosoftWindows 10 Version 1607CWE-200Windows File Explorer Information Disclosure Vulnerability
CVE-2026-504565.528.4MicrosoftWindows 10 Version 1607CWE-200Windows File Explorer Information Disclosure Vulnerability
CVE-2026-504735.528.4MicrosoftWindows 10 Version 1607CWE-200Windows File Explorer Information Disclosure Vulnerability
CVE-2026-504027.828.3MicrosoftWindows 10 Version 1607CWE-126NTFS Elevation of Privilege Vulnerability
CVE-2026-528376.928.3alextselegidiseasyappointmentsCWE-200Easy!Appointments has unauthenticated customer PII disclosure on booking resc…
CVE-2026-466397.128.2twigphpTwigCWE-693Twig: Sandbox property and method bypass via object-destructuring assignment
CVE-2026-506653.328.0MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Office Information Disclosure Vulnerability
CVE-2026-114038.728.0SonatypeNexus Repository ManagerCWE-331Nexus Repository Manager - Insufficient Entropy in Format-Specific API Key Ge…
CVE-2026-598847.528.0pyasn1pyasn1CWE-400pyasn1 BER/CER/DER decoder denial of service via unbounded long-form tag IDs
CVE-2026-157135.927.9Red HatRed Hat Enterprise Linux 10CWE-772Libsoup: soupcache: libsoup: http/2 frame window exhaustion remote denial of …
CVE-2026-550437.827.8MicrosoftMicrosoft 365 Apps for EnterpriseCWE-122Microsoft PowerPoint Remote Code Execution Vulnerability
CVE-2026-551207.827.8MicrosoftMicrosoft 365 Apps for EnterpriseCWE-122Microsoft PowerPoint Remote Code Execution Vulnerability
CVE-2026-551237.827.8MicrosoftMicrosoft 365 Apps for EnterpriseCWE-122Microsoft PowerPoint Remote Code Execution Vulnerability
CVE-2026-457546.927.8symfonysymfonyCWE-287Symfony: Mailjet Mailer Webhook Parser Never Verifies the Configured Secret —…
CVE-2026-586475.427.9MicrosoftPower BI Report ServerCWE-79Microsoft PowerBI Report Server Spoofing Vulnerability
CVE-2026-503277.827.7MicrosoftWindows 11 Version 24H2CWE-122Windows Media Remote Code Execution Vulnerability
CVE-2026-503327.827.8MicrosoftWindows 10 Version 1607CWE-122Windows Kernel Elevation of Privilege Vulnerability
CVE-2026-477367.527.6pumapumaCWE-400Puma PROXY Protocol v1 Parser Allows Remote Memory Exhaustion
CVE-2026-598896.527.6FasterXMLjackson-databindCWE-863jackson-databind: @JsonView ypassed for @JsonUnwrapped container properties o…
CVE-2026-497944.627.6MicrosoftWindows 10 Version 1607CWE-125Windows USB Audio Class Driver Information Disclosure Vulnerability
CVE-2026-504085.527.5MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Excel Information Disclosure Vulnerability
CVE-2026-551385.527.5MicrosoftMicrosoft 365 Apps for EnterpriseCWE-822Microsoft Excel Information Disclosure Vulnerability
CVE-2026-474767.527.3NVIDIATriton Inference ServerCWE-400NVIDIA Triton Inference Server for Linux contains a vulnerability where an at…
CVE-2026-503647.327.3MicrosoftWindows 10 Version 21H2CWE-59Windows Backup Service Elevation of Privilege Vulnerability
CVE-2026-506807.827.1MicrosoftWindows 10 Version 1809CWE-122Windows Hyper-V Elevation of Privilege Vulnerability
CVE-2026-585427.827.1MicrosoftWindows 11 Version 24H2CWE-122Windows Media Remote Code Execution Vulnerability
CVE-2026-504677.827.0MicrosoftMicrosoft 365 Apps for EnterpriseCWE-416Microsoft Office Remote Code Execution Vulnerability
CVE-2026-550187.827.0MicrosoftMicrosoft 365 Apps for EnterpriseCWE-416Microsoft Office Remote Code Execution Vulnerability
CVE-2026-550497.827.0MicrosoftMicrosoft 365 Apps for EnterpriseCWE-122Microsoft Office Remote Code Execution Vulnerability
CVE-2026-550567.827.0MicrosoftMicrosoft 365 Apps for EnterpriseCWE-787Microsoft Office Remote Code Execution Vulnerability
CVE-2026-551297.827.0MicrosoftMicrosoft 365 Apps for EnterpriseCWE-122Microsoft Office Remote Code Execution Vulnerability
CVE-2026-551407.827.0MicrosoftMicrosoft 365 Apps for EnterpriseCWE-122Microsoft Office Remote Code Execution Vulnerability
CVE-2026-551393.327.0MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Office Information Disclosure Vulnerability
CVE-2026-429758.826.8MicrosoftWindows 10 Version 1607CWE-122Windows Bluetooth Port Driver Remote Code Execution
CVE-2026-157195.426.8MozillaFirefox—Site isolation issue in the DOM: Navigation component
CVE-2026-505017.826.7MicrosoftWindows 11 Version 24H2CWE-121Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
CVE-2026-585307.826.7MicrosoftWindows 10 Version 1607CWE-122Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
CVE-2025-563627.526.8n/an/aCWE-617A reachable assertion vulnerability exists in the Matter SDK (connectedhomeip…
CVE-2026-504835.526.7MicrosoftWindows 11 Version 24H2CWE-200Windows Graphics Component Information Disclosure Vulnerability
CVE-2026-498545.326.7tornadowebtornadoCWE-126Tornado: Out-of-bounds memory access in C extension
CVE-2026-504193.326.7MicrosoftWindows 10 Version 1607CWE-200Windows Kernel Information Disclosure Vulnerability
CVE-2026-157022.126.7n/atamaguiCWE-94tamagui config.ts updateConfig prototype pollution
CVE-2026-503488.126.5MicrosoftWindows 10 Version 1809CWE-362Windows Runtime Elevation of Privilege Vulnerability
CVE-2025-438924.326.5FortinetFortiOSCWE-126A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, For…
CVE-2026-473057.826.5MicrosoftMicrosoft Visual Studio 2022 version 17.12CWE-693Visual Studio Remote Code Execution Vulnerability
CVE-2026-503627.826.5MicrosoftWindows 10 Version 1607CWE-122Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
CVE-2026-503867.826.5MicrosoftWindows 10 Version 1607CWE-122Windows NTFS Remote Code Execution Vulnerability
CVE-2026-504487.826.5MicrosoftWindows 10 Version 1607CWE-122Windows NTFS Remote Code Execution Vulnerability
CVE-2026-504617.826.5MicrosoftWindows 10 Version 1607CWE-122Windows NTFS Remote Code Execution Vulnerability
CVE-2026-549937.826.4MicrosoftWindows 10 Version 1809CWE-122Microsoft Windows Media Foundation Remote Code Execution Vulnerability
CVE-2026-561567.826.5MicrosoftMicrosoft 365 Apps for EnterpriseCWE-122Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-598857.526.4pyasn1pyasn1CWE-400pyasn1: Quadratic complexity in OBJECT IDENTIFIER and RELATIVE-OID processing…
CVE-2026-598867.526.4pyasn1pyasn1CWE-400pyasn1: Uncontrolled resource consumption when converting decoded REAL values
CVE-2026-551227.126.4MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Excel Information Disclosure Vulnerability
CVE-2026-499786.326.3cure53DOMPurifyCWE-79DOMPurify IN_PLACE Sanitization Bypass via Attached Shadow Root Inside <templ…
CVE-2026-447458.126.0SAP_SESAP ApprouterCWE-601Open Redirect vulnerability in SAP Approuter
CVE-2025-563647.526.0n/an/aCWE-457A use of uninitialized value vulnerability exists in the Matter SDK (connecte…
CVE-2026-450639.125.8symfonysymfonyCWE-290Symfony: Identity Spoofing via Unanchored DN Regex in X509Authenticator
CVE-2026-362146.425.8osTicketosTicketCWE-79osTicket versions from 1.10 up to 1.17.7 and from 1.18.0 up to 1.18.3 are vul…
CVE-2026-156972.125.9svgdotjssvg.jsCWE-94svgdotjs svg.js npm Package API EventTarget.on prototype pollution
CVE-2026-624229.825.7JetBrainsYouTrackCWE-306In JetBrains YouTrack before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025…
CVE-2026-92928.425.8Rockwell AutomationFactoryTalk® DataMosaix™ Private CloudCWE-79Rockwell Automation FactoryTalk® DataMosaix™ Private Cloud - Stored Cross-Sit…
CVE-2026-157035.525.7SourceCodesterSimple and Nice Shopping Cart ScriptCWE-74SourceCodester Simple and Nice Shopping Cart Script userproductdeletequery.ph…
CVE-2026-503127.825.5MicrosoftWindows 10 Version 1607CWE-416Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerab…
CVE-2026-502986.825.5MicrosoftWindows 10 Version 1607CWE-190Windows Spaceport.sys Elevation of Privilege Vulnerability
CVE-2026-502996.825.5MicrosoftWindows 10 Version 1607CWE-122Windows Storage Spaces Direct Remote Code Execution Vulnerability
CVE-2026-491775.525.6MicrosoftWindows 10 Version 1607CWE-125Windows TCP/IP Information Disclosure Vulnerability
CVE-2026-125838.125.4UnknownNewslettersCWE-502Newsletters < 4.15 - Unauthenticated PHP Object Injection via Subscriber Cust…
CVE-2026-506757.825.3MicrosoftMicrosoft 365 Apps for EnterpriseCWE-122Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-491805.525.3MicrosoftWindows 10 Version 1607CWE-59Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability
CVE-2026-157777.525.2GoogleChromeCWE-416Use after free in UI in Google Chrome on Linux prior to 150.0.7871.125 allowe…
CVE-2026-119177.225.2Rockwell AutomationFactoryTalk ThinManagerCWE-22ThinManager® - Path Traversal via API
CVE-2026-503746.825.1MicrosoftWindows 10 Version 1809CWE-416Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVE-2026-570976.824.9MicrosoftWindows 10 Version 1607CWE-426Microsoft XML Security Feature Bypass Vulnerability
