boxscore/security

A daily page of record for published software vulnerabilities — the previous UTC day, closed and final. New here?

Tuesday, October 13, 2026 · all times UTC← 2026-10-12 · archive

Security Box Score — October 13, 2026 — page 4

Edition of October 13, 2026, continued — page 4 of 5. Back to page 1 · page 3 · page 5

Results (continued, ranked) — ranks 1601–2200 of 2291
CVECVSSEPSS %ileVendorProductCWETitle
CVE-2026-701226.5—MicrosoftWindows 10 Version 21H2CWE-367Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
CVE-2026-701486.5—MicrosoftWindows 10 Version 1809CWE-441Windows Broadcast DVR User Service Information Disclosure Vulnerability
CVE-2026-701666.5—MicrosoftWindows 10 Version 1607CWE-125Windows DNS Denial of Service Vulnerability
CVE-2026-701706.5—MicrosoftWindows 10 Version 1607CWE-822Windows Kernel Denial of Service Vulnerability
CVE-2026-701946.5—Microsoft.NET 11.0CWE-295.NET Framework Security Feature Bypass Vulnerability
CVE-2026-702066.5—MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Office Word Information Disclosure Vulnerability
CVE-2026-702196.5—MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Office Excel Information Disclosure Vulnerability
CVE-2026-702446.5—MicrosoftWindows 10 Version 1607CWE-125Windows DNS Server Information Disclosure Vulnerability
CVE-2026-702486.5—MicrosoftWindows 10 Version 1607CWE-476Windows Hyper-V Denial of Service Vulnerability
CVE-2026-702596.5—MicrosoftMicrosoft SharePoint Server Subscription EditionCWE-918Microsoft Office SharePoint Information Disclosure Vulnerability
CVE-2026-702636.5—MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Office Word Information Disclosure Vulnerability
CVE-2026-702986.5—MicrosoftMicrosoft SharePoint Server Subscription EditionCWE-22Microsoft Office SharePoint Information Disclosure Vulnerability
CVE-2026-773756.5—drakkansftpgoCWE-129SFTPGo: Denial of service via malformed SSH channel request
CVE-2026-778166.5—IBMWebSphere Application Server - LibertyCWE-295IBM WebSphere Application Server Liberty Improper Certificate Validation
CVE-2026-786336.5—OktaOkta RADIUS AgentCWE-835Denial of Service in Okta RADIUS Agent Packet Parser
CVE-2026-815076.5—espressifesp-idfCWE-125ESF-IDF: Bluetooth Classic L2CAP Heap Memory Disclosure Allowing Unauthorized…
CVE-2026-835156.5—MicrosoftWindows 10 Version 1607CWE-908RPC Runtime Information Disclosure Vulnerability
CVE-2026-835216.5—MicrosoftWindows 10 Version 1607CWE-125Windows IKE Extension Information Disclosure Vulnerability
CVE-2026-836366.5—MicrosoftWindows 10 Version 21H2CWE-476Windows Hyper-V Denial of Service Vulnerability
CVE-2026-836486.5—MicrosoftWindows 10 Version 21H2CWE-476Windows Active Directory Domain Services Denial of Service Vulnerability
CVE-2026-836496.5—MicrosoftWindows 10 Version 1607CWE-125Windows Local Security Authority Subsystem Service (LSASS) Denial of Service …
CVE-2026-836516.5—MicrosoftWindows 10 Version 1607CWE-125Windows GDI Information Disclosure Vulnerability
CVE-2026-836676.5—MicrosoftWindows 10 Version 1607CWE-125Windows Active Directory Domain Services Denial of Service Vulnerability
CVE-2026-836716.5—MicrosoftWindows 10 Version 1809CWE-125Windows Hyper-V Information Disclosure Vulnerability
CVE-2026-836836.5—MicrosoftWindows 10 Version 1607CWE-36Windows Encrypting File System (EFS) Information Disclosure Vulnerability
CVE-2026-836856.5—MicrosoftWindows 10 Version 1607CWE-126Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
CVE-2026-837036.5—MicrosoftWindows 10 Version 1607CWE-125Windows Wi-Fi Driver Denial of Service Vulnerability
CVE-2026-838886.5—MicrosoftWindows 10 Version 1607CWE-126Windows CD-ROM Driver Elevation of Privilege Vulnerability
CVE-2026-839066.5—MicrosoftWindows 11 version 23H2CWE-303Windows Shell Spoofing Vulnerability
CVE-2026-840076.5—MicrosoftWindows Server 2012CWE-125Remote Desktop Gateway Service Information Disclosure Vulnerability
CVE-2026-853316.5—MicrosoftWindows 10 Version 1607CWE-125Windows Device Association Service Information Disclosure Vulnerability
CVE-2026-853376.5—MicrosoftWindows 10 Version 1607CWE-125Windows Remote Desktop Client Information Disclosure Vulnerability
CVE-2026-857976.5—MicrosoftWindows 10 Version 1607CWE-20Windows GDI Information Disclosure Vulnerability
CVE-2026-858056.5—MicrosoftWindows 10 Version 1607CWE-358Microsoft PowerShell Security Feature Bypass Vulnerability
CVE-2026-858216.5—MicrosoftWindows 10 Version 1607CWE-125Windows Universal Disk Format File System Driver (UDFS) Information Disclosur…
CVE-2026-858406.5—MicrosoftWindows 10 Version 1607CWE-552Windows Event Viewer Information Disclosure Vulnerability
CVE-2026-858476.5—MicrosoftWindows 10 Version 1607CWE-125Windows Print Spooler Components Information Disclosure Vulnerability
CVE-2026-858596.5—MicrosoftWindows 10 Version 1607CWE-476Windows Message Queuing Queue Manager Denial of Service Vulnerability
CVE-2026-858736.5—MicrosoftSkype for Business Server 2015 CU13CWE-639Skype for Business Elevation of Privilege Vulnerability
CVE-2026-859326.5—MicrosoftMicrosoft SharePoint Server Subscription EditionCWE-22Microsoft Office SharePoint Information Disclosure Vulnerability
CVE-2026-877146.5—MicrosoftWindows 10 Version 1607CWE-862WebDAV Security Feature Bypass Vulnerability
CVE-2026-881226.5—MicrosoftWindows Server 2012CWE-125Role: DNS Server Denial of Service Vulnerability
CVE-2026-881236.5—MicrosoftWindows Server 2012CWE-125Role: DNS Server Denial of Service Vulnerability
CVE-2026-881256.5—MicrosoftWindows Server 2012CWE-125Role: DNS Server Denial of Service Vulnerability
CVE-2026-881296.5—MicrosoftWindows Server 2012CWE-125Role: DNS Server Denial of Service Vulnerability
CVE-2026-881306.5—MicrosoftWindows Server 2012CWE-125Role: DNS Server Denial of Service Vulnerability
CVE-2026-881376.5—MicrosoftWindows 10 Version 1607CWE-552WebDAV Information Disclosure Vulnerability
CVE-2026-881516.5—MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Office Excel Information Disclosure Vulnerability
CVE-2026-881536.5—MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Office Excel Information Disclosure Vulnerability
CVE-2026-881546.5—MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Office Excel Information Disclosure Vulnerability
CVE-2026-881676.5—MicrosoftMicrosoft 365 Apps for EnterpriseCWE-126Microsoft Office Word Information Disclosure Vulnerability
CVE-2026-881696.5—MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Office Word Information Disclosure Vulnerability
CVE-2026-881726.5—MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Office Excel Information Disclosure Vulnerability
CVE-2026-881756.5—MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Office Excel Information Disclosure Vulnerability
CVE-2026-881836.5—MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Office PowerPoint Information Disclosure Vulnerability
CVE-2026-881846.5—MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Office Excel Information Disclosure Vulnerability
CVE-2026-881906.5—MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Office Excel Information Disclosure Vulnerability
CVE-2026-881926.5—MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Office Excel Information Disclosure Vulnerability
CVE-2026-881956.5—MicrosoftMicrosoft 365 Apps for EnterpriseCWE-126Microsoft Office Excel Information Disclosure Vulnerability
CVE-2026-882016.5—MicrosoftMicrosoft 365 Apps for EnterpriseCWE-126Microsoft Office Excel Information Disclosure Vulnerability
CVE-2026-882036.5—MicrosoftMicrosoft 365 Apps for EnterpriseCWE-822Microsoft Office PowerPoint Information Disclosure Vulnerability
CVE-2026-888336.5—Red HatRed Hat Hardened ImagesCWE-191Busybox: busybox: udhcpc integer underflow in dhcp packet length calculation …
CVE-2026-892796.5—AuthTake Technology Inc.authtakeCWE-352Active Directory Password Change CSRF in AuthTake Technology's authtake
CVE-2026-945066.5—MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Office Access Information Disclosure Vulnerability
CVE-2026-956966.5—IBMWebSphere Application Server - LibertyCWE-400IBM WebSphere Application Server Liberty Denial of Service
CVE-2026-962046.5—MicrosoftArc Enabled Servers - Azure Connected Machine AgentCWE-918Azure Arc Elevation of Privilege Vulnerability
CVE-2026-962066.5—MicrosoftWindows Subsystem for Linux (WSL2)CWE-908Windows Subsystem for Linux Information Disclosure Vulnerability
CVE-2026-962296.5—Microsoft.NET 10.0CWE-183.NET Information Disclosure Vulnerability
CVE-2026-962386.5—Microsoft.NET 10.0CWE-346.NET Security Feature Bypass Vulnerability
CVE-2026-963036.5—MicrosoftPowerShell 7.4CWE-358Microsoft PowerShell Security Feature Bypass Vulnerability
