boxscore/security

A daily page of record for published software vulnerabilities — the previous UTC day, closed and final. New here?

Tuesday, September 8, 2026 · all times UTC← 2026-09-07 · archive

Security Box Score — September 8, 2026 — page 3

Edition of September 8, 2026, continued — page 3 of 3. Back to page 1 · page 2

Results (continued, ranked) — ranks 1001–1564 of 1564
CVECVSSEPSS %ileVendorProductCWETitle
CVE-2026-694156.8—MicrosoftWindows 10 Version 1607CWE-306Windows DHCP Server Elevation of Privilege Vulnerability
CVE-2026-694906.8—MicrosoftWindows 10 Version 1607CWE-125Windows USB Mass Storage Class Driver Elevation of Privilege Vulnerability
CVE-2026-695666.8—MicrosoftWindows 10 Version 1607CWE-122Windows NTFS Remote Code Execution Vulnerability
CVE-2026-713296.8—MicrosoftWindows 10 Version 1607CWE-122Windows NTFS Remote Code Execution Vulnerability
CVE-2026-713486.8—MicrosoftWindows 10 Version 1607CWE-122Windows Spaceport.sys Remote Code Execution Vulnerability
CVE-2026-713496.8—MicrosoftWindows 10 Version 1607CWE-122Windows Spaceport.sys Remote Code Execution Vulnerability
CVE-2026-713506.8—MicrosoftWindows 10 Version 1607CWE-122Windows Spaceport.sys Remote Code Execution Vulnerability
CVE-2026-729856.8—MicrosoftWindows 10 Version 1607CWE-122Volume Shadow Copy Elevation of Privilege Vulnerability
CVE-2026-729996.8—MicrosoftWindows 10 Version 1607CWE-125Windows USB Hub Driver Elevation of Privilege Vulnerability
CVE-2026-778926.8—MicrosoftWindows 10 Version 1607CWE-693Windows Boot Manager Elevation of Privilege Vulnerability
CVE-2026-784516.8—MicrosoftWindows 10 Version 1809CWE-822Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability
CVE-2026-785796.8—OktaOkta Access GatewayCWE-90Improper Input Sanitization in Okta Access Gateway LDAP Datastore Filter Inte…
CVE-2026-693506.7—MicrosoftWindows 10 Version 1607CWE-122Windows Overlay Filter Elevation of Privilege Vulnerability
CVE-2026-693736.7—MicrosoftWindows 10 Version 1607CWE-125Windows Overlay Filter Elevation of Privilege Vulnerability
CVE-2026-694496.7—MicrosoftWindows 10 Version 1607CWE-122Windows BitLocker Remote Code Execution Vulnerability
CVE-2026-713396.7—MicrosoftWindows 10 Version 1607CWE-122Windows Installer Elevation of Privilege Vulnerability
CVE-2026-729276.7—MicrosoftWindows 10 Version 1607CWE-122Winsock Elevation of Privilege Vulnerability
CVE-2026-729356.7—MicrosoftWindows 10 Version 1607CWE-125Windows NTFS Elevation of Privilege Vulnerability
CVE-2026-729486.7—MicrosoftWindows 10 Version 1607CWE-23Windows DNS Elevation of Privilege Vulnerability
CVE-2026-786256.7—OktaOkta Access GatewayCWE-94Insufficient Validation of Dashboard Application Labels in Okta Access Gatewa…
CVE-2026-786306.7—OktaOkta Access GatewayCWE-78Improper Input Neutralization in Okta Access Gateway SNMP Configuration Proce…
CVE-2026-859816.7—Auth0Auth0 AD/LDAP ConnectorCWE-306Unauthenticated Localhost Admin Panel in Auth0 AD/LDAP Connector
CVE-2026-192016.6—Googlego-attestationCWE-674Denial of Service via Unbounded Recursion in go-attestation Windows SIPA Parser
CVE-2026-694696.6—MicrosoftWindows 10 Version 1809CWE-122Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerab…
CVE-2026-785456.6—OktaOkta Access GatewayCWE-94Improper Input Sanitization in Okta Access Gateway Application Label Configur…
CVE-2026-785506.6—OktaOkta Access GatewayCWE-95Improper Input Handling in Okta Access Gateway Management Console Exception H…
CVE-2026-175096.5—WPMLWPML Multilingual CMSCWE-89WPML Multilingual CMS <= 4.9.5 - Incorrect Authorization to Authenticated (Su…
CVE-2026-180216.5—beaverbuilderBeaver Builder Page Builder – Drag and Drop Website BuilderCWE-94Beaver Builder Page Builder <= 2.10.3.1 - Unauthenticated Arbitrary Shortcode…
CVE-2026-536376.5—SyliusSyliusCWE-672Sylius: Cart FormComponent allows modification or deletion of an already-comp…
CVE-2026-586496.5—Microsoft.NET 10.0CWE-346.NET Information Disclosure Vulnerability
CVE-2026-627626.5—MicrosoftWindows 10 Version 1607CWE-476Windows Active Directory Domain Services Denial of Service Vulnerability
CVE-2026-628016.5—MicrosoftWindows 10 Version 1607CWE-22Microsoft PowerShell Security Feature Bypass Vulnerability
CVE-2026-635236.5—MicrosoftSkype for Business Server 2015 CU13CWE-79Skype for Business Spoofing Vulnerability
CVE-2026-649186.5—MicrosoftMicrosoft 365 Apps for EnterpriseCWE-522Microsoft Office Spoofing Vulnerability
CVE-2026-663036.5—MicrosoftSkype for Business Server 2015 CU13CWE-476Skype for Business and Lync Denial of Service Vulnerability
CVE-2026-663066.5—MicrosoftSkype for Business Server 2015 CU13CWE-209Skype for Business Information Disclosure Vulnerability
CVE-2026-663086.5—MicrosoftSkype for Business Server 2015 CU13CWE-125Skype for Business and Lync Denial of Service Vulnerability
CVE-2026-668166.5—MicrosoftMicrosoft SQL Server 2022 (CU 26)CWE-778Microsoft SQL Server Security Feature Bypass Vulnerability
CVE-2026-673696.5—MicrosoftMicrosoft SQL Server 2025 (CU8)CWE-125Microsoft SQL Server Information Disclosure Vulnerability
CVE-2026-673836.5—MicrosoftMicrosoft SQL Server 2025 (CU8)CWE-209Microsoft SQL Server Information Disclosure Vulnerability
CVE-2026-673866.5—MicrosoftMicrosoft SQL Server 2017 (CU 31)CWE-908Microsoft SQL Server Information Disclosure Vulnerability
CVE-2026-673896.5—MicrosoftMicrosoft SQL Server 2022 (CU 26)CWE-125Microsoft SQL Server Information Disclosure Vulnerability
CVE-2026-673906.5—MicrosoftMicrosoft SQL Server 2017 (CU 31)CWE-126Microsoft SQL Server Information Disclosure Vulnerability
CVE-2026-673936.5—MicrosoftMicrosoft SQL Server 2017 (CU 31)CWE-126Microsoft SQL Server Information Disclosure Vulnerability
CVE-2026-676246.5—MicrosoftMicrosoft SQL Server 2019 (CU 32)CWE-125Microsoft SQL Server Information Disclosure Vulnerability
CVE-2026-676296.5—MicrosoftMicrosoft SQL Server 2017 (CU 31)CWE-125Microsoft SQL Server Information Disclosure Vulnerability