CVE-2026-126598.724.8Rockwell AutomationThe FLEX 5000® EtherNet/IP AdapterCWE-415Rockwell Automation Flex 5000® Adapter - Denial of Service
CVE-2026-511057.524.6n/an/aCWE-121Buffer Overflow vulnerability in aMULE-Project aMule v.2.3.3 allows a remote …
CVE-2026-157786.524.6GoogleChromeCWE-20Insufficient validation of untrusted input in Navigation in Google Chrome pri…
CVE-2026-598919.624.4sigstoresigstore-jsCWE-522Credential confusion in @sigstore/oci can leak registry credentials to an att…
CVE-2026-506928.824.5MicrosoftWindows 10 Version 1607CWE-122Desktop Window Manager Elevation of Privilege Vulnerability
CVE-2026-504777.824.5MicrosoftWindows 10 Version 1607CWE-122Windows Kernel Elevation of Privilege Vulnerability
CVE-2026-506877.824.5MicrosoftWindows 11 Version 24H2CWE-416Windows Win32k Elevation of Privilege Vulnerability
CVE-2026-585347.824.5MicrosoftWindows 10 Version 1607CWE-122Windows Input Method Editor (IME) Elevation of Privilege Vulnerability
CVE-2026-506783.324.2MicrosoftMicrosoft 365 Apps for EnterpriseCWE-122Microsoft Excel Information Disclosure Vulnerability
CVE-2026-582337.624.2SAP_SESAP Change and Transport System Attach Tool (ctsattach)CWE-502Remote Code Execution vulnerability in SAP Change and Transport System Attach…
CVE-2026-476328.824.0MicrosoftAzure Connected Machine AgentCWE-295Azure Connected Machine Agent Elevation of Privilege Vulnerability
CVE-2026-586337.824.0MicrosoftWindows 11 version 26H1CWE-416Desktop Window Manager Elevation of Privilege Vulnerability
CVE-2026-521007.524.1n/an/aCWE-352Cross Site Request Forgery vulnerability in andreimarcu linux-server v.1.0 th…
CVE-2026-591987.524.0python-pillowPillowCWE-125Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into …
CVE-2026-235736.124.0FortinetFortiOSCWE-79An Improper Neutralization of Input During Web Page Generation ('Cross-site S…
CVE-2026-5443310.023.9RoundcubeWebmailCWE-79In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, there is Stored Cr…
CVE-2026-85908.723.9SpotfireSpotfire Enterprise—Spotfire OAuth2 PKCE Bypass for public clients
CVE-2026-586097.824.0MicrosoftWindows 10 Version 1607CWE-125Windows Graphics Component Remote Code Execution Vulnerability
CVE-2026-586107.824.0MicrosoftWindows 10 Version 1607CWE-122Microsoft Windows Media Foundation Remote Code Execution Vulnerability
CVE-2026-503157.823.7MicrosoftWindows 11 Version 24H2CWE-476Windows Image Acquisition Elevation of Privilege Vulnerability
CVE-2026-503267.823.7MicrosoftWindows 10 Version 21H2CWE-416Windows Unified Consent System Elevation of Privilege Vulnerability
CVE-2026-503367.823.7MicrosoftWindows 11 Version 24H2CWE-122Windows Media Elevation of Privilege Vulnerability
CVE-2026-503377.823.7MicrosoftWindows 10 Version 1607CWE-704Windows Notification Elevation of Privilege Vulnerability
CVE-2026-503537.823.7MicrosoftWindows 11 Version 24H2CWE-416DirectX Graphics Kernel Elevation of Privilege Vulnerability
CVE-2026-503577.823.7MicrosoftWindows 10 Version 1607CWE-197Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
CVE-2026-503637.823.7MicrosoftWindows 10 Version 1607CWE-122Windows Push Notifications Elevation of Privilege Vulnerability
CVE-2026-504077.823.7MicrosoftWindows 10 Version 1607CWE-122Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
CVE-2026-504127.823.7MicrosoftWindows 10 Version 1607CWE-121Windows NTFS Elevation of Privilege Vulnerability
CVE-2026-504177.823.7MicrosoftWindows 10 Version 1607CWE-20Windows NTFS Remote Code Execution Vulnerability
CVE-2026-504217.823.7MicrosoftWindows 10 Version 1607CWE-843Windows Connected User Experiences and Telemetry Elevation of Privilege Vulne…
CVE-2026-504227.823.7MicrosoftWindows 10 Version 1607CWE-125Windows NTFS Elevation of Privilege Vulnerability
CVE-2026-504787.823.8MicrosoftWindows 10 Version 1809CWE-416Windows Kernel Elevation of Privilege Vulnerability
CVE-2026-504797.823.7MicrosoftWindows 10 Version 1809CWE-822Windows USB Hub Driver Elevation of Privilege Vulnerability
CVE-2026-504847.823.8MicrosoftWindows 10 Version 1809CWE-122Windows Kernel Elevation of Privilege Vulnerability
CVE-2026-504937.823.7MicrosoftWindows 10 Version 1809CWE-416DirectX Graphics Kernel Elevation of Privilege Vulnerability
CVE-2026-504947.823.7MicrosoftWindows 10 Version 1607CWE-122Windows NTFS Remote Code Execution Vulnerability
CVE-2026-506797.823.7MicrosoftWindows 11 Version 24H2CWE-122Windows Search Service Elevation of Privilege Vulnerability
CVE-2026-541157.823.7MicrosoftWindows 10 Version 1607CWE-122Windows Message Queuing (MSMQ) Elevation of Privilege Vulnerability
CVE-2026-561757.823.7MicrosoftWindows 10 Version 1607CWE-122Windows NTFS Elevation of Privilege Vulnerability
CVE-2026-566437.823.7MicrosoftWindows 10 Version 1607CWE-416DirectX Graphics Kernel Elevation of Privilege Vulnerability
CVE-2026-566447.823.7MicrosoftWindows 10 Version 1607CWE-416DirectX Graphics Kernel Elevation of Privilege Vulnerability
CVE-2026-566507.823.7MicrosoftWindows 10 Version 1607CWE-122Windows Network File System Elevation of Privilege Vulnerability
CVE-2026-570967.823.7MicrosoftWindows 10 Version 1607CWE-122Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulne…
CVE-2026-579687.823.8MicrosoftWindows Subsystem for Linux (WSL2)CWE-126Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability
CVE-2026-585327.823.8MicrosoftWindows 10 Version 1607CWE-190Windows Kernel Elevation of Privilege Vulnerability
CVE-2026-585377.823.7MicrosoftWindows 11 Version 24H2CWE-416Microsoft NAT Helper Components (ipnathlp.dll) Elevation of Privilege Vulnera…
CVE-2026-585387.823.7MicrosoftWindows 10 Version 1809CWE-122Windows Bluetooth Service Elevation of Privilege Vulnerability
CVE-2026-118025.323.8themelooksFoodBook Lite – Online Food Ordering SystemCWE-862FoodBook Lite <= 1.5.6 - Missing Authorization to Unauthenticated User Regist…
CVE-2026-545728.823.6rclonercloneCWE-59rclone: Unvalidated symlink target in local `--links` — arbitrary file write …
CVE-2026-474777.523.4NVIDIATriton Inference ServerCWE-121NVIDIA Triton Inference Server for Linux contains a vulnerability where an at…
CVE-2026-549886.123.3MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Excel Information Disclosure Vulnerability
CVE-2026-5645110.023.1SiemensOpcenter XCWE-347A vulnerability has been identified in Opcenter X (All versions < V2604). Aff…
CVE-2026-582298.223.1elixir-mintmintCWE-770Unbounded HTTP/1 response-header and chunked-trailer accumulation in Mint cau…
CVE-2026-491686.823.1MicrosoftWindows 10 Version 1607CWE-190Storage Spaces Direct Elevation of Privilege Vulnerability
CVE-2026-506686.823.1MicrosoftWindows 10 Version 1607CWE-122Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
CVE-2026-541326.823.1MicrosoftWindows 10 Version 1607CWE-122Windows Kernel Elevation of Privilege Vulnerability
CVE-2026-592466.323.1elixir-mintmintCWE-770Zero-length HTTP/2 CONTINUATION frames bypass Mint's header-block byte-size c…
CVE-2026-504285.523.0MicrosoftWindows 11 version 26H1CWE-125Windows Container Isolation FS Filter Driver (unionfs.sys) Information Disclo…
CVE-2026-1057710.023.0Rockwell Auotmation1715 EtherNet/IP Communications ModuleCWE-306Rockwell Automation 1715 Redundant IO – Access Control Vulnerability
CVE-2025-116989.222.9Rockwell AutomationCompactLogix® 5380 Recovery Image Compact GuardLogix® 5380 Recovery Image CompactLogix® 5480 Recovery Image ControlLogix® 5580 Recovery Image GuardLogix® 5580 Recovery ImageCWE-120CompactLogix ®, ControlLogix ®, Compact GuardLogix ® and GuardLogix ® Buffer …
CVE-2025-120119.222.9Rockwell AutomationCompactLogix® 5370 Compact GuardLogix® 5370 ControlLogix® 5570 GuardLogix® 5570CWE-120CompactLogix ®, ControlLogix ®, Compact GuardLogix ® and GuardLogix ® Buffer …
CVE-2025-120129.222.9Rockwell AutomationCompactLogix® 5370 Compact GuardLogix® 5370 ControlLogix® 5570 GuardLogix® 5570CWE-120CompactLogix ®, ControlLogix ®, Compact GuardLogix ® and GuardLogix ® Buffer …
CVE-2026-503017.822.9MicrosoftMicrosoft 365 Apps for EnterpriseCWE-122Microsoft Office Remote Code Execution Vulnerability
CVE-2026-504717.822.9MicrosoftWindows 10 Version 1607CWE-122Windows NTFS Remote Code Execution Vulnerability
CVE-2026-541317.822.9MicrosoftMicrosoft 365 Apps for EnterpriseCWE-416Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-550177.822.9MicrosoftMicrosoft 365 Apps for EnterpriseCWE-122Microsoft Office Remote Code Execution Vulnerability