CVE-2026-977406.5—MicrosoftMicrosoft 365 Apps for EnterpriseCWE-497Microsoft Office Excel Information Disclosure Vulnerability
CVE-2026-977436.5—MicrosoftMicrosoft 365 Apps for EnterpriseCWE-416Microsoft Office Excel Information Disclosure Vulnerability
CVE-2026-977606.5—MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Office Excel Information Disclosure Vulnerability
CVE-2026-977796.5—MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Office Excel Information Disclosure Vulnerability
CVE-2026-978136.5—MicrosoftWindows 10 Version 1809CWE-122Windows Hyper-V Information Disclosure Vulnerability
CVE-2026-978176.5—MicrosoftWindows 10 Version 1607CWE-122Role: DNS Server Information Disclosure Vulnerability
CVE-2026-978196.5—MicrosoftWindows 10 Version 1607CWE-125Role: DNS Server Information Disclosure Vulnerability
CVE-2026-978206.5—MicrosoftWindows 10 Version 1607CWE-125Role: DNS Server Information Disclosure Vulnerability
CVE-2026-978216.5—MicrosoftWindows 10 Version 1607CWE-125Role: DNS Server Information Disclosure Vulnerability
CVE-2026-978226.5—MicrosoftWindows 10 Version 1607CWE-125Role: DNS Server Information Disclosure Vulnerability
CVE-2026-978236.5—MicrosoftWindows 10 Version 1607CWE-125Role: DNS Server Information Disclosure Vulnerability
CVE-2026-978246.5—MicrosoftWindows 10 Version 1607CWE-125Role: DNS Server Information Disclosure Vulnerability
CVE-2026-978256.5—MicrosoftWindows 10 Version 1607CWE-125Role: DNS Server Information Disclosure Vulnerability
CVE-2026-978266.5—MicrosoftWindows 10 Version 1607CWE-125Role: DNS Server Information Disclosure Vulnerability
CVE-2026-978276.5—MicrosoftWindows 10 Version 1607CWE-125Role: DNS Server Information Disclosure Vulnerability
CVE-2026-978286.5—MicrosoftWindows 10 Version 1607CWE-126Role: DNS Server Information Disclosure Vulnerability
CVE-2026-978296.5—MicrosoftWindows 10 Version 1607CWE-125Role: DNS Server Information Disclosure Vulnerability
CVE-2026-978316.5—MicrosoftWindows 10 Version 1607CWE-125Role: DNS Server Information Disclosure Vulnerability
CVE-2026-978326.5—MicrosoftWindows 10 Version 1607CWE-125Role: DNS Server Information Disclosure Vulnerability
CVE-2026-978336.5—MicrosoftWindows 10 Version 1607CWE-125Role: DNS Server Information Disclosure Vulnerability
CVE-2026-978346.5—MicrosoftWindows 10 Version 1607CWE-125Role: DNS Server Information Disclosure Vulnerability
CVE-2026-978356.5—MicrosoftWindows 10 Version 1607CWE-125Role: DNS Server Information Disclosure Vulnerability
CVE-2026-978366.5—MicrosoftWindows 10 Version 1607CWE-125Role: DNS Server Information Disclosure Vulnerability
CVE-2026-978376.5—MicrosoftWindows 10 Version 1607CWE-125Role: DNS Server Information Disclosure Vulnerability
CVE-2026-978386.5—MicrosoftWindows 10 Version 1607CWE-125Role: DNS Server Information Disclosure Vulnerability
CVE-2026-978396.5—MicrosoftWindows 10 Version 1607CWE-125Role: DNS Server Information Disclosure Vulnerability
CVE-2026-978406.5—MicrosoftWindows 10 Version 1607CWE-125Role: DNS Server Information Disclosure Vulnerability
CVE-2026-978416.5—MicrosoftWindows 10 Version 1607CWE-125Role: DNS Server Information Disclosure Vulnerability
CVE-2026-978426.5—MicrosoftWindows 10 Version 1607CWE-125Role: DNS Server Information Disclosure Vulnerability
CVE-2026-978436.5—MicrosoftWindows 10 Version 1607CWE-125Role: DNS Server Information Disclosure Vulnerability
CVE-2026-978446.5—MicrosoftWindows 10 Version 1607CWE-125Role: DNS Server Information Disclosure Vulnerability
CVE-2026-1021996.5—MicrosoftWindows 10 Version 1607CWE-121Microsoft Windows Codecs Library Denial of Service Vulnerability
CVE-2026-1028656.5—MicrosoftMicrosoft SharePoint Server Subscription EditionCWE-863Microsoft Office SharePoint Information Disclosure Vulnerability
CVE-2026-1028676.5—MicrosoftMicrosoft 365 Apps for EnterpriseCWE-20Microsoft Office Word Information Disclosure Vulnerability
CVE-2026-1029816.5—makeplaneplaneCWE-200Plane: Unauthenticated Workspace Invitation Token Leakage
CVE-2026-1035766.5—MicrosoftWindows 10 Version 1607CWE-601Active Directory Federation Services (AD FS) Spoofing Vulnerability
CVE-2026-1057196.5—MicrosoftMicrosoft SharePoint Server Subscription EditionCWE-20Microsoft SharePoint Server Information Disclosure Vulnerability
CVE-2026-1081276.5—MicrosoftWindows 10 Version 1607CWE-125Role: DNS Server Information Disclosure Vulnerability
CVE-2026-1081286.5—MicrosoftWindows 10 Version 1607CWE-125Role: DNS Server Information Disclosure Vulnerability
CVE-2026-1081296.5—MicrosoftWindows 10 Version 1607CWE-125Role: DNS Server Information Disclosure Vulnerability
CVE-2026-1097686.5—MozillaFirefoxCWE-400Denial-of-service in the Site Reports component
CVE-2026-1097736.5—MozillaFirefoxCWE-400Denial-of-service in the Sync component
CVE-2026-1097756.5—MozillaFirefoxCWE-400Denial-of-service in the WebRTC component
CVE-2026-1097816.5—MozillaFirefoxCWE-400Denial-of-service in the Printing: Output component
CVE-2026-713476.4—MicrosoftWindows 11 Version 24H2CWE-362Windows Security Center Elevation of Privilege Vulnerability
CVE-2026-880856.4—MicrosoftMicrosoft SQL Server 2017 (GDR)CWE-122Microsoft SQL Server Elevation of Privilege Vulnerability
CVE-2026-1050066.4—MicrosoftWindows 10 Version 1607CWE-416HID Class Driver Elevation of Privilege Vulnerability
CVE-2026-117316.3—NETGEARRAX30CWE-288Authentication Bypass Vulnerability in Certain NETGEAR RAX Series Models
CVE-2026-117326.3—NETGEARCAX30CWE-20Insufficient input validation vulnerability exists in website blocking featur…
CVE-2026-199396.3—zephyrprojectzephyrCWE-825Bluetooth Classic AVDTP: stale timeout work on signalling-channel disconnect …
CVE-2026-932946.3—GrafanaGrafana EnterpriseCWE-441Azure Monitor data source resource proxy allows calls to arbitrary Azure Reso…
CVE-2026-1091626.3—TYPO3TYPO3 CMSCWE-552TYPO3 CMS - Security Misconfiguration in Form Framework
CVE-2026-1099646.3—ImageMagickImageMagickCWE-124ImageMagick before 7.1.2-33 and 6.9.13-58 Heap Buffer Underwrite in PICT Decoder
CVE-2026-1102146.3—xiaonuobaseSnowyCWE-321Snowy 3.6.5 Hard-coded Download Signature Key Allows Unauthenticated File Dow…
CVE-2026-1102186.3—WebkulAureus ERPCWE-862Aureus ERP through 1.6.0 Unpublished Blog Post Disclosure via Direct URL
CVE-2026-1102406.3—duke-gitlancetCWE-918Lancet through 2.3.9 SSRF Protection Bypass via netutil.IsInternalIP
CVE-2026-1102566.3—FinsysdockhandCWE-90Dockhand before 1.0.19 Username Enumeration via LDAP Injection in tryLdapAuth
CVE-2026-859166.2—MicrosoftWindows 11 version 23H2CWE-359Azure Active Directory Information Disclosure Vulnerability
CVE-2026-492646.1—oauthliboauthlibCWE-79OAuthLib: Unsafe JSONP callback injection in RevocationEndpoint allows arbitr…
CVE-2026-835006.1—MicrosoftWindows 10 Version 1607CWE-601Windows BitLocker Security Feature Bypass Vulnerability
CVE-2026-1028516.1—MicrosoftVisual Studio CodeCWE-266Visual Studio Code Security Feature Bypass Vulnerability
CVE-2026-1042506.1—Unstructured-IOunstructuredCWE-79unstructured: Stored XSS via unescaped HTML generation
CVE-2026-1061716.1—FortinetFortiManagerCWE-78A improper neutralization of special elements used in an os command ('os comm…
CVE-2026-1073696.1—Auth0nextjs-auth0CWE-601Improper Validation of Post-Login Redirect URL in nextjs-auth0
CVE-2026-651316.0—NVIDIANVSentinelCWE-306NVIDIA NVSentinel for Linux contains a vulnerability in the platform-connecto…
CVE-2026-786286.0—OktaOkta Credential Provider for WindowsCWE-20Improper Input Validation in the Okta Credential Provider for Windows
CVE-2026-962976.0—MongoDBMongoDB ServerCWE-416MongoDB Server may disclose process memory via a crafted `$_internalApplyOplo…
CVE-2026-1041266.0—jumpserverjumpserverCWE-94JumpServer: Ansible Automation Template Rendering Allows Unsafe Lookup Plugin…
CVE-2026-1096796.0—FreeRDPFreeRDPCWE-476FreeRDP 3.0.0-beta4 before 3.32.0 NULL Pointer Crash via ARM Response
CVE-2026-1096806.0—FreeRDPFreeRDPCWE-787FreeRDP 3.18.0 before 3.32.0 Heap Out-of-Bounds Write via ARM Redirected User…
CVE-2026-1099456.0—FreeRDPFreeRDPCWE-362FreeRDP 3.0.0 before 3.32.0 Smartcard Use-After-Free via Concurrent Disconnec…
CVE-2026-1099526.0—FreeRDPFreeRDPCWE-757FreeRDP 3.0.0 before 3.32.0 Security Protocol Downgrade via Negotiation Response
CVE-2026-1099536.0—FreeRDPFreeRDPCWE-522FreeRDP 3.0.0 before 3.32.0 Cleartext Credential Disclosure via /restricted-a…
CVE-2026-1102106.0—PhasePhase ConsoleCWE-862Phase Console through 2.77.3 Missing Authorization via secretHistory GraphQL …
CVE-2026-668225.9—Microsoft.NET 10.0CWE-201.NET Information Disclosure Vulnerability
CVE-2026-699825.9—MicrosoftWindows 10 Version 1607CWE-1390Active Directory Federation Services (AD FS) Security Feature Bypass Vulnerab…