CVE-2026-676306.5—MicrosoftMicrosoft SQL Server 2017 (CU 31)CWE-125Microsoft SQL Server Information Disclosure Vulnerability
CVE-2026-676336.5—MicrosoftMicrosoft SQL Server 2017 (CU 31)CWE-125Microsoft SQL Server Denial of Service Vulnerability
CVE-2026-676416.5—MicrosoftMicrosoft SQL Server 2022 (CU 26)CWE-190Microsoft SQL Server Denial of Service Vulnerability
CVE-2026-676456.5—MicrosoftMicrosoft SQL Server 2017 (CU 31)CWE-125Microsoft SQL Server Information Disclosure Vulnerability
CVE-2026-676486.5—MicrosoftMicrosoft SQL Server 2017 (CU 31)CWE-908Microsoft SQL Server Information Disclosure Vulnerability
CVE-2026-687766.5—MicrosoftMicrosoft SQL Server 2017 (CU 31)CWE-908Microsoft SQL Server Information Disclosure Vulnerability
CVE-2026-687776.5—MicrosoftMicrosoft SQL Server 2017 (CU 31)CWE-125Microsoft SQL Server Information Disclosure Vulnerability
CVE-2026-687786.5—MicrosoftMicrosoft SQL Server 2017 (CU 31)CWE-125Microsoft SQL Server Information Disclosure Vulnerability
CVE-2026-687796.5—MicrosoftMicrosoft SQL Server 2017 (CU 31)CWE-125Microsoft SQL Server Information Disclosure Vulnerability
CVE-2026-687806.5—MicrosoftMicrosoft SQL Server 2017 (CU 31)CWE-125Microsoft SQL Server Information Disclosure Vulnerability
CVE-2026-687816.5—MicrosoftMicrosoft SQL Server 2017 (CU 31)CWE-125Microsoft SQL Server Information Disclosure Vulnerability
CVE-2026-687846.5—MicrosoftMicrosoft SQL Server 2017 (CU 31)CWE-125Microsoft SQL Server Information Disclosure Vulnerability
CVE-2026-688986.5—MicrosoftWindows 10 Version 1607CWE-125Windows iSCSI Denial of Service Vulnerability
CVE-2026-692676.5—MicrosoftWindows 10 Version 1809CWE-1220Windows Connected User Experiences and Telemetry Information Disclosure Vulne…
CVE-2026-692976.5—MicrosoftWindows 10 Version 1607CWE-257Windows DHCP Server Information Disclosure Vulnerability
CVE-2026-693616.5—MicrosoftMicrosoft Exchange Server 2016 Cumulative Update 23CWE-918Microsoft Exchange Server Spoofing Vulnerability
CVE-2026-693746.5—MicrosoftWindows 10 Version 21H2CWE-770Windows SMB Server Denial of Service Vulnerability
CVE-2026-693756.5—MicrosoftMicrosoft Exchange Server 2016 Cumulative Update 23CWE-639Microsoft Exchange Server Tampering Vulnerability
CVE-2026-693956.5—MicrosoftWindows 10 Version 1607CWE-134Active Directory Certificate Services (AD CS) Information Disclosure Vulnerab…
CVE-2026-694096.5—MicrosoftMicrosoft SharePoint Server Subscription EditionCWE-250Microsoft Office SharePoint Information Disclosure Vulnerability
CVE-2026-694976.5—MicrosoftWindows 10 Version 1607CWE-401Windows DHCP Server Denial of Service Vulnerability
CVE-2026-695626.5—MicrosoftMicrosoft SQL Server 2017 (CU 31)CWE-125Microsoft SQL Server Information Disclosure Vulnerability
CVE-2026-696246.5—MicrosoftWindows 10 Version 1607CWE-184Active Directory Certificate Services (AD CS) Tampering Vulnerability
CVE-2026-696266.5—MicrosoftMicrosoft 365 Apps for EnterpriseCWE-126Microsoft Office Information Disclosure Vulnerability
CVE-2026-696366.5—MicrosoftMicrosoft SharePoint Server Subscription EditionCWE-89Microsoft Office SharePoint Information Disclosure Vulnerability
CVE-2026-696426.5—MicrosoftSkype for Business Server 2015 CU13CWE-79Skype for Business Spoofing Vulnerability
CVE-2026-696836.5—MicrosoftMicrosoft SharePoint Server Subscription EditionCWE-918Microsoft Office SharePoint Information Disclosure Vulnerability
CVE-2026-697196.5—MicrosoftMicrosoft 365 Apps for EnterpriseCWE-126Microsoft Office Word Information Disclosure Vulnerability
CVE-2026-697346.5—MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Office Word Information Disclosure Vulnerability
CVE-2026-697396.5—MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Office Information Disclosure Vulnerability
CVE-2026-697816.5—MicrosoftWindows 11 Version 24H2CWE-401Windows DHCP Client Denial of Service Vulnerability
CVE-2026-698396.5—MicrosoftWindows 10 Version 1607CWE-248Windows iSCSI Target Service Denial of Service Vulnerability
CVE-2026-700196.5—MicrosoftWindows 11 version 23H2CWE-65Windows Compressed Folder Information Disclosure Vulnerability
CVE-2026-729386.5—MicrosoftMicrosoft 365 Apps for EnterpriseCWE-822Microsoft Office PowerPoint Information Disclosure Vulnerability
CVE-2026-729396.5—MicrosoftWindows 10 Version 1607CWE-476Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability
CVE-2026-729426.5—MicrosoftWindows 10 Version 1607CWE-125Windows Spaceport.sys Information Disclosure Vulnerability
CVE-2026-729566.5—MicrosoftMicrosoft 365 Apps for EnterpriseCWE-822Microsoft Office PowerPoint Information Disclosure Vulnerability
CVE-2026-729746.5—MicrosoftMicrosoft 365 Apps for EnterpriseCWE-126Microsoft Office Excel Information Disclosure Vulnerability
CVE-2026-729756.5—MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Office PowerPoint Information Disclosure Vulnerability
CVE-2026-729776.5—MicrosoftMicrosoft 365 Apps for EnterpriseCWE-20Microsoft Office PowerPoint Information Disclosure Vulnerability
CVE-2026-730296.5—MicrosoftMicrosoft SQL Server 2019 (CU 32)CWE-126Microsoft SQL Server Information Disclosure Vulnerability
CVE-2026-760006.5—AdobeColdFusion 2025CWE-400ColdFusion | Uncontrolled Resource Consumption (CWE-400)
CVE-2026-778966.5—MicrosoftWindows 10 Version 1607CWE-190Windows Remote Desktop Client Denial of Service Vulnerability
CVE-2026-779116.5—MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Office Word Information Disclosure Vulnerability
CVE-2026-784416.5—MicrosoftMicrosoft SQL Server 2017 (CU 31)CWE-125Windows OLE DB Information Disclosure Vulnerability
CVE-2026-784536.5—MicrosoftWindows 10 Version 1607CWE-191Microsoft Windows SCSI Class System File Information Disclosure Vulnerability
CVE-2026-785026.5—MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Office Word Information Disclosure Vulnerability