CVE-2026-550257.822.9MicrosoftMicrosoft 365 Apps for EnterpriseCWE-843Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-550297.822.9MicrosoftMicrosoft 365 Apps for EnterpriseCWE-122Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-550367.822.9MicrosoftMicrosoft 365 Apps for EnterpriseCWE-126Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-550377.822.9MicrosoftMicrosoft 365 Apps for EnterpriseCWE-122Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-550397.822.9MicrosoftMicrosoft 365 Apps for EnterpriseCWE-122Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-550417.822.9MicrosoftMicrosoft 365 Apps for EnterpriseCWE-122Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-550447.822.9MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-550487.822.9MicrosoftMicrosoft 365 Apps for EnterpriseCWE-122Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-550537.822.9MicrosoftMicrosoft 365 Apps for EnterpriseCWE-122Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-550587.822.9MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-551317.822.9MicrosoftMicrosoft 365 Apps for EnterpriseCWE-122Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-551337.822.9MicrosoftMicrosoft 365 Apps for EnterpriseCWE-122Microsoft OneNote Remote Code Execution Vulnerability
CVE-2026-551367.822.9MicrosoftMicrosoft 365 Apps for EnterpriseCWE-822Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-551377.822.9MicrosoftMicrosoft 365 Apps for EnterpriseCWE-122Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-551417.822.9MicrosoftMicrosoft 365 Apps for EnterpriseCWE-121Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-558997.822.9MicrosoftMicrosoft 365 Apps for EnterpriseCWE-20Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-559477.822.9MicrosoftMicrosoft 365 Apps for EnterpriseCWE-122Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-559487.822.9MicrosoftMicrosoft 365 Apps for EnterpriseCWE-416Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-559497.822.9MicrosoftMicrosoft 365 Apps for EnterpriseCWE-908Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-494596.123.0cure53DOMPurifyCWE-79DOMPurify: IN_PLACE mode preserves attributes of a clobbered root element, al…
CVE-2026-100516.922.8Eclipse FoundationEclipse JettyCWE-200In Eclipse Jetty, a first HTTP/1.1 request with trailers causes the server to…
CVE-2026-466295.322.8twigphpTwigCWE-770Twig: Unbounded formatter memoisation in twig/intl-extra keyed on template-co…
CVE-2026-480385.322.7hapijsjoiCWE-248joi: Uncaught RangeError on deeply nested input through recursive `link()` sc…
CVE-2026-541288.422.6MicrosoftWindows 10 Version 1607CWE-416Windows DHCP Client Remote Code Execution Vulnerability
CVE-2026-474787.522.6NVIDIATriton Inference ServerCWE-910NVIDIA Triton Inference Server for Linux contains a vulnerability where an at…
CVE-2026-558987.122.7MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Excel Information Disclosure Vulnerability
CVE-2026-404225.522.4MicrosoftWindows 10 Version 1607CWE-908Windows File Explorer Information Disclosure Vulnerability
CVE-2026-498015.522.4MicrosoftWindows 10 Version 1607CWE-908Windows SMB Information Disclosure Vulnerability
CVE-2026-503005.522.4MicrosoftWindows 10 Version 1607CWE-125Windows DWM Core Library Information Disclosure Vulnerability
CVE-2026-503415.522.4MicrosoftWindows 10 Version 1607CWE-126Windows NTFS Information Disclosure Vulnerability
CVE-2026-503835.522.4MicrosoftWindows 10 Version 1809CWE-126Windows Print Spooler Information Disclosure Vulnerability
CVE-2026-504015.522.4MicrosoftWindows 10 Version 1809CWE-125Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability
CVE-2026-504375.522.4MicrosoftWindows 10 Version 1607CWE-125Windows DWM Core Library Information Disclosure Vulnerability
CVE-2026-504555.522.4MicrosoftWindows 10 Version 1607CWE-908Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability
CVE-2026-549975.522.4MicrosoftWindows 10 Version 1607CWE-908Windows SMB Information Disclosure Vulnerability
CVE-2026-503104.722.3MicrosoftWindows 10 Version 1809CWE-190Windows Human Interface Device Information Disclosure Vulnerability
CVE-2026-450662.322.3symfonysymfonyCWE-184Symfony: HtmlSanitizer allowLinkHosts() / allowMediaHosts() Bypass via URL-Pa…
CVE-2026-479717.822.3AdobeAdobe Media EncoderCWE-121Media Encoder | Stack-based Buffer Overflow (CWE-121)
CVE-2026-482697.822.3AdobePremiereCWE-122Premiere Pro | Heap-based Buffer Overflow (CWE-122)
CVE-2026-157525.522.2zhinianbokexianyu-auto-replyCWE-862zhinianboke xianyu-auto-reply Backend User Endpoint users authorization
CVE-2026-466355.322.2twigphpTwigCWE-863Twig: Sandbox property allowlist bypass via the `column` filter (array_column…
CVE-2026-503907.822.2MicrosoftWindows 10 Version 1607CWE-843Windows Kernel Elevation of Privilege Vulnerability
CVE-2026-483292.722.2AdobeColdFusion 2025CWE-613ColdFusion | Insufficient Session Expiration (CWE-613)
CVE-2026-125118.122.0UnknownAI Engine—AI Engine < 3.5.5 - Editor+ Arbitrary File Write via Path Traversal
CVE-2026-157698.321.9GoogleChromeCWE-20Insufficient validation of untrusted input in Linux Toolkit Theming in Google…
CVE-2026-156262.122.0nextlevelbuilderGoClawCWE-22nextlevelbuilder GoClaw ACP ToolBridge Workspace tool_bridge.go writeFile pat…
CVE-2026-360356.521.8n/an/aCWE-284Incorrect access control in the /api/License/deactivateOffline endpoint of CA…
CVE-2026-450642.321.8symfonysymfonyCWE-451Symfony: HtmlSanitizer URL Attributes Pass Through BiDi Override Characters →…
CVE-2026-457532.121.8symfonysymfonyCWE-79Symfony: HtmlSanitizer UrlAttributeSanitizer Omits action/formaction/poster/c…
CVE-2026-125237.521.7CloudflarequicheCWE-400Resource exhaustion in quiche HTTP/3 and QPACK layers
CVE-2026-450706.321.8symfonysymfonyCWE-93Symfony: Email Header Injection via Non-Token Characters in Mime Parameter Names
CVE-2026-549998.821.6MicrosoftWindows 10 Version 1607CWE-362Windows TCP/IP Remote Code Execution Vulnerability
CVE-2026-506507.821.5Microsoft.NET 8.0CWE-94.NET Framework Elevation of Privilege Vulnerability
CVE-2026-585417.821.4MicrosoftWindows 10 Version 1607CWE-843Microsoft DWM Core Library Elevation of Privilege Vulnerability
CVE-2026-586317.821.4MicrosoftWindows Admin CenterCWE-285Windows Admin Center (WAC) Remote Code Execution Vulnerability
CVE-2026-586327.821.4MicrosoftWindows 10 Version 1607CWE-416Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
CVE-2026-586347.821.4MicrosoftWindows 11 version 26H1CWE-416Desktop Window Manager Elevation of Privilege Vulnerability
CVE-2025-628264.321.4FortinetFortiPAMCWE-113An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response …
CVE-2026-156775.521.3code-projectsOnline Job PortalCWE-284code-projects Online Job Portal JobSeekerInsert.php unrestricted upload
CVE-2026-623934.321.2Apache Software FoundationApache KylinCWE-280Apache Kylin: Improper authorization in job information retrieval
CVE-2026-156292.121.3louisho5picobotCWE-59louisho5 picobot Workspace filesystem.go GetSkill link following
CVE-2026-127077.521.1CloudflarequicheCWE-770Unbounded path event queue growth in quiche via peer-driven source connection…
CVE-2026-503815.521.0MicrosoftWindows 10 Version 21H2CWE-843Composite Image File System driver (cimfs.sys) Information Disclosure Vulnera…
CVE-2026-506977.820.9MicrosoftWindows 10 Version 1607CWE-200Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2026-541228.420.8MicrosoftWindows 10 Version 1607CWE-122Windows GDI+ Remote Code Execution Vulnerability
CVE-2026-586187.820.7MicrosoftMicrosoft 365 Apps for EnterpriseCWE-122Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-154168.920.5argoprojargo-helmCWE-306Argo-cd: argo cd unauthenticated remote code execution in repo-server via gen…
CVE-2026-504955.520.6MicrosoftWindows 10 Version 1809CWE-284DNS Client Tampering Vulnerability
CVE-2026-156252.120.4nextlevelbuilderGoClawCWE-183nextlevelbuilder GoClaw exec_approval.go ExecApprovalManager.CheckCommand inc…
CVE-2026-157686.520.3GoogleChromeCWE-346Insufficient policy enforcement in HTML-in-Canvas in Google Chrome prior to 1…
CVE-2026-157756.520.3GoogleChromeCWE-346Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.125 a…
CVE-2026-497917.820.3MicrosoftWindows 10 Version 1607CWE-59Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulne…
CVE-2026-503357.820.2MicrosoftWindows 10 Version 1809CWE-284Windows Operating Systems Elevation of Privilege Vulnerability
CVE-2026-503447.820.2MicrosoftWindows 10 Version 1607CWE-285Windows OLE Elevation of Privilege Vulnerability
CVE-2026-503467.820.2MicrosoftWindows 10 Version 1607CWE-285Netlogon RPC Elevation of Privilege Vulnerability
CVE-2026-503737.820.2MicrosoftWindows 10 Version 1809CWE-284Windows Search Service Elevation of Privilege Vulnerability
CVE-2026-503917.820.2MicrosoftWindows 10 Version 1607CWE-269Windows Group Policy Elevation of Privilege Vulnerability
CVE-2026-570887.820.2MicrosoftWindows 10 Version 1809CWE-284Extensible Storage Engine (ESENT) Elevation of Privilege Vulnerability
CVE-2026-585407.820.2MicrosoftWindows 10 Version 1607CWE-285Windows Installer Elevation of Privilege Vulnerability