CVE-2026-700055.9—MicrosoftWindows Server 2019CWE-1390Active Directory Federation Services (AD FS) Security Feature Bypass Vulnerab…
CVE-2026-701625.9—MicrosoftMicrosoft Visual Studio 2022 version 17.14CWE-405.NET Denial of Service Vulnerability
CVE-2026-701965.9—MicrosoftASP.NET Core 10.0CWE-407ASP.NET Core Denial of Service Vulnerability
CVE-2026-857905.9—MicrosoftMicrosoft Visual Studio 2022 version 17.14CWE-416Microsoft QUIC Information Disclosure Vulnerability
CVE-2026-880995.9—MicrosoftWindows Server 2019CWE-248Windows Failover Cluster Denial of Service Vulnerability
CVE-2026-881325.9—MicrosoftAzure Key Vault Client SDKCWE-346Azure Key Vault Information Disclosure Vulnerability
CVE-2026-963005.9—MicrosoftWindows 10 Version 1607CWE-770RPC Endpoint Mapper Service Denial of Service Vulnerability
CVE-2026-1001165.9—AdobeContent Credentials Rust SDKCWE-295CAI Content Credentials | Improper Certificate Validation (CWE-295)
CVE-2026-1001255.9—AdobeContent Credentials Rust SDKCWE-20CAI Content Credentials | Improper Input Validation (CWE-20)
CVE-2026-1032945.9—AdobeContent Credentials Rust SDKCWE-295CAI Content Credentials | Improper Certificate Validation (CWE-295)
CVE-2026-1076055.9—Swann CommunicationsSWIFI-SE2KICCWE-306Missing authentication for critical function in Swann Communications SWIFI-SE…
CVE-2026-1098335.9—Red HatRed Hat Enterprise Linux 10CWE-121Gnome-remote-desktop: heap buffer overflow in gnome-remote-desktop vnc tls pe…
CVE-2026-08935.8—AMIAptioVCWE-213Uncleared Password Keystrokes Vulnerability
CVE-2026-844205.8—CitirxCitrix Workspace app for WindowsCWE-125Out-of-Bounds Write and Out-of-Bounds Read
CVE-2026-858165.7—MicrosoftWindows 10 Version 1607CWE-125Windows Wi-Fi Driver Information Disclosure Vulnerability
CVE-2026-1057135.7—MicrosoftMicrosoft SharePoint Server Subscription EditionCWE-918Microsoft Office SharePoint Spoofing Vulnerability
CVE-2026-1061085.7—quasarframeworkquasarCWE-22Quasar Framework: App Vite SSG page output paths can escape the configured di…
CVE-2026-699785.6—MicrosoftWindows 10 Version 1809CWE-476Microsoft Windows VMSwitch Denial of Service Vulnerability
CVE-2026-700975.6—MicrosoftWindows 11 Version 24H2CWE-362Windows Virtualization-Based Security (VBS) Enclave Spoofing Vulnerability
CVE-2026-838855.6—MicrosoftWindows 11 Version 24H2CWE-326Windows Virtualization-Based Security (VBS) Enclave Spoofing Vulnerability
CVE-2026-968655.6—MicrosoftWindows 10 Version 1607CWE-497Windows Secure Kernel Mode Information Disclosure Vulnerability
CVE-2026-1102315.6—muCommandermuCommanderCWE-22muCommander through 1.6.2 Path Traversal via Archive Extraction to FTP/SFTP
CVE-2026-107595.5—EsriPortal for ArcGISCWE-90BUG-000171040 Portal for ArcGIS has a security vulnerability
CVE-2026-626875.5—MicrosoftWindows 10 Version 21H2CWE-59Windows Backup Engine Information Disclosure Vulnerability
CVE-2026-628795.5—MicrosoftWindows 10 Version 1809CWE-306Windows SmartScreen Tampering Vulnerability
CVE-2026-696445.5—MicrosoftWindows 10 Version 1607CWE-497Windows iSCSI Information Disclosure Vulnerability
CVE-2026-696755.5—MicrosoftWindows Server 2012CWE-125Windows Network File System Information Disclosure Vulnerability
CVE-2026-697215.5—MicrosoftWindows 10 Version 1607CWE-125Windows iSCSI Information Disclosure Vulnerability
CVE-2026-699055.5—MicrosoftWindows 10 Version 1809CWE-862Windows AppX Deployment Service Tampering Vulnerability
CVE-2026-699145.5—MicrosoftWindows 10 Version 1809CWE-125Windows AppX Deployment Service Information Disclosure Vulnerability
CVE-2026-699195.5—MicrosoftWindows 11 Version 24H2CWE-125Windows Cryptographic Services Information Disclosure Vulnerability
CVE-2026-699545.5—MicrosoftWindows 10 Version 1607CWE-126Windows Overlay Filter Information Disclosure Vulnerability
CVE-2026-699675.5—MicrosoftWindows 10 Version 1607CWE-125Windows Overlay Filter Information Disclosure Vulnerability
CVE-2026-699715.5—MicrosoftWindows 11 Version 24H2CWE-863Windows Kernel-Mode Drivers Information Disclosure Vulnerability
CVE-2026-699795.5—MicrosoftWindows 10 Version 21H2CWE-424Windows AppX Deployment Service Security Feature Bypass Vulnerability
CVE-2026-699995.5—MicrosoftWindows 11 version 23H2CWE-125Windows Update Information Disclosure Vulnerability
CVE-2026-700115.5—MicrosoftWindows 10 Version 21H2CWE-125Windows IP Over USB Service Information Disclosure Vulnerability
CVE-2026-700175.5—MicrosoftWindows 10 Version 1809CWE-843Windows Secure Kernel Mode Information Disclosure Vulnerability
CVE-2026-700415.5—MicrosoftWindows 10 Version 1607CWE-126Windows CD-ROM Driver Information Disclosure Vulnerability
CVE-2026-700445.5—MicrosoftWindows 10 Version 1607CWE-125Microsoft Windows Media Foundation Information Disclosure Vulnerability
CVE-2026-700555.5—MicrosoftWindows 10 Version 1607CWE-497Windows Cryptographic Services Information Disclosure Vulnerability
CVE-2026-700575.5—MicrosoftWindows 10 Version 1607CWE-863Windows Routing and Remote Access Service (RRAS) Security Feature Bypass Vuln…
CVE-2026-700715.5—MicrosoftWindows 10 Version 1607CWE-347Role: DNS Server Tampering Vulnerability
CVE-2026-700745.5—MicrosoftWindows 10 Version 1607CWE-125Windows DNS Information Disclosure Vulnerability
CVE-2026-700835.5—MicrosoftWindows 10 Version 1607CWE-863Role: DNS Server Tampering Vulnerability
CVE-2026-700845.5—MicrosoftWindows 10 Version 1809CWE-22Windows Projected File System Information Disclosure Vulnerability
CVE-2026-700855.5—MicrosoftWindows Server 2012CWE-862Role: DNS Server Tampering Vulnerability
CVE-2026-700875.5—MicrosoftWindows 10 Version 1607CWE-863Role: DNS Server Security Feature Bypass Vulnerability
CVE-2026-700905.5—MicrosoftWindows 10 Version 1607CWE-908Windows Netlogon Information Disclosure Vulnerability
CVE-2026-701285.5—MicrosoftWindows 10 Version 1809CWE-125HID Parser Library Information Disclosure Vulnerability
CVE-2026-701355.5—MicrosoftWindows 10 Version 1607CWE-125Windows Remote POS Driver Information Disclosure Vulnerability
CVE-2026-701375.5—MicrosoftWindows 10 Version 1607CWE-306Windows Remote Access Connection Manager Information Disclosure Vulnerability
CVE-2026-701415.5—MicrosoftWindows 10 Version 1607CWE-125Microsoft Windows Search Component Information Disclosure Vulnerability
CVE-2026-701735.5—MicrosoftWindows 10 Version 1607CWE-125Microsoft Windows Search Component Information Disclosure Vulnerability
CVE-2026-701995.5—MicrosoftWindows 10 Version 1607CWE-497Windows Kernel Information Disclosure Vulnerability
CVE-2026-702015.5—MicrosoftWindows Server 2012CWE-125Windows DHCP Server Denial of Service Vulnerability
CVE-2026-702085.5—MicrosoftWindows 10 Version 1607CWE-125HTTP.sys Information Disclosure Vulnerability
CVE-2026-702115.5—MicrosoftWindows 10 Version 1607CWE-125Win32k Information Disclosure Vulnerability
CVE-2026-702145.5—MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Office Excel Information Disclosure Vulnerability
CVE-2026-702165.5—MicrosoftWindows 10 Version 1607CWE-1220Windows Mobile Device Management Tampering Vulnerability
CVE-2026-702275.5—MicrosoftWindows 11 version 23H2CWE-125Windows Device Association Service Information Disclosure Vulnerability
CVE-2026-702325.5—MicrosoftWindows 10 Version 1607CWE-497Windows Kernel Information Disclosure Vulnerability
CVE-2026-702345.5—MicrosoftWindows 10 Version 1607CWE-126Desktop Window Manager Information Disclosure Vulnerability
CVE-2026-702355.5—MicrosoftWindows 11 Version 24H2CWE-862Windows Event Tracing Spoofing Vulnerability
CVE-2026-702605.5—MicrosoftWindows 10 Version 1607CWE-497Microsoft Trace Data Helper Information Disclosure Vulnerability
CVE-2026-702615.5—MicrosoftWindows 10 Version 1607CWE-497Microsoft Trace Data Helper Information Disclosure Vulnerability
CVE-2026-702645.5—MicrosoftWindows DefenderCWE-59Microsoft Defender Information Disclosure Vulnerability
CVE-2026-702705.5—MicrosoftWindows 10 Version 1607CWE-822Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerabi…
CVE-2026-702775.5—MicrosoftWindows 10 Version 1607CWE-125Windows Fast FAT File System Driver Information Disclosure Vulnerability
CVE-2026-702845.5—MicrosoftWindows 10 Version 1607CWE-908Win32k Information Disclosure Vulnerability
CVE-2026-702885.5—MicrosoftWindows 10 Version 1607CWE-367Win32k Information Disclosure Vulnerability
CVE-2026-702925.5—MicrosoftWindows 10 Version 1607CWE-125Win32k Information Disclosure Vulnerability
CVE-2026-702935.5—MicrosoftWindows 10 Version 1607CWE-908Win32k Information Disclosure Vulnerability
CVE-2026-702945.5—MicrosoftWindows 10 Version 1607CWE-20Win32k Information Disclosure Vulnerability