CVE-2026-785036.5—MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Office Word Information Disclosure Vulnerability
CVE-2026-785156.5—MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Office Excel Information Disclosure Vulnerability
CVE-2026-785206.5—MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Office Outlook Information Disclosure Vulnerability
CVE-2026-785226.5—MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Office Word Information Disclosure Vulnerability
CVE-2026-800736.5—MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Office Outlook Information Disclosure Vulnerability
CVE-2026-800766.5—MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Office Information Disclosure Vulnerability
CVE-2026-800786.5—MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Office Information Disclosure Vulnerability
CVE-2026-800796.5—MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Office Word Information Disclosure Vulnerability
CVE-2026-800826.5—MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Office Information Disclosure Vulnerability
CVE-2026-800846.5—MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Office Outlook Information Disclosure Vulnerability
CVE-2026-800866.5—MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Office PowerPoint Information Disclosure Vulnerability
CVE-2026-800876.5—MicrosoftMicrosoft 365 Apps for EnterpriseCWE-122Microsoft Office Information Disclosure Vulnerability
CVE-2026-800886.5—MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Office Word Information Disclosure Vulnerability
CVE-2026-800896.5—MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Office Information Disclosure Vulnerability
CVE-2026-800906.5—MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Office Word Information Disclosure Vulnerability
CVE-2026-800916.5—MicrosoftMicrosoft 365 Apps for EnterpriseCWE-908Microsoft Office Information Disclosure Vulnerability
CVE-2026-813776.5—MicrosoftVisual Studio CodeCWE-22Visual Studio Code Tampering Vulnerability
CVE-2026-813816.5—MicrosoftVisual Studio CodeCWE-522GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability
CVE-2026-843916.5—FortinetFortiAnalyzerCWE-457A use of uninitialized variable vulnerability in Fortinet FortiAnalyzer 7.6.3…
CVE-2026-846856.5—Auth0react-native-auth0CWE-488Improper Cache Isolation in auth0/react-native-auth0 SDK Web Platform Credent…
CVE-2026-122306.4—thimpressLearnPress – WordPress LMS Plugin for Create and Sell Online CoursesCWE-79LearnPress <= 4.3.9.1 - Authenticated (Contributor+) Stored Cross-Site Script…
CVE-2026-333886.4—Nozomi NetworksGuardianCWE-863Incorrect authorization in Credentials Manager in Guardian/CMC before 26.3.0
CVE-2026-698786.4—MicrosoftWindows 10 Version 1607CWE-122Windows DHCP Server Remote Code Execution Vulnerability
CVE-2026-705826.4—MicrosoftWindows 10 Version 1607CWE-362Windows Management Instrumentation Elevation of Privilege Vulnerability
CVE-2026-713386.4—MicrosoftWindows 10 Version 1607CWE-415Windows Failover Cluster Elevation of Privilege Vulnerability
CVE-2026-729476.4—MicrosoftWindows 10 Version 1607CWE-191Windows File History Service Elevation of Privilege Vulnerability
CVE-2026-769316.4—dylanjkotzeZephyr Project ManagerCWE-79Zephyr Project Manager <= 3.3.205 - Authenticated (Custom+) Stored Cross-Site…
CVE-2026-778876.4—MicrosoftWindows 10 Version 1607CWE-125Windows DHCP Server Remote Code Execution Vulnerability
CVE-2026-778916.4—MicrosoftWindows 10 Version 1607CWE-125Windows DHCP Server Remote Code Execution Vulnerability
CVE-2026-536396.3—SyliusSyliusCWE-639Sylius: IDOR on Shop Payment Request API endpoints
CVE-2026-818246.3—AVEVAPipeline Integrity MonitorCWE-79AVEVA Pipeline Integrity Monitor cross-site scripting
CVE-2026-819046.3—Concrete CMSConcrete CMSCWE-862Concrete CMS before 9.5.3 is vulnerable to Missing Authorization in Stack/Con…
CVE-2026-819976.3—AdobeAdobe AcrobatCWE-863Acrobat Reader | Incorrect Authorization (CWE-863)
CVE-2026-849426.3—AWSAmazon OpenSearch ServiceCWE-79Stored Cross-Site Scripting via Vega Expression Function Bypass in OpenSearch…
CVE-2026-860776.3—n8n-ion8nCWE-862n8n: Anonymous Approval-Gate Bypass via Reused resumeToken over the Chat WebS…
CVE-2026-860796.3—n8n-ion8nCWE-22n8n: Path Injection in Elasticsearch and ElasticSecurity Nodes via Unencoded …
CVE-2026-860806.3—n8n-ion8nCWE-347n8n: GitHub Trigger 422 Reuse Path Skips Webhook Secret Storage, Causing Sign…
CVE-2026-539376.2—modelcontextprotocolio.modelcontextprotocol:kotlin-sdkCWE-400MCP Kotlin SDK's unbounded line buffer in StdioServerTransport/StdioClientTra…
CVE-2026-180906.1—Red HatRed Hat Enterprise Linux 10CWE-125Gdk-pixbuf: gdk-pixbuf: heap out-of-bounds read in uncompress() via crafted i…
CVE-2026-760026.1—AdobeColdFusion 2025CWE-79ColdFusion | Cross-site Scripting (Reflected XSS) (CWE-79)
CVE-2026-776546.1—AlgosecHorizon Security AnalyzerCWE-266Local Privilege Escalation via Misconfigured Sudoers Entry in Horizon Securit…
CVE-2026-561016.0—OpenBSDOpenBSDCWE-697OpenBSD ieee80211_crypto_tkip.c TKIP MIC Countermeasure Logic Inversion DoS
CVE-2026-782166.0—ash-projectash_luaCWE-1220AshLua eval read operations can read field-policy-protected fields via aggreg…
CVE-2026-782306.0—ash-projectash_aiCWE-1220AshAi aggregate tool can read field-policy-protected fields
CVE-2026-785526.0—OktaOkta Access GatewayCWE-693Validation Bypass in Okta Access Gateway Custom Directives
CVE-2026-786226.0—OktaOkta Verify for WindowsCWE-59Improper Link Resolution in Okta Verify for Windows Uninstaller Data Removal
CVE-2026-820566.0—MongoDBMongoDB ServerCWE-416Race Condition in MongoDB Server Text Index Query Parsing Leads to Heap Use-A…
CVE-2026-820596.0—MongoDBMongoDB ServerCWE-617Improper Access Restriction of Internal Aggregation Expression in MongoDB Ser…
CVE-2026-820636.0—MongoDBMongoDB ServerCWE-416Use-After-Free in MongoDB Server Cursor Management Component Leads to Denial …