CVE-2026-474797.520.3NVIDIATriton Inference ServerCWE-400NVIDIA Triton Inference Server for Linux contains a vulnerability where an at…
CVE-2026-474807.520.3NVIDIATriton Inference ServerCWE-248NVIDIA Triton Inference Server for Linux contains a vulnerability where an at…
CVE-2026-474827.520.3NVIDIATriton Inference ServerCWE-401NVIDIA Triton Inference Server for Linux contains a vulnerability where an at…
CVE-2026-586145.520.3MicrosoftWindows 10 Version 1607CWE-125Windows Kernel Security Feature Bypass Vulnerability
CVE-2026-504388.820.1MicrosoftMicrosoft PC ManagerCWE-59Microsoft PC Manager Elevation of Privilege Vulnerability
CVE-2026-497897.820.1MicrosoftWindows 10 Version 1607CWE-121Windows NTFS Elevation of Privilege Vulnerability
CVE-2026-626426.520.1RoundcubeWebmailCWE-835In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, an infinite loop w…
CVE-2026-153898.719.9Sesame TimeSesame TimeCWE-639Inadequate access control in Sesame Time session management
CVE-2026-157728.319.9GoogleChromeCWE-416Use after free in GPU in Google Chrome on Android prior to 150.0.7871.125 all…
CVE-2026-157748.319.9GoogleChromeCWE-416Use after free in Skia in Google Chrome prior to 150.0.7871.125 allowed a rem…
CVE-2026-52699.819.8CIENANavigator NCSCWE-1393Navigator NCS and MCP System Accounts with Default Passwords
CVE-2026-570853.319.7MicrosoftWindows 10 Version 1607CWE-125Windows Print Spooler Information Disclosure Vulnerability
CVE-2026-504697.819.3MicrosoftWindows 10 Version 1809CWE-59Windows Projected File System Elevation of Privilege Vulnerability
CVE-2026-474238.219.2cure53DOMPurifyCWE-79DOMPurify XSS via `selectedcontent` re-clone
CVE-2026-488055.319.2twigphpTwigCWE-693Twig: Sandbox state regression in deprecated internal wrappers in `src/Resour…
CVE-2026-503828.819.1MicrosoftWindows 10 Version 1809CWE-822DirectX Graphics Kernel Remote Code Execution Vulnerability
CVE-2026-429827.819.2MicrosoftWindows 10 Version 1607CWE-1288Windows Secure Kernel Mode Elevation of Privilege Vulnerability
CVE-2026-156901.319.1n/aopen62541CWE-404open62541 Shared Client ua_client_connect.c responseReadNamespacesArray null …
CVE-2026-487615.319.0symfonysymfonyCWE-79Symfony: HtmlSanitizer UrlAttributeSanitizer Misses URL Attributes on <object…
CVE-2026-157368.318.9SnowflakeSnowflake SQLAlchemyCWE-73Multiple SQL/DDL Injection and Arbitrary File Read Vulnerabilities in snowfla…
CVE-2026-586367.818.9MicrosoftMicrosoft PC ManagerCWE-59Microsoft PC Manager Elevation of Privilege Vulnerability
CVE-2026-487845.118.9symfonysymfonyCWE-172Symfony: UrlGenerator Dot-Segment Encoding Skips Every Other Chained `../` or…
CVE-2025-626754.318.9FortinetFortiOSCWE-113An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response …
CVE-2026-491847.818.5MicrosoftWindows 10 Version 1607CWE-122Windows NTFS Remote Code Execution Vulnerability
CVE-2026-466386.018.4twigphpTwigCWE-693Twig: `{% sandbox %}{% include %}` skips checkSecurity() on cached templates …
CVE-2026-146464.918.5SonatypeNexus Repository 3CWE-918Nexus Repository 3 - Server-Side Request Forgery (SSRF) via HTTP Redirect
CVE-2026-145048.218.4SonatypeNexus Repository 3CWE-862Nexus Repository 3 - Authorization Bypass in Component Upload API
CVE-2026-447528.218.3SAP_SESAP NetWeaver Application Server Java(Configuration Wizard)CWE-79Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server …
CVE-2026-242338.418.2NVIDIATensorRT-LLMCWE-502NVIDIA TensorRT-LLM for Linux contains a vulnerability in the restricted unpi…
CVE-2026-156755.518.2code-projectsOnline Job PortalCWE-74code-projects Online Job Portal EditUser.php sql injection
CVE-2026-156765.518.2code-projectsOnline Job PortalCWE-74code-projects Online Job Portal DeleteUser.php sql injection
CVE-2026-156982.118.1kofrasamingoCWE-94kofrasa mingo Update API updateMany prototype pollution
CVE-2026-504987.818.0MicrosoftWindows 10 Version 1607CWE-125Windows Universal Disk Format File System Driver (UDFS) Elevation of Privileg…
CVE-2026-584786.317.9Dan-in-CASIPCWE-918Sustainable Irrigation Platform 5.2.16 SSRF via Node-RED Callback URL
CVE-2026-450652.317.9symfonysymfonyCWE-185Symfony: UrlGenerator Route-Requirement Bypass via Unanchored Regex Alternati…
CVE-2026-157532.118.0zhinianbokexianyu-auto-replyCWE-650zhinianboke xianyu-auto-reply review approve trusting http permission methods…
CVE-2026-503587.817.8MicrosoftWindows 10 Version 1607CWE-416Windows Media Elevation of Privilege Vulnerability
CVE-2026-503597.817.8MicrosoftWindows 10 Version 1607CWE-416Microsoft XML Core Services Elevation of Privilege Vulnerability
CVE-2026-504067.817.8MicrosoftWindows 10 Version 21H2CWE-416Windows Backup Engine Elevation of Privilege Vulnerability
CVE-2026-504907.817.8MicrosoftWindows 10 Version 1607CWE-416Windows Installer Elevation of Privilege Vulnerability
CVE-2026-504917.817.8MicrosoftWindows 10 Version 1607CWE-125Code Integrity DLL (ci.dll) Elevation of Privilege Vulnerability
CVE-2026-506747.817.8MicrosoftWindows 11 Version 24H2CWE-416Windows USB Print Driver Elevation of Privilege Vulnerability
CVE-2026-561877.817.8MicrosoftWindows 11 Version 24H2CWE-416Windows MIDI Service Module Elevation of Privileges Vulnerability
CVE-2026-570937.817.8MicrosoftWindows 10 Version 1607CWE-416Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerab…
CVE-2026-626449.817.7RoundcubeWebmailCWE-290In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, the password plugi…
CVE-2026-504528.117.7MicrosoftWindows 10 Version 1809CWE-362Windows Runtime Elevation of Privilege Vulnerability
CVE-2026-487605.317.7symfonysymfonyCWE-451Symfony: HtmlSanitizer URL Parser Deny Gates Underinclusive: Percent-Encoded …
CVE-2026-497907.817.6MicrosoftWindows 10 Version 1607CWE-122Windows Universal Disk Format File System Driver (UDFS) Elevation of Privileg…
CVE-2026-504827.817.6MicrosoftWindows 10 Version 1607CWE-122Windows NTFS Remote Code Execution Vulnerability
CVE-2026-483386.817.6AdobeColdFusion 2025CWE-22ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Pa…
CVE-2026-474816.517.6NVIDIATriton Inference ServerCWE-288NVIDIA Triton Inference Server for Linux contains a vulnerability where an at…
CVE-2026-497837.817.5MicrosoftWindows 10 Version 1607CWE-358Secure Boot Security Feature Bypass Vulnerability
CVE-2026-497927.817.5MicrosoftWindows 10 Version 1607CWE-197Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
CVE-2026-497937.817.5MicrosoftWindows 10 Version 1607CWE-122Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
CVE-2026-502937.817.5MicrosoftWindows 10 Version 21H2CWE-416Windows Internal Task Bar Elevation of Privilege Vulnerability
CVE-2026-503187.817.5MicrosoftWindows 10 Version 1607CWE-121Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
CVE-2026-156992.117.3spencermountaincompromiseCWE-94spencermountain compromise Public Root API extend.js nlp.extend prototype pol…
CVE-2026-157479.117.2SRIMojoliciousCWE-204Mojolicious versions from 4.59 before 9.48 for Perl expose a stable represent…
CVE-2026-93414.317.3kodezenAcademy LMSCWE-639Academy LMS <= 3.8.0 - Authenticated (Subscriber+) Insecure Direct Object Ref…
CVE-2026-505208.417.1MicrosoftVisual Studio CodeCWE-77Visual Studio Code Remote Code Execution Vulnerability
CVE-2026-91408.717.0Rockwell Automation1718-AENTR/1719-AENTRCWE-7701718-AENTR/1719-AENTR - Denial of Service
CVE-2026-105738.717.0Rockwell Automation1734 POINT I/OCWE-7701734 POINT I/OTM - Denial of Service via Malformed Inputs on CIP Object
CVE-2026-501308.816.9pi-holepi-holeCWE-282Pi-hole: Local privilege escalation from `pihole` user to root via `/etc/piho…
CVE-2026-491677.816.9MicrosoftWindows 10 Version 1809CWE-416Windows Kernel Elevation of Privilege Vulnerability
CVE-2024-77087.516.8Eclipse FoundationEclipse JettyCWE-400For requests that have a body, but reading the body may end up in reading 0 b…
CVE-2026-626416.516.9RoundcubeWebmailCWE-770In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, the TNEF decoder w…
CVE-2026-113906.416.9blazethemesNews Kit Addons For ElementorCWE-79News Kit Addons For Elementor <= 1.4.6 - Authenticated (Contributor+) Stored …
CVE-2026-156192.116.9mosaxivclawletCWE-918mosaxiv clawlet IPv4 tool_web_fetch.go web_fetch server-side request forgery
CVE-2026-615206.316.7SimpleMachinesSMFCWE-918Simple Machines Forum SSRF via image proxy
CVE-2026-124784.816.5Red HatRed Hat Enterprise Linux 10CWE-125Libsoup: incomplete fix for cve-2026-0716: out-of-bounds read in libsoup webs…
CVE-2026-598886.516.2FasterXMLjackson-databindCWE-915jackson-databind: @JsonIgnore on a Record property is bypassed with a Propert…
CVE-2026-550006.416.3MicrosoftWindows 11 Version 24H2CWE-416Windows USB Print Driver Elevation of Privilege Vulnerability
CVE-2026-6264310.016.2RoundcubeWebmailCWE-918In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, insufficient Casca…