CVE-2026-702955.5—MicrosoftWindows 10 Version 1607CWE-125Win32k Information Disclosure Vulnerability
CVE-2026-797155.5—IBMWebSphere Application Server - LibertyCWE-22IBM WebSphere Application Server Liberty Path Traversal
CVE-2026-819645.5—MicrosoftWindows 10 Version 21H2CWE-798Windows Update Orchestrator Service Security Feature Bypass Vulnerability
CVE-2026-835075.5—MicrosoftWindows 10 Version 21H2CWE-59Windows Update Orchestrator Service Information Disclosure Vulnerability
CVE-2026-835655.5—MicrosoftWindows 10 Version 1607CWE-126Windows Encrypting File System (EFS) Information Disclosure Vulnerability
CVE-2026-835715.5—MicrosoftWindows 10 Version 1607CWE-476Windows Audio Service Information Disclosure Vulnerability
CVE-2026-836575.5—MicrosoftWindows 10 Version 1809CWE-1390Windows Modern Device Management (MDM) Tampering Vulnerability
CVE-2026-836585.5—MicrosoftWindows 10 Version 1809CWE-862Windows Error Reporting Information Disclosure Vulnerability
CVE-2026-836645.5—MicrosoftWindows 10 Version 1607CWE-843Windows Portable Device File System Driver Information Disclosure Vulnerability
CVE-2026-836685.5—MicrosoftWindows 10 Version 1607CWE-125Windows WLAN Service Information Disclosure Vulnerability
CVE-2026-836815.5—MicrosoftMicrosoft PowerToysCWE-1390Microsoft PowerToys Tampering Vulnerability
CVE-2026-836865.5—MicrosoftWindows 10 Version 1607CWE-125Microsoft Windows Search Component Information Disclosure Vulnerability
CVE-2026-836955.5—MicrosoftWindows 10 Version 1607CWE-908Windows Event Logging Service Information Disclosure Vulnerability
CVE-2026-837055.5—MicrosoftWindows 10 Version 1607CWE-497HTTP.sys Information Disclosure Vulnerability
CVE-2026-837135.5—MicrosoftWindows 10 Version 1607CWE-497Windows Universal Disk Format File System Driver (UDFS) Information Disclosur…
CVE-2026-837145.5—MicrosoftWindows 10 Version 1607CWE-908HTTP.sys Information Disclosure Vulnerability
CVE-2026-837195.5—MicrosoftWindows 10 Version 1809CWE-126Servicing Stack Updates Information Disclosure Vulnerability
CVE-2026-837235.5—MicrosoftWindows 10 Version 1607CWE-908Windows Event Logging Service Information Disclosure Vulnerability
CVE-2026-837335.5—MicrosoftWindows 10 Version 1607CWE-125Windows Print Spooler Components Information Disclosure Vulnerability
CVE-2026-837365.5—MicrosoftWindows 10 Version 21H2CWE-122Windows Kernel Elevation of Privilege Vulnerability
CVE-2026-837375.5—MicrosoftWindows 10 Version 1607CWE-125Windows NTFS Information Disclosure Vulnerability
CVE-2026-837475.5—MicrosoftWindows 10 Version 1607CWE-125Windows Error Reporting Information Disclosure Vulnerability
CVE-2026-837555.5—MicrosoftWindows 10 Version 1607CWE-908Win32k Information Disclosure Vulnerability
CVE-2026-837605.5—MicrosoftWindows 10 Version 1607CWE-125Microsoft Bluetooth Driver Information Disclosure Vulnerability
CVE-2026-837645.5—MicrosoftWindows 10 Version 1809CWE-863Windows Clipboard User Service Information Disclosure Vulnerability
CVE-2026-837655.5—MicrosoftWindows 10 Version 1607CWE-125Windows DWM Core Library Information Disclosure Vulnerability
CVE-2026-837735.5—MicrosoftWindows 11 Version 24H2CWE-497Windows MIDI Service Module Information Disclosure Vulnerability
CVE-2026-837875.5—MicrosoftWindows 10 Version 1607CWE-288Windows DHCP Server Security Feature Bypass Vulnerability
CVE-2026-837945.5—MicrosoftWindows 10 Version 1607CWE-125Windows Portable Device MTP Driver Information Disclosure Vulnerability
CVE-2026-837985.5—MicrosoftWindows 10 Version 1607CWE-20Windows Update Stack Spoofing Vulnerability
CVE-2026-838355.5—MicrosoftWindows 10 Version 1607CWE-126Windows Common Log File System Driver Information Disclosure Vulnerability
CVE-2026-838495.5—MicrosoftWindows 10 Version 21H2CWE-125Windows Hello Information Disclosure Vulnerability
CVE-2026-838545.5—MicrosoftWindows 10 Version 1809CWE-306Windows Notification Information Disclosure Vulnerability
CVE-2026-838645.5—MicrosoftWindows 10 Version 1607CWE-290Windows NTFS Information Disclosure Vulnerability
CVE-2026-838705.5—MicrosoftWindows 11 Version 24H2CWE-125Windows Aggregated Data Platform Service Information Disclosure Vulnerability
CVE-2026-838755.5—MicrosoftWindows 10 Version 1809CWE-125Windows Human Interface Device Information Disclosure Vulnerability
CVE-2026-838845.5—MicrosoftWindows 10 Version 1809CWE-125Windows Human Interface Device Information Disclosure Vulnerability
CVE-2026-838875.5—MicrosoftWindows 10 Version 1809CWE-125HID Parser Library Information Disclosure Vulnerability
CVE-2026-838925.5—MicrosoftWindows 10 Version 1809CWE-125Windows Human Interface Device Information Disclosure Vulnerability
CVE-2026-838935.5—MicrosoftWindows 10 Version 1809CWE-497Windows Clipboard User Service Information Disclosure Vulnerability
CVE-2026-838985.5—MicrosoftWindows 10 Version 1809CWE-125HID Parser Library Information Disclosure Vulnerability
CVE-2026-839045.5—MicrosoftWindows 10 Version 1809CWE-125HID Parser Library Information Disclosure Vulnerability
CVE-2026-839075.5—MicrosoftWindows 10 Version 21H2CWE-497Windows Hello Information Disclosure Vulnerability
CVE-2026-839335.5—MicrosoftWindows 10 Version 21H2CWE-59Windows Update Orchestrator Service Information Disclosure Vulnerability
CVE-2026-840115.5—MicrosoftWindows 11 version 23H2CWE-863Windows SMB Client Security Feature Bypass Vulnerability
CVE-2026-853205.5—MicrosoftWindows 10 Version 1607CWE-908Windows Print Spooler Components Information Disclosure Vulnerability
CVE-2026-853365.5—MicrosoftWindows 10 Version 1607CWE-125Windows Device Association Service Information Disclosure Vulnerability
CVE-2026-853745.5—MicrosoftWindows 10 Version 1607CWE-125Windows Installer Information Disclosure Vulnerability
CVE-2026-857935.5—MicrosoftWindows 10 Version 1607CWE-497Windows Sysmain Service Information Disclosure Vulnerability
CVE-2026-857945.5—MicrosoftWindows 10 Version 1607CWE-125Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulne…
CVE-2026-858125.5—MicrosoftWindows 10 Version 21H2CWE-552Windows Bind Filter Driver Information Disclosure Vulnerability
CVE-2026-858155.5—MicrosoftWindows 10 Version 1607CWE-125Windows Device Association Service Information Disclosure Vulnerability
CVE-2026-858305.5—MicrosoftWindows 10 Version 1607CWE-125Windows Installer Information Disclosure Vulnerability
CVE-2026-858315.5—MicrosoftWindows 10 Version 1809CWE-122Windows Biometric Service Information Disclosure Vulnerability
CVE-2026-858355.5—MicrosoftWindows 11 Version 24H2CWE-126Servicing Stack Updates Information Disclosure Vulnerability
CVE-2026-858525.5—MicrosoftWindows 10 Version 1607CWE-125Windows Management Instrumentation Information Disclosure Vulnerability
CVE-2026-858575.5—MicrosoftWindows 10 Version 1607CWE-532Windows Kernel-Mode Drivers Information Disclosure Vulnerability
CVE-2026-858655.5—MicrosoftWindows 10 Version 1607CWE-288Windows DHCP Server Security Feature Bypass Vulnerability
CVE-2026-859095.5—MicrosoftWindows 10 Version 1607CWE-822Windows Universal Disk Format File System Driver (UDFS) Information Disclosur…
CVE-2026-859105.5—MicrosoftWindows 11 Version 24H2CWE-126Windows StateRepository API Information Disclosure Vulnerability
CVE-2026-859355.5—MicrosoftWindows 10 Version 1607CWE-126Windows USB Driver Information Disclosure Vulnerability
CVE-2026-859385.5—MicrosoftWindows 10 Version 1809CWE-862Windows Broadcast DVR User Service Information Disclosure Vulnerability
CVE-2026-876985.5—MicrosoftWindows 10 Version 1607CWE-125Windows Remote Access Service Infrastructure Information Disclosure Vulnerabi…
CVE-2026-877095.5—MicrosoftWindows 10 Version 1809CWE-250Windows Host Guardian Service Tampering Vulnerability
CVE-2026-881405.5—MicrosoftWindows 10 Version 1607CWE-125Windows Key Storage Provider Information Disclosure Vulnerability
CVE-2026-881585.5—MicrosoftWindows 10 Version 1607CWE-125Microsoft Digest Authentication Information Disclosure Vulnerability
CVE-2026-881625.5—MicrosoftWindows 10 Version 1607CWE-863Windows Encrypting File System (EFS) Tampering Vulnerability
CVE-2026-888385.5—Red HatRed Hat Hardened ImagesCWE-693Busybox: busybox: non-root mount option filter bypass allows clearing fstab s…
CVE-2026-956405.5—AdobePhotoshopCWE-476Photoshop Desktop | NULL Pointer Dereference (CWE-476)
CVE-2026-959045.5—MicrosoftWindows 10 Version 1607CWE-126Windows Event Logging Service Information Disclosure Vulnerability
CVE-2026-961835.5—MicrosoftWindows 11 Version 24H2CWE-306Windows Health and Optimized Experiences Service Information Disclosure Vulne…
CVE-2026-962185.5—MicrosoftWindows 10 Version 1809CWE-15Windows Update Stack Tampering Vulnerability
CVE-2026-962475.5—MicrosoftWindows 10 Version 1607CWE-908Windows Kernel-Mode Drivers Information Disclosure Vulnerability