CVE-2026-860786.0—n8n-ion8nCWE-1321n8n: Prototype Pollution via Workflow Structure Summary Can Lead to Denial of…
CVE-2026-860846.0—n8n-ion8nCWE-288n8n: Disabled OIDC SSO Endpoints Remain Active and Issue Valid Sessions
CVE-2026-693045.9—Microsoft.NET 10.0CWE-409ASP.NET Core Denial of Service Vulnerability
CVE-2026-693825.9—MicrosoftMicrosoft Exchange Server 2016 Cumulative Update 23CWE-327Microsoft Exchange Server Information Disclosure Vulnerability
CVE-2026-698035.9—MicrosoftWindows 10 Version 1607CWE-125Windows DHCP Server Information Disclosure Vulnerability
CVE-2026-699295.9—MicrosoftWindows 10 Version 1607CWE-125Windows DHCP Server Information Disclosure Vulnerability
CVE-2026-699305.9—MicrosoftWindows 10 Version 1607CWE-125Windows DHCP Server Information Disclosure Vulnerability
CVE-2026-700915.9—MicrosoftWindows 10 Version 1607CWE-362Windows DNS Denial of Service Vulnerability
CVE-2026-701245.9—MicrosoftWindows 10 Version 1607CWE-125Windows DHCP Server Information Disclosure Vulnerability
CVE-2026-729785.9—MicrosoftWindows 10 Version 1607CWE-770Active Directory Federation Services (AD FS) Denial of Service Vulnerability
CVE-2026-785235.9—MicrosoftWindows 10 Version 1607CWE-416Windows DNS Server Denial of Service Vulnerability
CVE-2026-786205.9—OktaOkta Access GatewayCWE-73Improper Path Validation in Okta Access Gateway Kerberos Configuration Handling
CVE-2026-860735.9—n8n-ion8nCWE-863n8n: Per-Resource OAuth Consent Bypass via Unbound Refresh Token Resource Sub…
CVE-2026-860745.9—n8n-ion8nCWE-918n8n: Instance AI Credential Setup Accepts Unvalidated Probe URL from Fetched …
CVE-2026-867355.9—grokabilitysnipe-itCWE-918snipe-it before 8.7.0 SSRF via IPv6 transition address bypass
CVE-2026-869935.9—n8n-ion8nCWE-862n8n: Log Streaming Event Destinations Decrypt Generic-Auth Credentials Withou…
CVE-2026-695595.8—MicrosoftMicrosoft Teams for AndroidCWE-346Microsoft Teams for Android Information Disclosure Vulnerability
CVE-2026-688745.7—MicrosoftWindows 10 Version 1607CWE-125Windows Program Compatibility Assistant Service Information Disclosure Vulner…
CVE-2026-693175.7—MicrosoftWindows 10 Version 1607CWE-125Windows Remote Desktop Client Information Disclosure Vulnerability
CVE-2026-693495.7—MicrosoftWindows 10 Version 1607CWE-908Windows Management Instrumentation Information Disclosure Vulnerability
CVE-2026-693725.7—MicrosoftWindows 10 Version 1607CWE-125Windows Network File System Denial of Service Vulnerability
CVE-2026-693935.7—MicrosoftWindows 10 Version 1607CWE-125Windows Spaceport.sys Information Disclosure Vulnerability
CVE-2026-694055.7—MicrosoftWindows 10 Version 1607CWE-401Windows DHCP Server Denial of Service Vulnerability
CVE-2026-694165.7—MicrosoftWindows 10 Version 1607CWE-126Windows DHCP Server Denial of Service Vulnerability
CVE-2026-695075.7—MicrosoftWindows 11 version 23H2CWE-538Microsoft Windows Search Component Information Disclosure Vulnerability
CVE-2026-695525.7—MicrosoftWindows 10 Version 1607CWE-209Windows Print Spooler Components Information Disclosure Vulnerability
CVE-2026-695695.7—MicrosoftWindows 10 Version 1607CWE-822Windows Print Spooler Components Denial of Service Vulnerability
CVE-2026-695725.7—MicrosoftWindows 10 Version 1607CWE-125Windows SMB Client Information Disclosure Vulnerability
CVE-2026-695915.7—MicrosoftWindows 10 Version 1809CWE-125Windows NTFS Information Disclosure Vulnerability
CVE-2026-696375.7—MicrosoftWindows 10 Version 1607CWE-125Windows DHCP Server Denial of Service Vulnerability
CVE-2026-696795.7—MicrosoftWindows 10 Version 1607CWE-125Windows DHCP Server Denial of Service Vulnerability
CVE-2026-697235.7—MicrosoftWindows 10 Version 1607CWE-497Windows Kernel Information Disclosure Vulnerability
CVE-2026-698325.6—MicrosoftWindows 10 Version 1607CWE-497Win32k Information Disclosure Vulnerability
CVE-2026-786295.6—OktaOkta Hyperdrive AgentCWE-303Improper Authentication Verification in the Okta Hyperdrive Agent MFA Respons…
CVE-2026-546115.5—instantsofticms2CWE-94InstantCMS has Remote Code Execution in package installer
CVE-2026-688305.5—MicrosoftWindows 10 Version 1607CWE-59Windows Universal Plug and Play (UPnP) Device Host Information Disclosure Vul…
CVE-2026-688315.5—MicrosoftWindows 10 Version 1607CWE-552Windows Defender Firewall Service Information Disclosure Vulnerability
CVE-2026-688425.5—MicrosoftWindows 11 Version 24H2CWE-497Windows MIDI Service Module Information Disclosure Vulnerability
CVE-2026-688435.5—MicrosoftWindows 10 Version 1607CWE-416Microsoft Office Word Information Disclosure Vulnerability
CVE-2026-688515.5—MicrosoftWindows 10 Version 1607CWE-126Windows NTFS Information Disclosure Vulnerability
CVE-2026-688525.5—MicrosoftWindows 10 Version 1607CWE-200Microsoft Account Information Disclosure Vulnerability
CVE-2026-688735.5—MicrosoftWindows 11 version 23H2CWE-532Windows Program Compatibility Assistant Service Information Disclosure Vulner…
CVE-2026-688815.5—MicrosoftWindows 10 Version 1607CWE-125Microsoft Standard XPS Information Disclosure Vulnerability
CVE-2026-688865.5—MicrosoftWindows 10 Version 1607CWE-209Windows Network Connection Broker Information Disclosure Vulnerability
CVE-2026-688955.5—MicrosoftWindows 10 Version 1607CWE-197Internet Storage Name Service Information Disclosure Vulnerability
CVE-2026-692865.5—MicrosoftWindows 10 Version 1607CWE-20Windows USB Audio Class Driver Information Disclosure Vulnerability
CVE-2026-692885.5—MicrosoftWindows 10 Version 1607CWE-908Windows GDI+ Information Disclosure Vulnerability
CVE-2026-692945.5—MicrosoftWindows 10 Version 1809CWE-209Microsoft COM for Windows Information Disclosure Vulnerability
CVE-2026-693035.5—MicrosoftWindows 10 Version 1607CWE-125Push Message Routing Service Information Disclosure Vulnerability
CVE-2026-693085.5—MicrosoftWindows 10 Version 1607CWE-125Microsoft Standard XPS Information Disclosure Vulnerability