CVE-2026-503727.016.1MicrosoftWindows 10 Version 1607CWE-122Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability
CVE-2026-561737.016.1MicrosoftWindows 10 Version 1809CWE-416Windows WebView Elevation of Privilege Vulnerability
CVE-2026-561837.016.1MicrosoftWindows 11 Version 24H2CWE-416Windows MIDI Service Module Elevation of Privileges Vulnerability
CVE-2026-156272.116.2nextlevelbuilderGoClawCWE-200nextlevelbuilder GoClaw tool.go handleNavigate information disclosure
CVE-2026-504137.815.9MicrosoftWindows 11 Version 24H2CWE-416Windows Runtime Elevation of Privilege Vulnerability
CVE-2026-491657.115.7MicrosoftWindows 10 Version 1607CWE-908Microsoft Windows App Store Information Disclosure Vulnerability
CVE-2026-453639.115.6jwtruby-jwtCWE-287`jwt` (Ruby gem) - empty-key HMAC bypass
CVE-2026-541278.415.5MicrosoftWindows 11 Version 24H2CWE-416Windows Hyper-V Elevation of Privilege Vulnerability
CVE-2026-503117.815.6MicrosoftWindows 10 Version 1607CWE-284Windows Server Elevation of Privilege Vulnerability
CVE-2026-586407.815.4MicrosoftWindows 10 Version 1607CWE-122Windows NTFS Remote Code Execution Vulnerability
CVE-2026-585455.515.4MicrosoftWindows 10 Version 1607CWE-284Windows Kernel Security Feature Bypass Vulnerability
CVE-2026-491667.815.3MicrosoftWindows 11 Version 24H2CWE-416Windows Print Configuration Elevation of Privilege Vulnerability
CVE-2026-491737.815.3MicrosoftWindows 11 version 26H1CWE-416Windows Kernel Elevation of Privilege Vulnerability
CVE-2026-491757.815.3MicrosoftWindows 10 Version 21H2CWE-122Windows DNS Client Elevation of Privilege Vulnerability
CVE-2026-503067.815.3MicrosoftWindows 10 Version 1607CWE-190Windows TCP/IP Elevation of Privilege Vulnerability
CVE-2026-503097.815.3MicrosoftWindows 10 Version 1607CWE-122Windows NTFS Remote Code Execution Vulnerability
CVE-2026-503317.815.3MicrosoftWindows 10 Version 1607CWE-416Windows Application Model Core API Elevation of Privilege Vulnerability
CVE-2026-503677.815.3MicrosoftWindows 10 Version 1809CWE-118Windows Sensor Data Service Elevation of Privilege Vulnerability
CVE-2026-503997.815.3MicrosoftWindows 10 Version 21H2CWE-125Windows Kernel Elevation of Privilege Vulnerability
CVE-2026-504007.815.3MicrosoftWindows 10 Version 1607CWE-121Windows App Package Installer Elevation of Privilege Vulnerability
CVE-2026-504257.815.3MicrosoftWindows 10 Version 21H2CWE-416Windows Internal System User Profile Elevation of Privilege Vulnerability
CVE-2026-504357.815.3MicrosoftWindows 10 Version 1607CWE-126Windows Overlay Filter Elevation of Privilege Vulnerability
CVE-2026-504417.815.3MicrosoftWindows 10 Version 1607CWE-822Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
CVE-2026-504667.815.3MicrosoftWindows 11 Version 24H2CWE-416Microsoft Brokering File System Elevation of Privilege Vulnerability
CVE-2026-504807.815.3MicrosoftWindows 10 Version 1607CWE-122Windows Web Proxy Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulne…
CVE-2026-504867.815.3MicrosoftWindows 10 Version 21H2CWE-416Windows Runtime Elevation of Privilege Vulnerability
CVE-2026-504997.815.3MicrosoftWindows 10 Version 1809CWE-122Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2026-506707.815.3MicrosoftWindows 10 Version 1809CWE-20Windows Win32k Elevation of Privilege Vulnerability
CVE-2026-541097.815.3MicrosoftWindows 10 Version 1607CWE-122Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
CVE-2026-549877.815.3MicrosoftWindows 10 Version 1607CWE-122Windows Overlay Filter Elevation of Privilege Vulnerability
CVE-2026-550047.815.3MicrosoftWindows 10 Version 1607CWE-415Windows Print Configuration Elevation of Privilege Vulnerability
CVE-2026-561767.815.3MicrosoftWindows 10 Version 1607CWE-125Windows Win32k Elevation of Privilege Vulnerability
CVE-2026-561827.815.3MicrosoftWindows 10 Version 1607CWE-122Windows NTFS Elevation of Privilege Vulnerability
CVE-2026-503547.115.3MicrosoftWindows 10 Version 1607CWE-416Windows Kernel Elevation of Privilege Vulnerability
CVE-2026-488086.015.2twigphpTwigCWE-693Twig: Sandbox property allowlist bypass via the `column` filter under `Source…
CVE-2026-479795.515.2AdobeAdobe Media EncoderCWE-125Media Encoder | Out-of-bounds Read (CWE-125)
CVE-2026-506777.815.1MicrosoftWindows 11 Version 24H2CWE-362Windows Media Elevation of Privilege Vulnerability
CVE-2026-506897.815.1MicrosoftWindows 10 Version 1809CWE-362Windows Clipboard Server Elevation of Privilege Vulnerability
CVE-2026-457556.915.1symfonysymfonyCWE-306Symfony: Mailtrap Mailer Webhook Parser Never Verifies the X-Mt-Signature HMA…
CVE-2026-472126.915.1symfonysymfonyCWE-306Symfony: Twilio Notifier Webhook Parser Never Verifies the X-Twilio-Signature…
CVE-2026-124826.515.1keras-teamkeras-team/kerasCWE-22Path Traversal via Symlink Name Validation Bypass in keras-team/keras
CVE-2026-450698.814.9symfonysymfonyCWE-345Symfony: OidcTokenHandler Accepts JWTs Missing aud/iss/exp Claims
CVE-2026-561818.314.9MicrosoftWindows 11 Version 24H2CWE-346Windows Network Address Translation (NAT) Spoofing Vulnerability
CVE-2026-136996.515.0Eclipse FoundationEclipse KUKSA - DatabrokerCWE-20Databroker 0.6.1 PublishValue missing data_point panic
CVE-2026-503026.514.8MicrosoftWindows 10 Version 21H2CWE-295Windows Cryptographic Services Security Feature Bypass Vulnerability
CVE-2026-505265.514.9Microsoft.NET 10.0CWE-59.NET Tampering Vulnerability
CVE-2026-479767.814.7AdobeAdobe Media EncoderCWE-787Media Encoder | Out-of-bounds Write (CWE-787)
CVE-2026-601186.914.6HiEventsDevHi.EventsCWE-862Hi.Events < 1.11.0 Hidden Ticket Enumeration via Order Creation Endpoint
CVE-2026-488067.114.5twigphpTwigCWE-693Twig: Sandbox `__toString()` policy bypass via dynamic mapping keys
CVE-2026-505107.814.4MicrosoftGitHub Copilot Plugin for JetBrains IDEsCWE-641GitHub Copilot Remote Code Execution Vulnerability
CVE-2026-504887.814.3MicrosoftWindows 11 Version 24H2CWE-77Clipboard User Service Elevation of Privilege Vulnerability
CVE-2026-450722.014.3symfonysymfonyCWE-79Symfony: Stored XSS in WebProfiler CodeExtension::fileExcerpt() — Unescaped N…
CVE-2026-585447.013.9MicrosoftWindows 11 Version 24H2CWE-416Windows Management Services Elevation of Privilege Vulnerability
CVE-2026-586197.013.9MicrosoftWindows 10 Version 1607CWE-416Windows Sensor Data Service Elevation of Privilege Vulnerability
CVE-2026-586297.013.9MicrosoftWindows 10 Version 1607CWE-416DirectX Graphics Kernel Elevation of Privilege Vulnerability
CVE-2026-586377.013.9MicrosoftWindows 10 Version 1607CWE-416Windows Client-Side Caching Elevation of Privilege Vulnerability
CVE-2026-586385.513.9MicrosoftWindows 10 Version 1809CWE-325Windows Boot Loader Security Feature Bypass Vulnerability
CVE-2026-584767.013.8Dan-in-CASIPCWE-352Sustainable Irrigation Platform 5.2.16 CSRF via Administrative GET Requests
CVE-2026-83845.313.8Eclipse FoundationEclipse JettyCWE-647In Eclipse Jetty, an HTTP URI of this form: /public;/../admin/secret.txt resu…
CVE-2026-156202.113.8mosaxivclawletCWE-918mosaxiv clawlet tool_web_fetch.go tools.webFetch server-side request forgery
CVE-2026-156682.113.8louisho5picobotCWE-918louisho5 picobot web Tool web.go WebTool.Execute server-side request forgery
CVE-2026-157502.113.6mastergo-designmastergo-magic-mcpCWE-918mastergo-design mastergo-magic-mcp mcp__getComponentLink get-component-link.t…
CVE-2026-474727.813.5NVIDIATensorRT-LLMCWE-502NVIDIA TensorRT-LLM contains a vulnerability in its inter-process communicati…
CVE-2026-598395.513.4FortinetFortiProxyCWE-22A improper limitation of a pathname to a restricted directory ('path traversa…
CVE-2026-586017.813.2MicrosoftWindows 10 Version 1607CWE-122Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability
CVE-2026-586027.813.2MicrosoftWindows 11 Version 24H2CWE-416Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
CVE-2026-148525.213.0Checkmk GmbHCheckmkCWE-78mk_sap_hana: Privilege escalation via crafted sapstartsrv process name
CVE-2026-504517.812.9MicrosoftWindows 10 Version 1607CWE-306Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulne…
CVE-2026-544324.712.9RoundcubeWebmailCWE-79Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2 allows Stored Cross-Si…
CVE-2026-156439.212.8AWSawslabs.healthlake-mcp-serverCWE-918AWS HealthLake MCP Server SSRF via Pagination URL
CVE-2026-503927.012.7MicrosoftWindows 11 Version 24H2CWE-416Windows Secure Kernel Mode Elevation of Privilege Vulnerability
CVE-2026-242206.412.7NVIDIATensorRT-LLMCWE-502NVIDIA TensorRT-LLM for any platform contains a vulnerability in visual gen s…
CVE-2026-447533.712.7SAP_SESAP HANA Extended Application Services classic model (User Self Service)CWE-204Information Disclosure vulnerability in SAP HANA Extended Application Service…