CVE-2026-963115.5—MicrosoftWindows 10 Version 1607CWE-862Windows Network List Service Tampering Vulnerability
CVE-2026-963145.5—MicrosoftWindows 10 Version 1607CWE-125Windows Audio Service Information Disclosure Vulnerability
CVE-2026-963155.5—MicrosoftWindows 10 Version 1607CWE-862Windows Overlay Filter Tampering Vulnerability
CVE-2026-963165.5—MicrosoftWindows 10 Version 1607CWE-862Windows Routing and Remote Access Service (RRAS) Tampering Vulnerability
CVE-2026-963215.5—MicrosoftWindows 10 Version 21H2CWE-125Remote Desktop Display Driver Information Disclosure Vulnerability
CVE-2026-968465.5—MicrosoftWindows 10 Version 1607CWE-125WebDAV Information Disclosure Vulnerability
CVE-2026-968485.5—MicrosoftWindows 10 Version 1809CWE-126Windows Win32 Kernel Subsystem Information Disclosure Vulnerability
CVE-2026-968495.5—MicrosoftWindows 11 version 26H1CWE-908Windows Kernel-Mode Drivers Information Disclosure Vulnerability
CVE-2026-968505.5—MicrosoftWindows 10 Version 1809CWE-170Windows Modern Device Management (MDM) Information Disclosure Vulnerability
CVE-2026-968515.5—MicrosoftWindows 10 Version 1607CWE-126Windows Management Instrumentation Information Disclosure Vulnerability
CVE-2026-968545.5—MicrosoftWindows 10 Version 1607CWE-843Windows Device Association Service Information Disclosure Vulnerability
CVE-2026-968555.5—MicrosoftWindows 10 Version 1809CWE-862Windows Modern Device Management (MDM) Tampering Vulnerability
CVE-2026-968575.5—MicrosoftWindows 10 Version 1809CWE-552Windows Projected File System Information Disclosure Vulnerability
CVE-2026-968585.5—MicrosoftWindows 10 Version 21H2CWE-306Windows Security Account Manager Tampering Vulnerability
CVE-2026-968595.5—MicrosoftWindows 10 Version 1607CWE-125Windows Imaging Component Information Disclosure Vulnerability
CVE-2026-968605.5—MicrosoftWindows 10 Version 1607CWE-125Windows USB Print Driver Information Disclosure Vulnerability
CVE-2026-969105.5—MicrosoftWindows 10 Version 1607CWE-822Microsoft Windows Search Component Information Disclosure Vulnerability
CVE-2026-969215.5—MicrosoftWindows 10 Version 1607CWE-843Windows Message Queuing Queue Manager Information Disclosure Vulnerability
CVE-2026-969255.5—MicrosoftWindows 10 Version 1607CWE-191Windows NTFS Information Disclosure Vulnerability
CVE-2026-969265.5—MicrosoftWindows 10 Version 1607CWE-862Role: DNS Server Tampering Vulnerability
CVE-2026-969275.5—MicrosoftWindows 10 Version 1607CWE-125Windows NTFS Information Disclosure Vulnerability
CVE-2026-969305.5—MicrosoftWindows 10 Version 1607CWE-125Windows Universal Disk Format File System Driver (UDFS) Information Disclosur…
CVE-2026-969355.5—MicrosoftWindows 10 Version 1607CWE-497Windows NTFS Information Disclosure Vulnerability
CVE-2026-969445.5—MicrosoftWindows 11 Version 24H2CWE-538Windows Storage Information Disclosure Vulnerability
CVE-2026-969485.5—MicrosoftWindows 10 Version 1607CWE-497Windows Client Side Caching driver (csc.sys) Information Disclosure Vulnerabi…
CVE-2026-970055.5—MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Office PowerPoint Information Disclosure Vulnerability
CVE-2026-970145.5—MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Office Excel Information Disclosure Vulnerability
CVE-2026-977445.5—MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Office PowerPoint Information Disclosure Vulnerability
CVE-2026-977905.5—MicrosoftWindows 11 Version 24H2CWE-59Windows Container Isolation FS Filter Driver (unionfs.sys) Tampering Vulnerab…
CVE-2026-1001265.5—AdobeAdobe BridgeCWE-125Bridge | Out-of-bounds Read (CWE-125)
CVE-2026-1001305.5—AdobeSubstance 3D SamplerCWE-125Substance3D - Sampler | Out-of-bounds Read (CWE-125)
CVE-2026-1001315.5—AdobeSubstance 3D SamplerCWE-125Substance3D - Sampler | Out-of-bounds Read (CWE-125)
CVE-2026-1021875.5—MicrosoftWindows 10 Version 1607CWE-908Windows Kernel Information Disclosure Vulnerability
CVE-2026-1027345.5—lmfitastevalCWE-693asteval sandbox escape: arbitrary native memory read/write via numpy ctypes i…
CVE-2026-1035605.5—MicrosoftWindows Server 2012CWE-862Role: DNS Server Tampering Vulnerability
CVE-2026-1035675.5—MicrosoftWindows 10 Version 1809CWE-126Windows Broadcast DVR User Service Information Disclosure Vulnerability
CVE-2026-1038205.5—AdobeContent Credentials Rust SDKCWE-22CAI Content Credentials | Improper Limitation of a Pathname to a Restricted D…
CVE-2026-1038225.5—AdobeSubstance 3D DesignerCWE-125Substance3D - Designer | Out-of-bounds Read (CWE-125)
CVE-2026-1038235.5—AdobeSubstance 3D DesignerCWE-121Substance3D - Designer | Stack-based Buffer Overflow (CWE-121)
CVE-2026-1038245.5—AdobeSubstance 3D DesignerCWE-476Substance3D - Designer | NULL Pointer Dereference (CWE-476)
CVE-2026-1038255.5—AdobeSubstance 3D DesignerCWE-125Substance3D - Designer | Out-of-bounds Read (CWE-125)
CVE-2026-1038265.5—AdobeSubstance 3D DesignerCWE-476Substance3D - Designer | NULL Pointer Dereference (CWE-476)
CVE-2026-1038275.5—AdobeSubstance 3D DesignerCWE-121Substance3D - Designer | Stack-based Buffer Overflow (CWE-121)
CVE-2026-1038285.5—AdobeSubstance 3D DesignerCWE-476Substance3D - Designer | NULL Pointer Dereference (CWE-476)
CVE-2026-1038295.5—AdobeSubstance 3D DesignerCWE-476Substance3D - Designer | NULL Pointer Dereference (CWE-476)
CVE-2026-1038505.5—AdobeAdobe Substance 3D StagerCWE-125Substance3D - Stager | Out-of-bounds Read (CWE-125)
CVE-2026-1038525.5—AdobeAdobe Substance 3D StagerCWE-476Substance3D - Stager | NULL Pointer Dereference (CWE-476)
CVE-2026-1038535.5—AdobeAdobe DimensionCWE-125Dimension | Out-of-bounds Read (CWE-125)
CVE-2026-1038555.5—AdobeAdobe DimensionCWE-476Dimension | NULL Pointer Dereference (CWE-476)
CVE-2026-1038565.5—AdobeAdobe FrameMaker 2026CWE-125Adobe Framemaker | Out-of-bounds Read (CWE-125)
CVE-2026-1038575.5—AdobeAdobe FrameMaker 2026CWE-125Adobe Framemaker | Out-of-bounds Read (CWE-125)
CVE-2026-1043435.5—AdobeAdobe FrameMaker 2026CWE-476Adobe Framemaker | NULL Pointer Dereference (CWE-476)
CVE-2026-1054605.5—Red HatRed Hat Enterprise Linux 10CWE-125Bluez: bluez: stack-based out-of-bounds read in btmon via unvalidated num_key…
CVE-2026-1057265.5—MicrosoftMicrosoft Defender for Endpoint for WindowsCWE-125Microsoft Defender Information Disclosure Vulnerability
CVE-2026-1057315.5—MicrosoftMicrosoft Office for AndroidCWE-908Microsoft Office Graphics Component Information Disclosure Vulnerability
CVE-2026-1058965.5—AdobePhotoshopCWE-476Photoshop Desktop | NULL Pointer Dereference (CWE-476)
CVE-2026-1060355.5—IvantiXtractionCWE-532An Information Exposure Through Log Files vulnerability in Ivanti Xtraction C…
CVE-2026-1084625.5—MicrosoftWindows 10 Version 1607CWE-497Windows Kernel Information Disclosure Vulnerability
CVE-2026-1091495.5—beautifierjs-beautifyCWE-400beautifier js-beautify memory allocation
CVE-2026-1094035.5—conductor-ossconductorCWE-918conductor-oss conductor Agent Card Fetching A2AService.java A2AService.getAge…
CVE-2026-1094045.5—conductor-ossconductorCWE-918conductor-oss conductor Agentspan Agent Runtime AgentController.java server-s…
CVE-2026-1094055.5—conductor-ossconductorCWE-918conductor-oss conductor KafkaPublishTask.java KafkaPublishTask.start server-s…
CVE-2026-1095215.5—girishsarafOnline-Appointment-Booking-SystemCWE-74girishsaraf Online-Appointment-Booking-System changebookingstatus.php sql inj…
CVE-2026-1095225.5—girishsarafOnline-Appointment-Booking-SystemCWE-74girishsaraf Online-Appointment-Booking-System Admin CRUD Endpoint deleteclini…
CVE-2026-1095235.5—girishsarafOnline-Appointment-Booking-SystemCWE-74girishsaraf Online-Appointment-Booking-System AJAX Endpoint getclinic.php sql…
CVE-2026-1095245.5—girishsarafOnline-Appointment-Booking-SystemCWE-862girishsaraf Online-Appointment-Booking-System Admin Display Pages showdoctor.…
CVE-2026-1095255.5—girishsarafOnline-Appointment-Booking-SystemCWE-862girishsaraf Online-Appointment-Booking-System submit2 changebookingstatus.php…
CVE-2026-1096055.5—SourceCodesterSimple Cafe Billing SystemCWE-266SourceCodester Simple Cafe Billing System User Management admin_class.php sav…
CVE-2026-1096065.5—SourceCodesterArt Gallery Management SystemCWE-74SourceCodester Art Gallery Management System Account Creation admin_class.php…
CVE-2026-1096075.5—SourceCodesterOnline Exam SystemCWE-74SourceCodester Online Exam System Login Endpoint loginExe.php sql injection
CVE-2026-1096205.5—SourceCodesterOnline Reviewer SystemCWE-74SourceCodester Online Reviewer System index.php prepare sql injection
CVE-2026-48695.4—FlexeraInstallShieldCWE-426Potential Privilege Escalation in InstallShield
CVE-2026-117135.4—IBMWebSphere Application Server - LibertyCWE-863IBM WebSphere Application Server Liberty Incorrect Authorization