CVE-2026-693155.5—MicrosoftWindows 10 Version 1809CWE-497Windows License Manager Information Disclosure Vulnerability
CVE-2026-693185.5—MicrosoftWindows 10 Version 1607CWE-125Windows Imaging Component Information Disclosure Vulnerability
CVE-2026-693215.5—MicrosoftWindows 10 Version 1607CWE-306Windows Power Dependency Coordinator Tampering Vulnerability
CVE-2026-693395.5—MicrosoftWindows 11 Version 24H2CWE-497Windows MIDI Service Module Information Disclosure Vulnerability
CVE-2026-693435.5—MicrosoftWindows 10 Version 1607CWE-125Windows Overlay Filter Information Disclosure Vulnerability
CVE-2026-693445.5—MicrosoftWindows 10 Version 21H2CWE-125Windows Print Spooler Components Information Disclosure Vulnerability
CVE-2026-693455.5—MicrosoftWindows 10 Version 1607CWE-125Microsoft Standard XPS Information Disclosure Vulnerability
CVE-2026-693515.5—MicrosoftWindows 10 Version 1607CWE-359Windows Universal Plug and Play (UPnP) Device Host Information Disclosure Vul…
CVE-2026-693535.5—MicrosoftWindows 10 Version 1607CWE-125Windows Text Shaping Information Disclosure Vulnerability
CVE-2026-693675.5—MicrosoftWindows 10 Version 1607CWE-125Microsoft Standard XPS Information Disclosure Vulnerability
CVE-2026-693695.5—MicrosoftWindows 10 Version 1607CWE-125Windows DNS Information Disclosure Vulnerability
CVE-2026-693765.5—MicrosoftWindows 10 Version 1607CWE-125Microsoft Standard XPS Information Disclosure Vulnerability
CVE-2026-693905.5—MicrosoftWindows 10 Version 1607CWE-125Windows Spaceport.sys Information Disclosure Vulnerability
CVE-2026-694035.5—MicrosoftWindows 10 Version 1607CWE-862Windows SMB Server Information Disclosure Vulnerability
CVE-2026-694065.5—MicrosoftWindows 10 Version 1607CWE-497Windows Kernel Information Disclosure Vulnerability
CVE-2026-694535.5—MicrosoftWindows 10 Version 1607CWE-862Microsoft Windows Search Component Tampering Vulnerability
CVE-2026-694575.5—MicrosoftWindows 10 Version 1607CWE-125Windows USB Driver Information Disclosure Vulnerability
CVE-2026-695045.5—MicrosoftWindows 10 Version 1607CWE-125Windows NTFS Information Disclosure Vulnerability
CVE-2026-695275.5—MicrosoftWindows 10 Version 1607CWE-125Windows USB Mass Storage Class Driver Information Disclosure Vulnerability
CVE-2026-695315.5—MicrosoftWindows 10 Version 1607CWE-441Microsoft Windows Speech Tampering Vulnerability
CVE-2026-695545.5—MicrosoftWindows 10 Version 1607CWE-306Microsoft Windows Search Component Tampering Vulnerability
CVE-2026-695685.5—MicrosoftWindows 10 Version 1607CWE-125Storage Spaces Controller Information Disclosure Vulnerability
CVE-2026-696095.5—MicrosoftWindows 10 Version 1607CWE-125Win32k Information Disclosure Vulnerability
CVE-2026-696165.5—MicrosoftWindows 10 Version 1607CWE-125Windows Remote Desktop Services Information Disclosure Vulnerability
CVE-2026-696185.5—MicrosoftWindows 10 Version 1607CWE-125Windows SMB Client Information Disclosure Vulnerability
CVE-2026-696275.5—MicrosoftWindows 10 Version 1607CWE-125Windows Remote Desktop Licensing Service Information Disclosure Vulnerability
CVE-2026-696725.5—MicrosoftWindows 10 Version 1607CWE-908Windows DNS Information Disclosure Vulnerability
CVE-2026-696745.5—MicrosoftWindows 10 Version 1809CWE-306Windows Modern Device Management (MDM) Security Feature Bypass Vulnerability
CVE-2026-696845.5—MicrosoftWindows 10 Version 1607CWE-209Windows Error Reporting Information Disclosure Vulnerability
CVE-2026-697415.5—MicrosoftWindows 10 Version 21H2CWE-125Windows Spaceport.sys Information Disclosure Vulnerability
CVE-2026-697705.5—MicrosoftWindows 10 Version 1607CWE-908Windows Spaceport.sys Information Disclosure Vulnerability
CVE-2026-697945.5—MicrosoftWindows 10 Version 1607CWE-126Windows Encrypting File System (EFS) Information Disclosure Vulnerability
CVE-2026-698085.5—MicrosoftWindows 10 Version 1607CWE-125Win32k Information Disclosure Vulnerability
CVE-2026-698625.5—MicrosoftWindows 10 Version 1607CWE-125Windows Wireless Wide Area Network Service Information Disclosure Vulnerability
CVE-2026-701455.5—MicrosoftWindows 10 Version 1607CWE-125Microsoft Windows Search Component Information Disclosure Vulnerability
CVE-2026-702905.5—MicrosoftWindows 10 Version 1607CWE-908Win32k Information Disclosure Vulnerability
CVE-2026-713415.5—MicrosoftWindows 10 Version 1607CWE-125Windows Partition Management Driver Information Disclosure Vulnerability
CVE-2026-729375.5—MicrosoftWindows 10 Version 1607CWE-125Windows Storage Port Driver Information Disclosure Vulnerability
CVE-2026-729455.5—MicrosoftWindows 10 Version 1607CWE-908Windows Task Scheduler Information Disclosure Vulnerability
CVE-2026-729645.5—MicrosoftWindows 10 Version 1607CWE-306Windows Internet Connection Sharing (ICS) Tampering Vulnerability
CVE-2026-729665.5—MicrosoftWindows 10 Version 1607CWE-862Windows Remote Access Connection Manager Tampering Vulnerability
CVE-2026-730045.5—MicrosoftWindows 10 Version 21H2CWE-306Windows Autopilot Tampering Vulnerability
CVE-2026-730085.5—MicrosoftWindows 10 Version 1607CWE-359Windows Biometric Service Information Disclosure Vulnerability
CVE-2026-774885.5—MicrosoftMicrosoft SQL Server 2017 (CU 31)CWE-191Microsoft SQL Server Information Disclosure Vulnerability
CVE-2026-774915.5—MicrosoftWindows 10 Version 1607CWE-125Windows GDI Information Disclosure Vulnerability
CVE-2026-774925.5—MicrosoftWindows 10 Version 1607CWE-125Windows Storage Port Driver Information Disclosure Vulnerability
CVE-2026-784545.5—MicrosoftWindows 10 Version 1607CWE-125Windows CD-ROM Driver Information Disclosure Vulnerability
CVE-2026-785065.5—MicrosoftMicrosoft 365 Apps for EnterpriseCWE-170Microsoft Office Word Information Disclosure Vulnerability
CVE-2026-785135.5—MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Office PowerPoint Information Disclosure Vulnerability
CVE-2026-799105.5—AdobeAdobe AcrobatCWE-125Acrobat Reader | Out-of-bounds Read (CWE-125)