CVE-2026-156282.112.6zhayujiechatgpt-on-wechat CowAgentCWE-918zhayujie chatgpt-on-wechat CowAgent Vision Tool vision.py Vision._download_to…
CVE-2026-502955.512.4MicrosoftWindows 11 Version 24H2CWE-269Windows Zero Trust DNS Security Feature Bypass Vulnerability
CVE-2026-473049.812.3Microsoft.NET 10.0CWE-345.NET Security Feature Bypass Vulnerability
CVE-2026-491717.812.3MicrosoftWindows 10 Version 1607CWE-416Windows Speech Runtime Elevation of Privilege Vulnerability
CVE-2026-474717.512.2NVIDIATensorRT-LLMCWE-122NVIDIA TensorRT-LLM for any platform contains a vulnerability in tensor deser…
CVE-2026-488077.112.2twigphpTwigCWE-693Twig: Sandbox `__toString()` policy bypass via `Traversable` in `join` and `r…
CVE-2026-503428.812.0MicrosoftWindows 11 Version 24H2CWE-284Windows MIDI Service Module Elevation of Privileges Vulnerability
CVE-2026-485817.812.0MicrosoftMicrosoft Surface GoCWE-1220Surface Broker SDMA Elevation of Privilege Vulnerability
CVE-2026-503337.812.0MicrosoftWindows 10 Version 1607CWE-306Windows Spaceport.sys Elevation of Privilege Vulnerability
CVE-2026-504057.812.0MicrosoftWindows 10 Version 1607CWE-1220Windows Filtering Platform Elevation of Privilege Vulnerability
CVE-2026-550017.812.0MicrosoftWindows 10 Version 1607CWE-295Active Directory Domain Services Elevation of Privilege Vulnerability
CVE-2026-550067.812.1MicrosoftMicrosoft Exchange Server 2016 Cumulative Update 23CWE-1220Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2026-550147.812.0MicrosoftWindows Remote HelpCWE-284Windows Remote Help Defense Elevation of Privilege Vulnerability
CVE-2026-571077.812.0MicrosoftWindows Admin CenterCWE-287Windows Admin Center Elevation of Privilege Vulnerability
CVE-2026-504657.112.1MicrosoftWindows 11 Version 24H2CWE-284Windows DNS Client Tampering Vulnerability
CVE-2026-485717.011.9MicrosoftWindows 11 version 23H2CWE-416Windows App Package Installer Elevation of Privilege Vulnerability
CVE-2026-503237.011.9MicrosoftWindows 11 Version 24H2CWE-416Windows Runtime Elevation of Privilege Vulnerability
CVE-2026-584755.312.1Dan-in-CASIPCWE-79Sustainable Irrigation Platform 5.2.16 Stored XSS via Program Name
CVE-2026-541297.811.9MicrosoftWindows 10 Version 1809CWE-416Windows Hyper-V Elevation of Privilege Vulnerability
CVE-2026-156417.111.9DevolutionsServerCWE-863Improper authorization in the access request status endpoint in Devolutions S…
CVE-2026-502977.011.9MicrosoftWindows 10 Version 1607CWE-284Win32k Elevation of Privilege Vulnerability
CVE-2026-503257.011.9MicrosoftWindows 10 Version 1607CWE-284Win32k Elevation of Privilege Vulnerability
CVE-2026-597325.011.8rclonercloneCWE-22rclone archive extract allows S3 destination prefix escape via crafted archiv…
CVE-2026-499816.011.8twigphpTwigCWE-693Twig: Sandbox filter, tag and function allow-list bypass when sandbox state c…
CVE-2026-156242.111.4nextlevelbuilderGoClawCWE-918nextlevelbuilder GoClaw invoke Endpoint create_video_byteplus.go bytePlusDown…
CVE-2026-151839.211.2SnowflakeSnowflake Spark ConnectorCWE-89Input Validation Vulnerabilities in Snowflake Spark Connector
CVE-2026-125886.011.2TrellixTrellix HX ConsoleCWE-409An attacker with access to an HX 10.0.0 and previous versions, may send speci…
CVE-2026-626555.711.1NETGEARRBR860CWE-121A DoS vulnerability due to stack overflow exists in certain NETGEAR Orbi models
CVE-2026-95618.810.7Eclipse FoundationEclipse KuraCWE-345Eclipse Kura versions prior to 5.6.2 trust the client-supplied X-Forwarded-Fo…
CVE-2026-157576.310.6NETGEARDGND3700v1CWE-20Insufficient input validation vulnerability in NETGEAR DGND3700v1 modem router
CVE-2026-343465.510.5MicrosoftWindows 10 Version 1607CWE-319Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerab…
CVE-2026-503035.510.5MicrosoftWindows 10 Version 1809CWE-1240Windows Key Guard Security Feature Bypass Vulnerability
CVE-2026-503077.810.2MicrosoftWindows 10 Version 1809CWE-416Windows TCP/IP Elevation of Privilege Vulnerability
CVE-2026-503937.810.2MicrosoftWindows 11 Version 24H2CWE-416Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
CVE-2026-503967.810.2MicrosoftWindows 11 Version 24H2CWE-416Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
CVE-2026-549897.810.2MicrosoftWindows 10 Version 1607CWE-416Quality Windows Audio/Video Experience (QWAVE) Elevation of Privilege Vulnera…
CVE-2026-156722.110.2itsourcecodeElectronic Judging SystemCWE-74itsourcecode Electronic Judging System add_judges.php sql injection
CVE-2026-506737.810.1MicrosoftWindows 10 Version 1607CWE-367Windows Kernel Elevation of Privilege Vulnerability
CVE-2026-491627.010.0MicrosoftWindows 11 Version 24H2CWE-416Microsoft Brokering File System Elevation of Privilege Vulnerability
CVE-2026-502967.010.0MicrosoftWindows 10 Version 1607CWE-416DirectX Graphics Kernel Elevation of Privilege Vulnerability
CVE-2026-503177.010.1MicrosoftWindows 11 Version 24H2CWE-362Windows Operating Systems Elevation of Privilege Vulnerability
CVE-2026-503787.010.1MicrosoftWindows 10 Version 1809CWE-362Windows Key Guard Elevation of Privilege Vulnerability
CVE-2026-503977.010.1MicrosoftWindows 10 Version 1607CWE-416Windows Kernel Elevation of Privilege Vulnerability
CVE-2026-504107.010.0MicrosoftWindows 10 Version 1809CWE-416Windows Runtime Elevation of Privilege Vulnerability
CVE-2026-504497.010.0MicrosoftWindows 10 Version 1809CWE-416Windows Runtime Elevation of Privilege Vulnerability
CVE-2026-506767.010.1MicrosoftWindows 11 Version 24H2CWE-362Windows Media Elevation of Privilege Vulnerability
CVE-2026-585277.010.1MicrosoftWindows 11 Version 24H2CWE-362Windows Runtime Elevation of Privilege Vulnerability
CVE-2026-424475.010.0skylotjadxCWE-79jadx: HTML Injection in Summary panel
CVE-2026-156782.010.0code-projectsOnline Job PortalCWE-79code-projects Online Job Portal DetailJob.php cross site scripting
CVE-2026-491746.19.9MicrosoftWindows 10 Version 1809CWE-306DNS Client Tampering Vulnerability
CVE-2026-483508.69.8AdobeAdobe Animate 2023CWE-22Animate | Improper Limitation of a Pathname to a Restricted Directory ('Path …
CVE-2026-504597.89.8MicrosoftWindows 10 Version 21H2CWE-416Windows Kernel Elevation of Privilege Vulnerability
CVE-2026-76406.49.8aguilatechnologiesWP Customer AreaCWE-79WP Customer Area <= 8.3.5 - Authenticated (Contributor+) Stored Cross-Site Sc…
CVE-2026-487476.39.8symfonysymfonyCWE-347Symfony: Mailomat Mailer Webhook Parser Reads the HMAC Algorithm from the Req…
CVE-2026-447695.59.8SAP_SESAP S/4HANA Project Management (PPM-PRO)CWE-89SQL Injection vulnerability in SAP S/4HANA Project Management (PPM-PRO)
CVE-2026-479695.59.8AdobeAuditionCWE-125Audition | Out-of-bounds Read (CWE-125)
CVE-2026-482707.89.6AdobePremiereCWE-787Premiere Pro | Out-of-bounds Write (CWE-787)
CVE-2026-504186.19.7MicrosoftWindows 11 Version 24H2CWE-284Windows System Secure Feature Bypass Vulnerability
CVE-2026-487585.49.7sigstoresigstore-jsCWE-347sigstore-js: DSSE payloadType type-binding failure
CVE-2026-67905.39.7Eclipse FoundationEclipse JettyCWE-20In Eclipse Jetty, for HTTP/1, HTTP/2 and HTTP/3 requests, there is no strict …
CVE-2026-626594.39.5NETGEARWAX333CWE-20Authenticated users can make unauthorized changes on NETGEAR WAX333 Access Po…
CVE-2026-626584.79.3NETGEARRAX43CWE-20Post-authentication Command Injection Vulnerability in certain Nighthawk RAX …
CVE-2026-483498.19.2AdobeAdobe Animate 2023CWE-863Animate | Incorrect Authorization (CWE-863)
CVE-2026-156377.59.2DevolutionsServerCWE-639Improper authorization in the PAM SSH key and certificate retrieval endpoints…
CVE-2026-479677.88.8AdobeAuditionCWE-787Audition | Out-of-bounds Write (CWE-787)
CVE-2026-479687.88.8AdobeAuditionCWE-787Audition | Out-of-bounds Write (CWE-787)
CVE-2026-504587.88.7MicrosoftWindows 11 Version 24H2CWE-362Microsoft Brokering File System Elevation of Privilege Vulnerability
CVE-2026-503227.08.8MicrosoftWindows 11 Version 24H2CWE-362Windows Runtime Elevation of Privilege Vulnerability
CVE-2026-503457.08.8MicrosoftWindows 11 Version 24H2CWE-362Windows Runtime Elevation of Privilege Vulnerability
CVE-2026-503717.08.8MicrosoftWindows 10 Version 1607CWE-362Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerab…
CVE-2026-505037.08.8MicrosoftWindows 11 Version 24H2CWE-362Windows Runtime Elevation of Privilege Vulnerability
CVE-2026-506587.08.8MicrosoftMicrosoft Defender for Endpoint for MacCWE-367Microsoft Defender for Endpoint for Mac Elevation of Privilege Vulnerability
CVE-2026-126066.38.7Eclipse FoundationEclipse GlassFishCWE-444Eclipse Grizzly in versions before 5.0.2, cannot properly parse the trailer s…
CVE-2026-483397.88.7AdobeAdobe BridgeCWE-122Bridge | Heap-based Buffer Overflow (CWE-122)
CVE-2026-598404.38.7FortinetFortiOSCWE-126A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, For…
CVE-2026-483467.98.6AdobeAdobe Animate 2023CWE-426Animate | Untrusted Search Path (CWE-426)