CVE-2026-198105.4—BroadcomSymantec Endpoint Detection and ResponseCWE-79Cross-Site Scripting (XSS) in Symantec Endpoint Detection and Response Console
CVE-2026-483985.4—AdobeAdobe Experience Manager 6.5CWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-568265.4—shopperlabsshopperCWE-862Shopper: Missing function-level authorization on Settings tax/zone/shipping L…
CVE-2026-651995.4—HuaweiopenBMCCWE-266Huawei openUBMC low-privilege SNMP to administrator privilege escalation
CVE-2026-839585.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-839605.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-1023425.4—rust-ammoniaammoniaCWE-79ammonia allows stored XSS through unsanitized SVG animate and set attributes
CVE-2026-1066285.4—AdobeAdobe Experience Manager 6.5 LTSCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-1066315.4—AdobeAdobe Experience Manager 6.5 LTSCWE-79Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2026-1066325.4—AdobeAdobe Experience Manager 6.5 LTSCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-1066335.4—AdobeAdobe Experience Manager 6.5 LTSCWE-79Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2026-1073055.4—AdobeAdobe Experience Manager 6.5CWE-79Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2026-1073715.4—Auth0auth0.jsCWE-613Missing Verification of auth_time Claim in auth0.js
CVE-2026-1076825.4—AdobeAdobe Experience Manager 6.5CWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-1094155.4—AdobeAdobe Experience Manager 6.5 LTSCWE-79Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2026-1097065.4—MozillaFirefoxCWE-416Use-after-free in the Storage: IndexedDB component
CVE-2026-1097105.4—MozillaFirefoxCWE-416Use-after-free in the Graphics: Text component
CVE-2026-1097115.4—MozillaFirefoxCWE-416Use-after-free in the Graphics: Canvas2D component
CVE-2026-1097135.4—MozillaFirefoxCWE-416Use-after-free in the Crash Reporting component
CVE-2026-1097175.4—MozillaFirefoxCWE-416Use-after-free in the DOM: Bindings (WebIDL) component
CVE-2026-1097185.4—MozillaFirefoxCWE-416Use-after-free in the XML component
CVE-2026-1097245.4—MozillaFirefoxCWE-416Use-after-free in the DOM: Core & HTML component
CVE-2026-1097255.4—MozillaFirefoxCWE-416Use-after-free in the DOM: Core & HTML component
CVE-2026-1097265.4—MozillaFirefoxCWE-416Use-after-free in the SVG component
CVE-2026-1097275.4—MozillaFirefoxCWE-416Use-after-free in the Audio/Video component
CVE-2026-1097285.4—MozillaFirefoxCWE-416Use-after-free in the DOM: Animation component
CVE-2026-1097295.4—MozillaFirefoxCWE-416Use-after-free in the JavaScript Engine: JIT component
CVE-2026-1097325.4—MozillaFirefoxCWE-416Use-after-free in the DOM: Streams component
CVE-2026-1097355.4—MozillaFirefoxCWE-416Use-after-free in the DOM: Animation component
CVE-2026-1097385.4—MozillaFirefoxCWE-416Use-after-free in the Audio/Video: Playback component
CVE-2026-1097415.4—MozillaFirefoxCWE-416Use-after-free in the Storage: Bucket File System component
CVE-2026-1097485.4—MozillaFirefoxCWE-416Use-after-free in the JavaScript: WebAssembly component
CVE-2026-1097495.4—MozillaFirefoxCWE-416Use-after-free in the JavaScript: WebAssembly component
CVE-2026-1097525.4—MozillaFirefoxCWE-416Use-after-free in the DOM: Workers component
CVE-2026-1097615.4—MozillaFirefoxCWE-416Use-after-free in the JavaScript: WebAssembly component
CVE-2026-1100375.4—AdobeAdobe Experience Manager 6.5 LTSCWE-79Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2026-1100735.4—AdobeAdobe Experience Manager 6.5CWE-79Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2026-1100745.4—AdobeAdobe Experience Manager 6.5 LTSCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-1100755.4—AdobeAdobe Experience Manager 6.5CWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-1100765.4—AdobeAdobe Experience Manager 6.5CWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-1100775.4—AdobeAdobe Experience Manager 6.5CWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-1100785.4—AdobeAdobe Experience Manager 6.5CWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-1100795.4—AdobeAdobe Experience Manager 6.5CWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-1100805.4—AdobeAdobe Experience Manager 6.5CWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-1100815.4—AdobeAdobe Experience Manager 6.5 LTSCWE-79Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2026-1100825.4—AdobeAdobe Experience Manager 6.5 LTSCWE-79Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)
CVE-2026-483775.3—AdobeContent Credentials Rust SDKCWE-20CAI Content Credentials | Improper Input Validation (CWE-20)
CVE-2026-483785.3—AdobeContent Credentials Rust SDKCWE-20CAI Content Credentials | Improper Input Validation (CWE-20)
CVE-2026-540865.3—esasleapi-jCWE-770SLE API for Java: Uncontrolled Memory Allocation / handled exception leading …
CVE-2026-631695.3—OmnispaceAgora ProjectCWE-79Omnispace Agora Project < 26.10.0 Stored XSS via Messenger Iframe
CVE-2026-633515.3—SiemensSIMATIC Drive Controller CPU 1504D TFCWE-79Affected devices do not properly validate and sanitize visual properties of c…
CVE-2026-633525.3—SiemensSIMATIC Drive Controller CPU 1504D TFCWE-79Affected devices do not properly sanitize calculated signal data contained in…
CVE-2026-633555.3—SiemensSIMATIC Drive Controller CPU 1504D TFCWE-79Affected devices do not properly sanitize signal names contained in imported …
CVE-2026-633565.3—SiemensSIMATIC Drive Controller CPU 1504D TFCWE-79Affected devices do not properly sanitize calculated signal names contained i…
CVE-2026-633575.3—SiemensSIMATIC Drive Controller CPU 1504D TFCWE-79Affected devices do not properly sanitize calculated signal data contained in…
CVE-2026-696405.3—MicrosoftWindows 10 Version 1607CWE-863Windows Key Distribution Center Security Feature Bypass Vulnerability
CVE-2026-700255.3—MicrosoftWindows 10 Version 1607CWE-416Windows Netlogon Denial of Service Vulnerability
CVE-2026-740325.3—Wazuhwazuh-managerCWE-863Wazuh 4.0.0 before 4.14.8 RBAC Authorization Bypass via /security/actions
CVE-2026-786325.3—OktaOkta RADIUS AgentCWE-732Insecure Default File Permissions in Okta RADIUS Agent Windows Installer
CVE-2026-854735.3—Auth0java-jwtCWE-20Out-of-Range Timestamp Claim Handling in auth0/java-jwt
CVE-2026-857335.3—phpfrankenphpCWE-200FrankenPHP: Docker images serve phpinfo() as the default index.php, leaking e…
CVE-2026-859395.3—MicrosoftWindows 10 Version 1607CWE-1390Windows Kernel Security Feature Bypass Vulnerability
CVE-2026-880845.3—MicrosoftMicrosoft SQL Server 2019 (GDR)CWE-770Microsoft SQL Server Denial of Service Vulnerability
CVE-2026-880865.3—MicrosoftMicrosoft SQL Server 2019 (GDR)CWE-125Microsoft SQL Server Information Disclosure Vulnerability
CVE-2026-892035.3—SiemensRUGGEDCOM CROSSBOWCWE-201A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.…
CVE-2026-892045.3—SiemensRUGGEDCOM CROSSBOWCWE-639A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.…
CVE-2026-892055.3—SiemensRUGGEDCOM CROSSBOWCWE-602A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.…
CVE-2026-892065.3—SiemensRUGGEDCOM CROSSBOWCWE-602A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.…
CVE-2026-944105.3—BenderCustomer&PartnerCWE-862Exposure of Role List to Low-Privileged Remote Users in Bender Custom&Partner…
CVE-2026-955025.3—GrafanaNanogitCWE-409Git Sync memory exhaustion via a malicious Git server
CVE-2026-962345.3—Microsoft.NET 10.0CWE-346.NET Information Disclosure Vulnerability
CVE-2026-1021985.3—MicrosoftWindows 10 Version 1607CWE-125Windows Remote Desktop Protocol Information Disclosure Vulnerability
CVE-2026-1025015.3—AdobeContent Credentials Rust SDKCWE-20CAI Content Credentials | Improper Input Validation (CWE-20)
CVE-2026-1025025.3—AdobeContent Credentials Rust SDKCWE-347CAI Content Credentials | Improper Verification of Cryptographic Signature (C…
CVE-2026-1026035.3—gotifyserverCWE-620Gotify: Insufficiently Protected Password Change endpoint
CVE-2026-1029885.3—makeplaneplaneCWE-943Plane: ORM Field Injection via Unvalidated `order_by` Parameter (Including Un…
CVE-2026-1039655.3—MongoDBMongoDB ServerCWE-94Fixed values in MongoDB Server $bucket stage may be misread as field references
CVE-2026-1061725.3—FortinetFortiSandboxCWE-321A use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox …
CVE-2026-1073705.3—Auth0auth0-lockCWE-532Improper Request Handling for Active Directory Logins in auth0-lock
CVE-2026-1084665.3—MicrosoftWindows 10 Version 1607CWE-125Windows Kernel Denial of Service Vulnerability
CVE-2026-1091525.3—jbardinscp.pyCWE-22jbardin scp.py SCP Receive _recv_pushd path traversal