CVE-2026-801605.5—AdobeAdobe AcrobatCWE-125Acrobat Reader | Out-of-bounds Read (CWE-125)
CVE-2026-801625.5—AdobeAdobe AcrobatCWE-416Acrobat Reader | Use After Free (CWE-416)
CVE-2026-813875.5—MicrosoftMicrosoft 365 Apps for EnterpriseCWE-497Microsoft Excel Information Disclosure Vulnerability
CVE-2026-813905.5—MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Excel Information Disclosure Vulnerability
CVE-2026-813915.5—MicrosoftMicrosoft 365 Apps for EnterpriseCWE-908Microsoft Excel Information Disclosure Vulnerability
CVE-2026-813925.5—MicrosoftMicrosoft 365 Apps for EnterpriseCWE-20Microsoft Excel Information Disclosure Vulnerability
CVE-2026-813935.5—MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Excel Information Disclosure Vulnerability
CVE-2026-813945.5—MicrosoftMicrosoft 365 Apps for EnterpriseCWE-497Microsoft Excel Information Disclosure Vulnerability
CVE-2026-813955.5—MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Excel Information Disclosure Vulnerability
CVE-2026-813995.5—MicrosoftMicrosoft 365 Apps for EnterpriseCWE-126Microsoft Excel Information Disclosure Vulnerability
CVE-2026-814005.5—MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Excel Information Disclosure Vulnerability
CVE-2026-814015.5—MicrosoftMicrosoft 365 Apps for EnterpriseCWE-843Microsoft Excel Information Disclosure Vulnerability
CVE-2026-819585.5—MicrosoftMicrosoft 365 Apps for EnterpriseCWE-908Microsoft Excel Information Disclosure Vulnerability
CVE-2026-819775.5—AdobeAdobe AcrobatCWE-191Acrobat Reader | Integer Underflow (Wrap or Wraparound) (CWE-191)
CVE-2026-819785.5—AdobeAdobe AcrobatCWE-125Acrobat Reader | Out-of-bounds Read (CWE-125)
CVE-2026-819825.5—AdobeAdobe AcrobatCWE-125Acrobat Reader | Out-of-bounds Read (CWE-125)
CVE-2026-819845.5—AdobeAdobe AcrobatCWE-416Acrobat Reader | Use After Free (CWE-416)
CVE-2026-819915.5—AdobeAdobe AcrobatCWE-125Acrobat Reader | Out-of-bounds Read (CWE-125)
CVE-2026-819935.5—AdobeAdobe AcrobatCWE-122Acrobat Reader | Heap-based Buffer Overflow (CWE-122)
CVE-2026-820015.5—AdobeAdobe AcrobatCWE-400Acrobat Reader | Uncontrolled Resource Consumption (CWE-400)
CVE-2026-835015.5—MicrosoftWindows 11 version 23H2CWE-125Windows Virtualization-Based Security (VBS) Information Disclosure Vulnerability
CVE-2026-839495.5—MicrosoftMicrosoft 365 Apps for EnterpriseCWE-126Microsoft Office Word Information Disclosure Vulnerability
CVE-2026-839515.5—MicrosoftMicrosoft 365 Apps for EnterpriseCWE-126Microsoft Office Word Information Disclosure Vulnerability
CVE-2026-839915.5—MicrosoftWindows 10 Version 1809CWE-306Windows Cloud Files Mini Filter Driver Tampering Vulnerability
CVE-2026-858755.5—MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Office Excel Information Disclosure Vulnerability
CVE-2026-866655.5—aircheng-orgiWebShop-5CWE-862aircheng-org iWebShop-5 update.php index authorization
CVE-2026-866665.5—aircheng-orgiWebShop-5CWE-284aircheng-org iWebShop-5 pic.php uploadFile unrestricted upload
CVE-2026-866695.5—aircheng-orgiWebShop-5CWE-287aircheng-org iWebShop-5 systemseller.php login improper authentication
CVE-2026-866725.5—ningzichunStudent Management SystemCWE-200ningzichun Student Management System Backup example.7z information disclosure
CVE-2026-866735.5—ningzichunStudent Management SystemCWE-259ningzichun Student Management System Database Connection database.php mysqli_…
CVE-2026-867165.5—CesantamJSCWE-119Cesanta mJS mjs_tok.c skip_spaces_and_comments heap-based overflow
CVE-2026-868085.5—moltis-orgmoltisCWE-287moltis-org moltis vault.rs vault_recovery_handler missing authentication
CVE-2025-645425.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2025-645845.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2025-645885.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2025-645895.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2025-646105.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2025-646185.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2025-648305.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2025-648385.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2025-648545.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2025-648665.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2025-648685.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2026-25205.4—ladelaOnline Scheduling and Appointment Booking System – BooklyCWE-862Online Scheduling and Appointment Booking System – Bookly <= 27.2 - Missing A…
CVE-2026-194795.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-196125.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-196445.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-197135.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-272275.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2026-713565.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-713575.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-713885.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-714405.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2026-715655.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-726265.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-726275.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-756295.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-756355.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-756365.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-756375.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-756395.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-756405.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-756425.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2026-756435.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2026-756445.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2026-756465.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-756475.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-756515.