CVE-2026-528402.78.5alextselegidiseasyappointmentsCWE-918Easy!Appointments has server-side request forgery in CalDAV connection test t…
CVE-2026-556517.18.4alextselegidiseasyappointmentsCWE-200Easy!Appointments Vulnerable to Appointments Takeover via Excessive Data Expo…
CVE-2026-503858.88.3MicrosoftWindows 11 Version 24H2CWE-362Windows Runtime Elevation of Privilege Vulnerability
CVE-2026-503057.88.3MicrosoftWindows 11 Version 24H2CWE-416Microsoft Brokering File System Elevation of Privilege Vulnerability
CVE-2026-503617.88.3MicrosoftWindows 11 Version 24H2CWE-362Microsoft Brokering File System Elevation of Privilege Vulnerability
CVE-2026-504277.88.3MicrosoftWindows 10 Version 1809CWE-362Content Delivery Manager Elevation of Privilege Vulnerability
CVE-2026-504577.88.3MicrosoftWindows 10 Version 1809CWE-362Windows Runtime Elevation of Privilege Vulnerability
CVE-2026-541257.88.3MicrosoftWindows 10 Version 1809CWE-362Windows Runtime Elevation of Privilege Vulnerability
CVE-2026-528382.68.3alextselegidiseasyappointmentsCWE-79Easy!Appointments disable_booking_message rendered as raw HTML on public book…
CVE-2026-483715.48.1AdobeAdobe CommerceCWE-79Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2026-586287.88.0MicrosoftWindows 10 Version 1809CWE-362Windows Wireless Network Manager Elevation of Privilege Vulnerability
CVE-2026-447676.18.0SAP_SE@ui5/webcomponents-baseCWE-79Allowlist Bypass in setThemeRoot() Enables Cross-Origin CSS Injection
CVE-2026-115675.98.0UnknownSureForms—SureForms < 2.11.1 - Unauthenticated Payment Amount Bypass
CVE-2026-483657.87.9AdobeAuditionCWE-787Audition | Out-of-bounds Write (CWE-787)
CVE-2026-483687.87.9AdobeAuditionCWE-787Audition | Out-of-bounds Write (CWE-787)
CVE-2026-80857.07.9Rockwell AutomationArena® SimulationCWE-787Rockwell Automation Arena® - Memory Corruption Vulnerability
CVE-2026-83127.07.9Rockwell AuotmationArena® SimulationCWE-787Rockwell Automation Arena® - Memory Corruption Vulnerability
CVE-2026-83137.07.9Rockwell AutomationArena® SimulationCWE-787Rockwell Automation Arena® - Memory Corruption Vulnerability
CVE-2026-83147.07.9Rockwell AutomationArena® SimulationCWE-787Rockwell Automation Arena® - Memory Corruption Vulnerability
CVE-2026-96538.77.6Rockwell Automation1756-EN2, 1756-EN3CWE-3541756-EN2, 1756-EN3, and 1756-ENBT - Denial of Service via CIP Connection ID
CVE-2026-482908.27.6AdobeContent Credentials Rust SDKCWE-918CAI Content Credentials | Server-Side Request Forgery (SSRF) (CWE-918)
CVE-2026-477377.57.6pumapumaCWE-290Puma PROXY Protocol v1 Accepts Repeated Protocol Headers on Persistent Connec…
CVE-2026-466375.17.3twigphpTwigCWE-79Twig: HTML-output filters in twig/* extras incorrectly declared `is_safe => […
CVE-2026-153056.37.1TYPO3TYPO3 CMSCWE-351TYPO3 CMS - Unrestricted File Upload in Form Framework
CVE-2026-447596.16.9SAP_SESAP NetWeaver Enterprise PortalCWE-79Cross Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal
CVE-2026-447714.36.9SAP_SESAP S/4HANA (Draft operation)CWE-862Missing Authorization check in SAP S/4HANA (Draft operation)
CVE-2026-585436.36.9MicrosoftWindows 11 Version 24H2CWE-362Universal Print Management Service Elevation of Privilege Vulnerability
CVE-2026-601195.16.8HiEventsDevHi.EventsCWE-862Hi.Events < 1.11.0 XSS via Event Title JSON.stringify Injection
CVE-2026-483407.86.8AdobeAdobe BridgeCWE-822Bridge | Untrusted Pointer Dereference (CWE-822)
CVE-2026-483427.86.7AdobeAdobe BridgeCWE-190Bridge | Integer Overflow or Wraparound (CWE-190)
CVE-2026-129886.46.6UnknownWP 2FACWE-862WP 2FA < 3.1.1.2 - Account Takeover via 2FA Setup Email Binding
CVE-2026-466285.16.7twigphpTwigCWE-116Twig: The `spaceless` filter implicitly marks its output as safe
CVE-2026-477305.16.7twigphpTwigCWE-79Twig: XSS in profiler HtmlDumper via unescaped template and profile names
CVE-2026-561787.06.5MicrosoftMicrosoft Defender for Endpoint for MacCWE-367Microsoft Defender for Endpoint for Mac Elevation of Privilege Vulnerability
CVE-2026-482535.46.5AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-482545.46.5AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-482555.46.5AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-482575.46.5AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-482605.46.5AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-482615.46.5AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-482625.46.5AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-447704.36.5SAP_SESAP S/4 HANA (Create Single Payment)CWE-862Missing Authorization check in SAP S/4 HANA (Create Single Payment)
CVE-2026-242687.86.4NVIDIATensorRTCWE-122NVIDIA TensorRT contains a vulnerability where an attacker might cause a heap…
CVE-2026-482635.46.4AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2026-483555.46.4AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2026-483097.86.3AdobeAuditionCWE-787Audition | Out-of-bounds Write (CWE-787)
CVE-2026-483487.76.3AdobeAdobe Animate 2023CWE-863Animate | Incorrect Authorization (CWE-863)
CVE-2026-535666.86.4CitrixCitrix Secure Access Client for WindowsCWE-125Out-of-bounds memory read
CVE-2026-115639.66.1UnknownWord Count and Social Shares—Word Count and Social Shares <= 1.0 - Subscriber+ Arbitrary File Deletion via…
CVE-2026-447684.16.1SAP_SESAP CRM (WebClient UI)CWE-15Security misconfiguration in SAP CRM (WebClient UI)
CVE-2026-551447.16.1MicrosoftWindows 11 Version 24H2CWE-325Windows Cryptography API: Next Generation (CNG) Tampering Vulnerability
CVE-2026-485727.06.0MicrosoftWindows 11 version 23H2CWE-362Windows App Package Installer Elevation of Privilege Vulnerability
CVE-2026-579734.76.0MicrosoftWindows Subsystem for Linux (WSL2)CWE-367Windows Subsystem for Linux (WSL2) Kernel Tampering Vulnerability
CVE-2026-153927.75.9HMBRANDDBD::FileCWE-22DBD::File versions before 1.651 for Perl do not ensure the table file is not …
CVE-2026-544296.06.0SiemensSIMATIC S7-PLCSIM AdvancedCWE-770A vulnerability has been identified in SIMATIC S7-PLCSIM Advanced (All versio…
CVE-2026-626565.46.0NETGEARRAXE450CWE-20Post-authenticated command injection vulnerability found in certain NETGEAR R…
CVE-2026-150583.15.9DevolutionsServerCWE-639Improper authorization in the secure messages deletion endpoint in Devolution…
CVE-2026-482758.65.8AdobeIllustrator Desktop 2026CWE-426Illustrator | Untrusted Search Path (CWE-426)
CVE-2026-483126.85.5AdobeContent Credentials Rust SDKCWE-20CAI Content Credentials | Improper Input Validation (CWE-20)
CVE-2026-04878.45.4SAP_SESAProuter on Microsoft WindowsCWE-427DLL Hijacking vulnerability in SAProuter on Microsoft Windows
CVE-2026-150768.25.4Eclipse FoundationEclipse Vert.xCWE-346In versions up to and including 4.5.29 (4.x branch) and 5.1.4 (5.x branch), t…
CVE-2026-483535.55.1AdobeContent Credentials Rust SDKCWE-20CAI Content Credentials | Improper Input Validation (CWE-20)
CVE-2026-503217.05.0MicrosoftWindows 10 Version 1607CWE-362Windows USB Driver Elevation of Privilege Vulnerability
CVE-2026-504407.05.0MicrosoftWindows 11 Version 24H2CWE-362Windows Audio Service Elevation of Privilege Vulnerability
CVE-2026-541077.05.0MicrosoftWindows 10 Version 1607CWE-362Windows Win32k Elevation of Privilege Vulnerability
CVE-2026-549917.05.0MicrosoftWindows 11 Version 24H2CWE-125Windows USB Print Driver Elevation of Privilege Vulnerability
CVE-2026-482966.25.1AdobeContent Credentials Rust SDKCWE-191CAI Content Credentials | Integer Underflow (Wrap or Wraparound) (CWE-191)
CVE-2026-483026.25.1AdobeContent Credentials Rust SDKCWE-20CAI Content Credentials | Improper Input Validation (CWE-20)
CVE-2026-448007.84.9MicrosoftWindows 11 version 23H2CWE-362Windows Push Notifications Elevation of Privilege Vulnerability
CVE-2026-498087.85.0MicrosoftWindows 11 Version 24H2CWE-362Windows Kernel Elevation of Privilege Vulnerability
CVE-2026-491837.04.9MicrosoftWindows 10 Version 1809CWE-362Windows Clipboard Server Elevation of Privilege Vulnerability
CVE-2026-497847.04.9MicrosoftWindows 10 Version 1607CWE-362Microsoft Windows App Store Elevation of Privilege Vulnerability
CVE-2026-498027.04.9MicrosoftWindows 11 Version 24H2CWE-362Windows USB Print Driver Elevation of Privilege Vulnerability
CVE-2026-498037.04.9MicrosoftWindows 10 Version 1607CWE-362Windows AppX Deployment Extensions Elevation of Privilege Vulnerability
CVE-2026-498067.04.9MicrosoftWindows 11 Version 24H2CWE-362Windows USB Print Driver Elevation of Privilege Vulnerability
CVE-2026-503567.04.9MicrosoftWindows 10 Version 1607CWE-362Microsoft Windows App Store Elevation of Privilege Vulnerability
CVE-2026-503847.04.9MicrosoftWindows 10 Version 1809CWE-362Windows Clip Service Elevation of Privilege Vulnerability
CVE-2026-504037.04.9MicrosoftWindows 11 Version 24H2CWE-362Windows Runtime Elevation of Privilege Vulnerability