CVE-2026-1091535.3—MosaicMLComposerCWE-22MosaicML Composer Checkpoint Extraction checkpoint.py tarball.extractall path…
CVE-2026-1091555.3—n/aDeepPavlovCWE-22DeepPavlov Model Download untar path traversal
CVE-2026-1091565.3—SeldonIOMLServerCWE-22SeldonIO MLServer environment_tarball env.py _extract_env path traversal
CVE-2026-1094065.3—macrozhengmallCWE-840macrozheng mall mall-portal generateOrder OmsPortalOrderServiceImpl logic error
CVE-2026-1098905.3—LeapWorxPremium Addons for ElementorCWE-862WordPress Premium Addons for Elementor plugin <= 4.11.110 - Broken Access Con…
CVE-2026-1098985.3—ArrayticsWP Event SolutionCWE-862WordPress WP Event Solution plugin <= 4.1.25 - Broken Access Control vulnerab…
CVE-2026-1099485.3—FreeRDPFreeRDPCWE-200FreeRDP 3.0.0 before 3.32.0 Memory Disclosure via SCardTransmit Smartcard Red…
CVE-2026-1099505.3—FreeRDPFreeRDPCWE-125FreeRDP 3.0.0 before 3.32.0 Heap Out-of-Bounds Read via RD Gateway Messages
CVE-2026-1099575.3—espocrmespocrmCWE-639EspoCRM before 10.0.7 IDOR via Import attachmentId Parameter
CVE-2026-1099585.3—espocrmespocrmCWE-200EspoCRM 4.0.0 before 10.0.7 Field-Level Access Bypass via Address-Book Search
CVE-2026-1099595.3—espocrmespocrmCWE-200EspoCRM 4.0.0 before 10.0.7 Field-Level Security Bypass via Note Read Endpoint
CVE-2026-1099625.3—froxlorfroxlorCWE-285Froxlor 0.10.0 before 2.3.14 Missing Authorization in MysqlServer and Cronjob…
CVE-2026-1099635.3—froxlorfroxlorCWE-639Froxlor before 2.3.14 IDOR in Email Template Editor via admin_templates.php
CVE-2026-1100985.3—JoraniJoraniCWE-639Jorani before 1.0.4 Insecure Direct Object Reference in Leave and Overtime Re…
CVE-2026-1100995.3—JoraniJoraniCWE-862Jorani before 1.0.4 Missing Authorization in HR Export Actions
CVE-2026-1101005.3—JoraniJoraniCWE-862Jorani before 1.0.4 Missing Authorization and SSRF via Contracts::import()
CVE-2026-1101105.3—jetlinksJetLinks CommunityCWE-862JetLinks Community through 2.10.0 Missing Authorization via Alarm Enable/Disa…
CVE-2026-1101135.3—SanluanPublicCMSCWE-639PublicCMS through V6.202608.a IDOR via tradeAddress/save Endpoint
CVE-2026-1101205.3—guchengwuyueyshopmallCWE-639yshopmall through 2.0.0 IDOR via After-Sales API in StoreAfterSalesController
CVE-2026-1101225.3—PickMalllilishopCWE-639PickMall lilishop through 4.4 IDOR via Goods Freight Endpoint
CVE-2026-1101255.3—wayn111waynboot-mallCWE-639waynboot-mall through 2.0.0 IDOR via Mobile Order Endpoints
CVE-2026-1101265.3—wayn111waynboot-mallCWE-639waynboot-mall through 2.0.0 IDOR via Mobile Address Endpoints
CVE-2026-1101275.3—wayn111waynboot-mallCWE-639waynboot-mall through 2.0.0 IDOR via Mobile Cart Endpoints
CVE-2026-1102125.3—Stonewuuai-fusion-videoCWE-22ai-fusion-video through 1.2.0 Path Traversal in Media Upload subDir Parameter
CVE-2026-1102135.3—Stonewuuai-fusion-videoCWE-639ai-fusion-video through 1.2.0 Insecure Direct Object Reference in Generation …
CVE-2026-1102265.3—WebkulQloAppsCWE-639QloApps through 1.7.0 Authorization Bypass via id_hotel in Room Type Creation
CVE-2026-1102295.3—WebkulQloAppsCWE-862QloApps through 1.7.0 Missing Hotel Access Restriction in Credit Slips
CVE-2026-1102305.3—sergix44XBackBoneCWE-862XBackBone through 3.8.2 Missing Authorization via Upload Vanity Endpoint
CVE-2026-1102545.3—FinsysdockhandCWE-918Dockhand before 1.0.45 SSRF via IPv6 Transition Address Bypass in ipCategory
CVE-2026-535645.1—CitrixUniconOS—Arbitrary file read and write
CVE-2026-537115.1—IBMmcp-context-forgeCWE-79MCP ContextForge: Global Prompts stored cross-site scripting compromises the …
CVE-2026-631475.1—OmnispaceAgora ProjectCWE-79Omnispace Agora Project < 26.10.0 Stored XSS via Uploaded File Name
CVE-2026-631485.1—OmnispaceAgora ProjectCWE-79Omnispace Agora Project < 26.10.0 Stored XSS via Poll-Response Attachment Fil…
CVE-2026-631565.1—OmnispaceAgora ProjectCWE-79Omnispace Agora Project < 26.10.0 Reflected XSS via visioUrl Parameter
CVE-2026-631575.1—OmnispaceAgora ProjectCWE-79Omnispace Agora Project < 26.10.0 Stored XSS via Links Module
CVE-2026-631685.1—OmnispaceAgora ProjectCWE-79Omnispace Agora Project < 26.10.0 Stored XSS via Nested POST Array Bypass
CVE-2026-631715.1—OmnispaceAgora ProjectCWE-79Omnispace Agora Project < 26.10.0 Stored XSS via Category Description
CVE-2026-660575.1—frappefrappeCWE-601Frappe: Open Redirect via Unsanitized OAuth State Param.
CVE-2026-1099405.1—FreeRDPFreeRDPCWE-121FreeRDP 3.0.0-beta1 before 3.32.0 Stack Buffer Overflow via PKCS#11 Key Name
CVE-2026-1101015.1—benjaminjonardKoillectionCWE-79Koillection through 1.8.4 Stored XSS via Datum File Attachment Uploads
CVE-2026-1101035.1—mlogclubbbs-goCWE-79bbs-go through 4.4.6 Stored XSS via Image Upload Content-Type
CVE-2026-1102195.1—WebkulQloAppsCWE-79QloApps through 1.7.0 Reflected XSS via Additional Facility Price Field
CVE-2026-1102215.1—WebkulQloAppsCWE-79QloApps through 1.7.0 Reflected XSS via Advanced Price Rule Name and Impact V…
CVE-2026-1102245.1—WebkulQloAppsCWE-79QloApps through 1.7.0 Reflected XSS via Search Alias Validation Errors
CVE-2026-1102255.1—shaarliShaarliCWE-918Shaarli through 0.16.9 SSRF via Thumbnail Retrieval update-thumbnail Route
CVE-2026-1102285.1—wallabagwallabagCWE-79wallabag 2.6.13 through 2.6.14 Stored XSS via Failed HTML Import Upload
CVE-2026-1060345.0—IvantiXtractionCWE-22A Path Traversal vulnerability in Ivanti Xtraction before version 2026.4 allo…
CVE-2026-676284.9—MicrosoftMicrosoft SQL Server 2017 (GDR)CWE-125Microsoft SQL Server Information Disclosure Vulnerability
CVE-2026-702174.9—MicrosoftMicrosoft SharePoint Server Subscription EditionCWE-284Microsoft Office SharePoint Information Disclosure Vulnerability
CVE-2026-945204.9—MicrosoftMicrosoft SQL Server 2017 (GDR)CWE-134Microsoft SQL Server Denial of Service Vulnerability
CVE-2026-1061704.9—FortinetFortiSandboxCWE-248An Uncaught Exception vulnerability [CWE-248] vulnerability in Fortinet Forti…
CVE-2026-836464.8—MicrosoftWindows 10 Version 1607CWE-601Active Directory Federation Services (AD FS) Spoofing Vulnerability
CVE-2026-1094104.8—macrozhengmallCWE-682macrozheng mall mall-admin/mall-portal moneyInfo OmsOrderServiceImpl.updateMo…
CVE-2026-695064.7—MicrosoftWindows 10 Version 1607CWE-125Windows Key Storage Provider Information Disclosure Vulnerability
CVE-2026-699694.7—MicrosoftWindows 10 Version 21H2CWE-59Windows AppX Deployment Service Information Disclosure Vulnerability
CVE-2026-699744.7—MicrosoftWindows 10 Version 1809CWE-125Desktop Window Manager Information Disclosure Vulnerability
CVE-2026-700634.7—MicrosoftWindows 10 Version 1607CWE-125Windows Kernel Information Disclosure Vulnerability
CVE-2026-700774.7—MicrosoftWindows 10 Version 1607CWE-416Windows Kernel Information Disclosure Vulnerability
CVE-2026-701954.7—MicrosoftWindows 10 Version 1607CWE-362Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerab…
CVE-2026-773614.7—The-40-Thievesobsidian-tcCWE-59obsidian-tc symlink path mismatch bypasses read ACL restrictions
CVE-2026-835044.7—MicrosoftWindows 11 version 23H2CWE-367Windows SmartScreen Information Disclosure Vulnerability
CVE-2026-835824.7—MicrosoftWindows 10 Version 1607CWE-416Windows Graphics Kernel Information Disclosure Vulnerability
CVE-2026-836564.7—MicrosoftWindows 10 Version 21H2CWE-306Windows Modern Device Management (MDM) Tampering Vulnerability
CVE-2026-836724.7—MicrosoftWindows 10 Version 1607CWE-497Windows Installer Information Disclosure Vulnerability
CVE-2026-836974.7—MicrosoftWindows 10 Version 1809CWE-367Windows Modern Device Management (MDM) Tampering Vulnerability
CVE-2026-837744.7—MicrosoftWindows 10 Version 1607CWE-497Windows Win32 Kernel Subsystem Information Disclosure Vulnerability
CVE-2026-837864.7—MicrosoftWindows 10 Version 1607CWE-209Windows NTFS Information Disclosure Vulnerability
CVE-2026-838654.7—MicrosoftWindows 10 Version 1607CWE-23Windows Internet (wininet.dll) Tampering Vulnerability
CVE-2026-838974.7—MicrosoftWindows 10 Version 1607CWE-497Windows Win32 Kernel Subsystem Information Disclosure Vulnerability
CVE-2026-839054.7—MicrosoftWindows 10 Version 1607CWE-497Windows Shell Information Disclosure Vulnerability
CVE-2026-839094.7—MicrosoftWindows 10 Version 1607CWE-497Windows Win32 Kernel Subsystem Information Disclosure Vulnerability
CVE-2026-839254.7—MicrosoftWindows 10 Version 1607CWE-497Windows Kernel Information Disclosure Vulnerability
CVE-2026-840094.7—MicrosoftWindows 10 Version 1809CWE-367Windows Projected File System Tampering Vulnerability
CVE-2026-858664.7—MicrosoftWindows 10 Version 1809CWE-497Windows ALPC Information Disclosure Vulnerability
CVE-2026-968534.7—MicrosoftWindows 10 Version 1607CWE-367Windows Win32 Kernel Subsystem Information Disclosure Vulnerability