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-756525.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-756575.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-756595.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-756605.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-756615.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-756665.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-756675.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-756685.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-756695.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-756705.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-756715.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-756725.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-756745.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-756755.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-756775.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-756785.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-756795.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-756805.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-756815.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-756835.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-756855.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-756875.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-756905.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-756915.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-756925.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-756935.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-756945.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-756955.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-756965.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-757005.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-757015.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-757025.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-757045.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-757055.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-757065.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-757075.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-757085.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-757095.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-757105.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-757115.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-757125.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-757135.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-757145.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-757155.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-757165.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-757175.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-757185.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-757195.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-757205.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-757225.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-757245.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-757255.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-757275.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2026-757295.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2026-757305.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2026-757315.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2026-757335.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2026-757345.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2026-757355.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2026-757365.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2026-757375.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2026-757385.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2026-757395.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2026-757405.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2026-757415.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2026-757425.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2026-799055.4—AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2026-843855.4—FortinetFortiSOAR on-premiseCWE-284A improper access control vulnerability in Fortinet FortiSOAR PaaS 7.6.0 thro…
CVE-2026-196145.3—CyberELFNanoXMLCWE-611XML External Entity (XXE) Injection in CyberELF NanoXML
CVE-2026-196255.3—IBMEnterprise Build of QuarkusCWE-284IBM Enterprise Build of Quarkus is affected by multiple vulnerabilities
CVE-2026-333895.3—Nozomi NetworksGuardianCWE-671Disabled and non-configurable certificate/host key validation in Smart Pollin…
CVE-2026-333915.3—Nozomi NetworksGuardianCWE-863Incorrect authorization in Smart Polling configuration in Guardian/CMC before…
CVE-2026-476805.3—fluxcdsource-controllerCWE-23Source controller: Improper path handling allows traversal
CVE-2026-705755.3—MicrosoftWindows 11 version 23H2CWE-476Windows Schannel Denial of Service Vulnerability
CVE-2026-784465.3—MicrosoftWindows 10 Version 1607CWE-416Windows Distributed File System (DFS) Denial of Service Vulnerability
CVE-2026-786315.3—OktaOkta Hyperdrive AgentCWE-532Improper Restriction of Sensitive Information in Okta Hyperdrive Agent Logging
CVE-2026-813805.3—MicrosoftVisual Studio CodeCWE-77GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability
CVE-2026-820665.3—MongoDBMongoDB ServerCWE-125Heap Out-of-Bounds Read in MongoDB Server Query Planning Component
CVE-2026-867145.3—PX4PX4-AutopilotCWE-125PX4 Autopilot through 1.17.0 Stack Buffer Over-read via netman
CVE-2026-867195.3—WWBNAVideoCWE-352WWBN AVideo CustomizeUser Cross-Site Request Forgery Session Hijacking
CVE-2026-867365.3—grokabilitysnipe-itCWE-682snipe-it before 8.7.0 Checkout Request Counter Integrity Failure
CVE-2026-867375.3—grokabilitysnipe-itCWE-862snipe-it before 8.7.0 Missing Authorization via barcode endpoint