CVE-2026-504047.04.9MicrosoftWindows 11 Version 24H2CWE-362Windows Media Elevation of Privilege Vulnerability
CVE-2026-504507.04.9MicrosoftWindows 10 Version 1809CWE-362Windows Network Connections Service Elevation of Privilege Vulnerability
CVE-2026-506697.04.9MicrosoftWindows 10 Version 1607CWE-362Windows Telephony Server Elevation of Privilege Vulnerability
CVE-2026-506727.04.9MicrosoftWindows 10 Version 1809CWE-362Windows NTFS Elevation of Privilege Vulnerability
CVE-2026-541117.04.9MicrosoftWindows 11 Version 24H2CWE-125Universal Print Management Service Elevation of Privilege Vulnerability
CVE-2026-541127.04.9MicrosoftWindows 10 Version 1809CWE-362Windows Win32k Elevation of Privilege Vulnerability
CVE-2026-549967.04.9MicrosoftWindows 11 Version 24H2CWE-125Windows USB Print Driver Elevation of Privilege Vulnerability
CVE-2026-482986.25.0AdobeContent Credentials Rust SDKCWE-191CAI Content Credentials | Integer Underflow (Wrap or Wraparound) (CWE-191)
CVE-2026-483546.25.0AdobeContent Credentials Rust SDKCWE-190CAI Content Credentials | Integer Overflow or Wraparound (CWE-190)
CVE-2026-483576.25.0AdobeContent Credentials Rust SDKCWE-400CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)
CVE-2026-218403.15.0HCLSoftwareHCL BigFix PlatformCWE-208HCL BigFix Platform is affected by a user enumeration vulnerability
CVE-2026-535658.54.9CitrixSecure Access Client for WindowsCWE-269Local Privilege escalation allows a low-privileged user to gain SYSTEM privil…
CVE-2026-420498.44.8skylotjadxCWE-94jadx: RCE Via Groovy Code Injection in Gradle Export
CVE-2026-242387.84.8NVIDIATensorRTCWE-129NVIDIA TensorRT for contains a vulnerability where an attacker might cause an…
CVE-2026-242727.84.8NVIDIATensorRTCWE-122NVIDIA TensorRT contains a vulnerability where an attacker might cause an ove…
CVE-2026-483417.84.6AdobeAdobe BridgeCWE-787Bridge | Out-of-bounds Write (CWE-787)
CVE-2026-483667.84.6AdobeAdobe Media EncoderCWE-787Media Encoder | Out-of-bounds Write (CWE-787)
CVE-2026-483677.84.6AdobeAfter EffectsCWE-787After Effects | Out-of-bounds Write (CWE-787)
CVE-2026-482747.84.6AdobeAfter EffectsCWE-787After Effects | Out-of-bounds Write (CWE-787)
CVE-2026-483117.84.6AdobeAdobe BridgeCWE-787Bridge | Out-of-bounds Write (CWE-787)
CVE-2026-483437.84.6AdobeAdobe BridgeCWE-787Bridge | Out-of-bounds Write (CWE-787)
CVE-2026-483697.84.6AdobePremiereCWE-787Premiere Pro | Out-of-bounds Write (CWE-787)
CVE-2026-483707.84.6AdobeAdobe Media EncoderCWE-787Media Encoder | Out-of-bounds Write (CWE-787)
CVE-2026-585267.84.5MicrosoftWindows 10 Version 1809CWE-362Windows Storage Elevation of Privilege Vulnerability
CVE-2026-598417.54.5FortinetFortiSIEMWindowsAgentCWE-923A improper restriction of communication channel to intended endpoints vulnera…
CVE-2026-483085.94.4AdobePremiereCWE-20Premiere Pro | Improper Input Validation (CWE-20)
CVE-2026-74945.34.3SonatypeNexus RepositoryCWE-918Nexus Repository - SSRF in SSL Certificate Retrieval
CVE-2026-528393.34.3alextselegidiseasyappointmentsCWE-639Easy!Appointments appointments/store and appointments/update allow cross-prov…
CVE-2026-150758.24.2Eclipse FoundationEclipse Vert.xCWE-200In Eclipse Vert.x versions up to and including 4.5.29 (4.x branch) and 5.1.4 …
CVE-2026-488157.54.1sigstoresigstore-jsCWE-347sigstore-js: `certificateOIDs` verification constraints are silently dropped …
CVE-2026-447604.74.0SAP_SESAP NetWeaver Application Server ABAP (applications based on Business Server Pages)CWE-79Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server …
CVE-2026-96368.23.8Rockwell AutomationControlLogix® 5580, CompactLogix® 5380, GuardLogix® 5580, Compact GuardLogix® 5380, 1756-EN4TRCWE-299Rockwell Automation CompactLogix® 5380 ControlLogix® 5580 / 1756-EN4 Communic…
CVE-2026-156214.83.8mosaxivclawletCWE-59mosaxiv clawlet File Tools fs_ops.go edit_file link following
CVE-2026-157491.93.8mastergo-designmastergo-magic-mcpCWE-22mastergo-design mastergo-magic-mcp mcp__C2d get-c2d.ts execute path traversal
CVE-2026-157511.93.8mastergo-designmastergo-magic-mcpCWE-22mastergo-design mastergo-magic-mcp mcp__getComponentGenerator component-workf…
CVE-2026-482877.43.7AdobeContent Credentials Rust SDKCWE-426CAI Content Credentials | Untrusted Search Path (CWE-426)
CVE-2026-483357.83.7AdobeIllustrator Desktop 2026CWE-787Illustrator | Out-of-bounds Write (CWE-787)
CVE-2026-483367.83.7AdobeIllustrator Desktop 2026CWE-787Illustrator | Out-of-bounds Write (CWE-787)
CVE-2026-483377.83.7AdobeIllustrator Desktop 2026CWE-787Illustrator | Out-of-bounds Write (CWE-787)
CVE-2026-242596.43.7NVIDIATensorRT-LLMCWE-306NVIDIA TensorRT-LLM for Linux contains a vulnerability where an attacker coul…
CVE-2026-482727.83.5AdobeCreative Cloud DesktopCWE-427Creative Cloud Desktop | Uncontrolled Search Path Element (CWE-427)
CVE-2026-546847.03.3skylotjadxCWE-22jadx: XAPK archive entries with absolute paths can plant drop-in plugins and …
CVE-2025-156655.43.3UnknownUltimate Before After Image Slider & Gallery—BEAF < 4.7.1 - Admin+ Stored XSS via Widget Shortcode Field
CVE-2026-474737.42.9NVIDIATensorRT-LLMCWE-123NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a …
CVE-2026-596747.13.0SUSEopenSUSE TumbleweedCWE-61LPE from suricata user to root due to chown in %post in suricata packaging
CVE-2026-528413.13.0alextselegidiseasyappointmentsCWE-639Easy!Appointments: Authorization bypass in Google OAuth provider binding lets…
CVE-2026-598369.82.7FortinetFortiClientEMSCWE-295A improper certificate validation vulnerability in Fortinet FortiClientEMS 7.…
CVE-2026-488166.52.5sigstoresigstore-jsCWE-345sigstore-js: Insufficient Verification of Data Authenticity
CVE-2026-242297.32.3NVIDIATensorRT-LLMCWE-306NVIDIA TensorRT-LLM for Linux contains a vulnerability in the disaggregated o…
CVE-2026-106697.82.2zephyrprojectzephyrCWE-190Xtensa MPU `arch_buffer_validate()` integer-overflow lets a user thread bypas…
CVE-2026-40177.42.1BlackBerry LtdQNX Software Development PlatformCWE-121Buffer overflow in the QNX Neutrino kernel impacts versions of the QNX Softwa…
CVE-2026-242716.22.2NVIDIATensorRT-LLMCWE-770NVIDIA TensorRT-LLM contains a vulnerability in the OpenAI-compatible inferen…
CVE-2026-474706.22.2NVIDIATensorRT-LLMCWE-20NVIDIA TensorRT-LLM for any platform contains a vulnerability in the gRPC ser…
CVE-2026-474756.22.2NVIDIATensorRT-LLMCWE-617NVIDIA TensorRT-LLM contains a vulnerability in the OpenAI-compatible inferen…
CVE-2026-242266.32.1NVIDIATensorRT-LLMCWE-829NVIDIA TensorRT-LLM for Linux contains a vulnerability where an attacker coul…
CVE-2026-156423.31.8DevolutionsServerCWE-200Insertion of sensitive information into a file in the Recovery Kit response f…
CVE-2026-107148.81.7Rockwell AutomationFactoryTalk® Services PlatformCWE-1390Rockwell Automation FactoryTalk® Services Platform FTSP - Weak Authentication…
CVE-2026-242346.81.7NVIDIATensorRT-LLMCWE-918NVIDIA TensorRT-LLM for Linux contains a vulnerability in the multimodal medi…
CVE-2025-409458.51.6SiemensCOMOS V10.4.5CWE-426A vulnerability has been identified in COMOS V10.4.5 (All versions < V10.4.5.…
CVE-2026-05156.21.6BlackBerry LtdQNX Software Development PlatformCWE-233Insufficient parameter validation in the QNX Neutrino kernel impacts versions…
CVE-2026-91277.31.5Rockwell AutomationStudio 5000 Logix DesignerCWE-863Studio 5000 Logix Designer® – Multiple Vulnerabilities
CVE-2026-68517.01.4BitdefenderTotal SecurityCWE-59Improper link resolution before file access in Bitdefender Total Security via…
CVE-2026-91085.41.4Rockwell AutomationStudio 5000 Logix DesignerCWE-22Studio 5000 Logix Designer® – Multiple Vulnerabilities
CVE-2026-106717.11.4zephyrprojectzephyrCWE-1188User thread can re-initialize an in-use `k_pipe`, corrupting kernel wait queu…
Results (continued, ranked) — ranks 1001–1007 of 1007
CVECVSSEPSS %ileVendorProductCWETitle
CVE-2026-106705.51.2zephyrprojectzephyrCWE-476User-triggerable kernel NULL-pointer dereference (DoS) in `k_thread_name_copy…
CVE-2026-626574.91.2NETGEARMR70CWE-599Certificate validation vulnerability in NETGEAR Gaming Router and certain Nig…
CVE-2026-483447.81.2AdobeCreative Cloud DesktopCWE-367GoCart | Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367)
CVE-2026-91287.30.8Rockwell AutomationStudio 5000 Logix DesignerCWE-428Studio 5000 Logix Designer® – Multiple Vulnerabilities
CVE-2026-50407.10.6TP-Link Systems Inc.Deco M5 Deco M5 V1CWE-916Weak Password Hashing Mechanism in TP-Link Deco M5
CVE-2026-40186.40.6BlackBerry LtdQNX Software Development PlatformCWE-367TOCTOU race condition in the QNX Neutrino kernel impacts versions of the QNX …
CVE-2025-84122.00.5SUSEVirtual Machine Driver PackCWE-120VMDP: Potential buffer overflow in the RtlQueryRegistryValues function