CVE-2026-1021864.7—MicrosoftWindows 10 Version 1607CWE-822Windows Network File System Information Disclosure Vulnerability
CVE-2026-1099764.7—Red HatRed Hat Enterprise Linux 10CWE-787Clevis: clevis: integer underflow in pkcs#11 data socket handler crashes daem…
CVE-2026-837884.6—MicrosoftWindows 10 Version 1607CWE-126Windows rndismp6.sys Information Disclosure Vulnerability
CVE-2026-882084.6—MicrosoftMicrosoft SharePoint Server Subscription EditionCWE-79Microsoft Office SharePoint Spoofing Vulnerability
CVE-2026-882094.6—MicrosoftMicrosoft SharePoint Server Subscription EditionCWE-79Microsoft Office SharePoint Spoofing Vulnerability
CVE-2026-882264.6—MicrosoftWindows 10 Version 1607CWE-125Windows Storage Port Driver Information Disclosure Vulnerability
CVE-2026-1028594.6—MicrosoftMicrosoft SharePoint Server Subscription EditionCWE-79Microsoft Office SharePoint Spoofing Vulnerability
CVE-2026-1028644.6—MicrosoftMicrosoft SharePoint Server Subscription EditionCWE-79Microsoft Office SharePoint Spoofing Vulnerability
CVE-2026-1102324.6—FossifyFossify File ManagerCWE-22Fossify File Manager through 1.6.2 Zip Slip Path Traversal via DecompressActi…
CVE-2026-674564.4—NVIDIAWarpCWE-122NVIDIA Warp contains a vulnerability where an attacker could cause a heap-bas…
CVE-2026-700754.4—MicrosoftWindows 10 Version 1809CWE-367Windows Virtualization-Based Security (VBS) Enclave Security Feature Bypass V…
CVE-2026-702804.4—MicrosoftWindows 10 Version 21H2CWE-863Windows Hello Security Feature Bypass Vulnerability
CVE-2026-839264.4—MicrosoftWindows 10 Version 1809CWE-295Windows Hello Security Feature Bypass Vulnerability
CVE-2026-1022214.4—MicrosoftWindows 10 Version 1607CWE-299Secure Boot Security Feature Bypass Vulnerability
CVE-2026-92184.3—NETGEARCBR40CWE-20Insufficient input validation vulnerability in Certain NETGEAR routers allows…
CVE-2026-145324.3—IBMWebSphere Application Server - LibertyCWE-190IBM WebSphere Application Server Liberty Integer Overflow
CVE-2026-691504.3—keepassxrebootkeepassxcCWE-416KeePassXC: Heap use-after-free in KeePass1 (KDB) importer via unpruned m_entr…
CVE-2026-773624.3—The-40-Thievesobsidian-tcCWE-200obsidian-tc bridge tools expose data outside the read ACL
CVE-2026-956304.3—AdobeAdobe CommerceCWE-20Adobe Commerce | Improper Input Validation (CWE-20)
CVE-2026-1030284.3—drakkansftpgoCWE-863SFTPGo source-side file-pattern filter bypass during copy operations
CVE-2026-1057204.3—MicrosoftMicrosoft SharePoint Server Subscription EditionCWE-863Microsoft Office SharePoint Elevation of Privilege Vulnerability
CVE-2026-1079174.3—NETGEARR7300DSTCWE-20Insufficient input validation vulnerability in NETGEAR R7300 router
CVE-2026-1079184.3—NETGEARR7300DSTCWE-20Insufficient input validation vulnerability in NETGEAR R7300
CVE-2026-1097424.3—MozillaFirefoxCWE-200Information disclosure in the PDF Viewer component
CVE-2026-1097514.3—MozillaFirefoxCWE-200Information disclosure in the Networking component
CVE-2026-1097674.3—MozillaFirefoxCWE-200Information disclosure in the Networking component
CVE-2026-1097694.3—MozillaFirefoxCWE-200Information disclosure in the Networking: Cache component
CVE-2026-1097714.3—MozillaFirefoxCWE-200Information disclosure in the WebRTC: Networking component
CVE-2026-1097774.3—MozillaFirefoxCWE-200Information disclosure in the Storage: IndexedDB component
CVE-2026-1098964.3—WP ChillDownload Monitor integration for WooCommerceCWE-862WordPress Download Monitor integration for WooCommerce plugin <= 1.0.3 - Brok…
CVE-2026-701164.2—MicrosoftWindows 11 Version 24H2CWE-121Windows Resilient File System (ReFS) Security Feature Bypass Vulnerability
CVE-2026-837664.2—MicrosoftWindows 10 Version 1607CWE-863Windows Hyper-V Security Feature Bypass Vulnerability
CVE-2026-1028324.2—jupyterlabjupyterlabCWE-367JupyterLab: Command link trust prompt in JupyterLab can trust a document othe…
CVE-2026-1097194.2—MozillaFirefoxCWE-362Race condition, use-after-free in the Graphics: CanvasWebGL component
CVE-2026-1097654.2—MozillaFirefoxCWE-362Race condition, use-after-free in the Graphics: Text component
CVE-2026-1097794.2—MozillaFirefoxCWE-362Race condition in the Networking: DNS component
CVE-2026-1102344.1—elio-fmelioCWE-377Elio through 1.13.0 Insecure Temporary File Creation in External Preview Comm…
CVE-2026-1061763.8—FortinetFortiSIEMCWE-862A missing authorization vulnerability in Fortinet FortiSIEM 7.5.0 may allow a…
CVE-2026-772053.7—The Libreswan ProjectlibreswanCWE-772Denial of Service via sending bogus X.509 certificates
CVE-2026-888343.7—Red HatRed Hat Hardened ImagesCWE-203Busybox: busybox: httpd user existence oracle in non-default shadow-disabled …
CVE-2026-1078323.7—fastifyfastifyCWE-178fastify vulnerable to header validation bypass via case-sensitive propertyNames
CVE-2026-652003.5—HuaweiopenBMCCWE-191Huawei malicious on-bus PLDM or NCSI device can drive out-of-bounds-heap read…
CVE-2026-1083883.5—indicoindicoCWE-863Indico legacy contribution export cache poisoning discloses restricted metadata
CVE-2026-1100363.3—Red HatRed Hat Enterprise Linux 10CWE-190Device-mapper-persistent-data: device-mapper-persistent-data: denial of servi…
CVE-2026-651973.1—H3CHDM Family-A G5CWE-347H3C G3/G5 HDM Firmware Verification Key Replacement
CVE-2026-1098542.5—Red HatRed Hat Enterprise Linux 10CWE-457M17n-lib: uninitialized stack read in iso-2022 compound text utf-8 decoding
CVE-2026-1061752.3—FortinetFortiSwitchCWE-415A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0…
CVE-2026-1094072.3—macrozhengmallCWE-362macrozheng mall Coupon Redemption generateOrder race condition
CVE-2026-1101062.3—dromaraRuoYi-Vue-PlusCWE-639RuoYi-Vue-Plus through 6.0.0 IDOR via DELETE /auth/unlock/{socialId}
CVE-2026-1101072.3—dromaraRuoYi-Cloud-PlusCWE-639RuoYi-Cloud-Plus through 6.0.0 IDOR via DELETE /auth/unlock/{socialId}
CVE-2026-1102232.3—KareaditaKavitaCWE-918Kavita 0.9.0 through 0.9.1.4 SSRF Blocklist Bypass via upload-cbl-file Endpoint
CVE-2026-117302.1—NETGEAREX3700CWE-335Insufficient session randomness vulnerability exists in certain NETGEAR EX Se…
CVE-2026-1091602.1—n/aPublicCMSCWE-601PublicCMS pay Endpoint SafeConfigComponent.java SafeConfigComponent.getSafeUr…
CVE-2026-1091892.1—fit2cloudMeterSphereCWE-918fit2cloud MeterSphere Swagger3 Swagger3ParserApiDefinition.java Swagger3Parse…
CVE-2026-1091902.1—conductor-ossconductorCWE-918conductor-oss conductor API Tool Configuration ListApiToolsTask.java ListApiT…
CVE-2026-1094022.1—conductor-ossconductorCWE-918conductor-oss conductor MCP Service MCPService.java MCPService.listTools serv…
CVE-2026-1098272.1—n/aGPACCWE-119GPAC AIT Parser ait.c gf_m2ts_decode_ait out-of-bounds write
CVE-2026-1098282.1—n/alibsndfileCWE-453libsndfile WAV Parsing wavlike.c wavlike_subchunk_parse uninitialized variable
CVE-2026-1102392.1—zoferapyd-adminCWE-79Rapyd Admin before 9.20.0 Stored XSS via rich-text Component
CVE-2026-1094091.9—HBAI-LtdToonflow-appCWE-74HBAI-Ltd Toonflow-app Open Folder Endpoint openFolder.ts child_process.exec c…
CVE-2026-1095261.9—HBAI-LtdToonflow-appCWE-200HBAI-Ltd Toonflow-app exportData Endpoint information disclosure
CVE-2024-34319await—n/an/a—A Server-Side Request Forgery (SSRF) in the serviceURL parameter of ProPhoeni…
CVE-2024-34320await—n/an/a—ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain an incorrect ac…
CVE-2024-34321await—n/an/a—ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain a reflected cro…
CVE-2024-34324await—n/an/a—An issue in ProPhoenix Law RMS v2022.2403.3.101 allows attackers to execute a…
CVE-2024-34326await—n/an/a—ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain a reflected cro…
CVE-2026-16753await—LowcoderLowcoder—CVE-2026-16753
CVE-2026-37107await—n/an/a—An issue in HTMLy v.3.1.1 allows a remote attacker to escalate privileges via…
CVE-2026-78799await—n/an/a—Directory Traversal vulnerability in Quanxun Huiju Network Technology (Beijin…
CVE-2026-78802await—n/an/a—An issue in SKYWORTH DIGITAL CO.,LTD SK-WR6640X Wi-Fi 6 Dual-Band Fiber Route…
CVE-2026-79607await—XenXen—Xenstore: Guests can crash xenstored during Live Update
CVE-2026-79608await—XenXen—x86/AMD: ineffectual Zenbleed workaround
CVE-2026-79609await—XenXen—x86: XPTI may break on huge-memory systems
CVE-2026-79610await—XenXen—grant-table: double version change race
CVE-2026-79611await—XenXen—VMX: VMentry failure with branch tracing and blocked states
CVE-2026-95115await—n/an/a—Buffer Overflow vulnerability in libwebsockets main 106d542c allows a remote …
CVE-2026-95117await—n/an/a—Buffer Overflow vulnerability in zserge jsmn jsmn HEAD 25647e6 allows a remot…
CVE-2026-95121await—n/an/a—An issue in mp4v2 2.0.0 allows an attacker to execute arbitrary code via the …