CVE-2026-869945.3—n8n-ion8nCWE-862n8n: Cross-User Active Workflow ID and Lifecycle Event Disclosure via Missing…
CVE-2026-869955.3—n8n-ion8nCWE-22n8n: Git Node branch.<name>.remote Config Key Bypasses Sandbox Path Restricti…
CVE-2026-869965.3—n8n-ion8nCWE-862n8n: Agent Workflow Tool Bypasses Sub-Workflow Caller Policy
CVE-2026-333875.1—Nozomi NetworksGuardianCWE-1336Insufficient sanitization of Dashboards in Guardian/CMC before 26.3.0
CVE-2026-339205.1—Nozomi NetworksGuardianCWE-352Cross-site request forgery in the Guardian/CMC login before 26.3.0
CVE-2026-733175.1—XenForoXenForoCWE-863XenForo < 2.3.13 Missing Authorization via ACP Cache-Rebuild Dispatcher
CVE-2026-733185.1—XenForoXenForoCWE-863XenForo < 2.3.13 Missing Authorization via force-agreement Controller
CVE-2026-733195.1—XenForoXenForoCWE-79XenForo < 2.3.13 XSS via Dynamic Redirect Handler
CVE-2026-733205.1—XenForoXenForoCWE-639XenForo < 2.3.13 Unauthenticated Information Disclosure via Unfurl Endpoint
CVE-2026-820695.1—MongoDBMongoDB ServerCWE-212Improper Redaction of Query Literals in MongoDB Server Query Statistics Seria…
CVE-2026-843865.1—FortinetFortiClientWindowsCWE-283A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 thr…
CVE-2026-860855.1—n8n-ion8nCWE-862n8n: Cross-Tenant Project-Member PII Disclosure via Missing Per-Project Scope…
CVE-2026-729765.0—MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Office Word Information Disclosure Vulnerability
CVE-2026-786355.0—OktaOkta Privileged Access ClientCWE-88Improper Input Validation in the Okta Privileged Access SSH Client URL Handle…
CVE-2026-799045.0—AdobePhotoshop AndroidCWE-22Photoshop Mobile | Improper Limitation of a Pathname to a Restricted Director…
CVE-2026-225754.9—FortinetFortiManagerCWE-284An improper access control vulnerability in Fortinet FortiManager 7.6.0 throu…
CVE-2026-687854.9—MicrosoftMicrosoft SQL Server 2017 (CU 31)CWE-122Microsoft SQL Server Remote Code Execution Vulnerability
CVE-2026-786244.9—OktaOkta Access GatewayCWE-22Improper Path Validation in Okta Access Gateway Backup and Restore Functionality
CVE-2026-694744.8—MicrosoftWindows 10 Version 1607CWE-126Windows Overlay Filter Information Disclosure Vulnerability
CVE-2026-785604.8—OktaOkta Access GatewayCWE-287Improper Authentication Validation in Okta Access Gateway Pass-Through Authen…
CVE-2026-688494.7—MicrosoftWindows 10 Version 21H2CWE-125Windows Bluetooth Port Driver Information Disclosure Vulnerability
CVE-2026-688914.7—MicrosoftWindows 10 Version 1607CWE-125Microsoft Standard XPS Information Disclosure Vulnerability
CVE-2026-693164.7—MicrosoftWindows 10 Version 1607CWE-126Windows Overlay Filter Information Disclosure Vulnerability
CVE-2026-694254.7—MicrosoftWindows 11 version 23H2CWE-59Windows NTFS Tampering Vulnerability
CVE-2026-694834.7—MicrosoftWindows 10 Version 1607CWE-125Windows Image Acquisition Information Disclosure Vulnerability
CVE-2026-697714.7—MicrosoftWindows 11 version 23H2CWE-59Windows Container Manager Service Security Feature Bypass Vulnerability
CVE-2026-697924.7—MicrosoftWindows 10 Version 1607CWE-362Windows Win32K Security Feature Bypass Vulnerability
CVE-2026-698534.7—MicrosoftWindows 10 Version 1607CWE-908Win32k Information Disclosure Vulnerability
CVE-2026-698954.7—MicrosoftWindows 10 Version 1607CWE-125Windows Spaceport.sys Information Disclosure Vulnerability
CVE-2026-729314.7—MicrosoftWindows 10 Version 1607CWE-772Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability
CVE-2026-693814.6—MicrosoftWindows 10 Version 1607CWE-125Windows Storage Port Driver Information Disclosure Vulnerability
CVE-2026-695484.6—MicrosoftWindows 10 Version 1607CWE-122Windows RNDIS Information Disclosure Vulnerability
CVE-2026-696904.6—MicrosoftMicrosoft SharePoint Server Subscription EditionCWE-79Microsoft Office SharePoint Spoofing Vulnerability
CVE-2026-784524.6—MicrosoftWindows 10 Version 1809CWE-125Microsoft Windows SCSI Class System File Information Disclosure Vulnerability
CVE-2026-785084.6—MicrosoftWindows 10 Version 1607CWE-125Windows CD-ROM Driver Information Disclosure Vulnerability
CVE-2026-00014.4—Arm LtdBifrost GPU Kernel DriverCWE-416Mali GPU Kernel Driver allows access to already freed memory
CVE-2026-697134.4—MicrosoftWindows 10 Version 1607CWE-1395Windows Secure Boot Security Feature Bypass Vulnerability
CVE-2026-729804.4—MicrosoftWindows 10 Version 1607CWE-427Windows Hello Security Feature Bypass Vulnerability
CVE-2026-536384.3—SyliusSyliusCWE-863Sylius: Channel-based payment method restriction bypass on shop account order…
CVE-2026-730194.3—MicrosoftWindows 10 Version 1607CWE-41Windows URL Moniker Security Feature Bypass Vulnerability
CVE-2026-784554.3—MicrosoftWindows 10 Version 1607CWE-125Xbox Information Disclosure Vulnerability
CVE-2026-785164.3—MicrosoftWindows 10 Version 1607CWE-126Windows Storage Information Disclosure Vulnerability
CVE-2026-796034.3—XenXenCWE-664Unconditionally do TLB flushing ahead of page scrubbing
CVE-2026-868534.3—MozillaFirefox for iOSCWE-451Repeated external URL scheme launches could potentially cause a denial of ser…
CVE-2026-801594.0—AdobeAdobe AcrobatCWE-426Acrobat Reader | Untrusted Search Path (CWE-426)
CVE-2026-696153.5—MicrosoftMicrosoft SharePoint Server Subscription EditionCWE-79Microsoft Office SharePoint Spoofing Vulnerability
CVE-2026-699043.5—MicrosoftMicrosoft SharePoint Server Subscription EditionCWE-918Microsoft Office SharePoint Information Disclosure Vulnerability
CVE-2026-757263.5—AdobeAdobe Experience Manager as a Cloud ServiceCWE-20Adobe Experience Manager | Improper Input Validation (CWE-20)
CVE-2026-865643.3—Red HatFast Datapath for RHEL 10CWE-125Dpdk: dpdk: missing length validation before reading command_data in virtio-n…
CVE-2026-487073.1—instantsofticms2CWE-918InstantCMS vulnerable to SSRF via upload redirect bypass allows internal netw…
CVE-2026-843893.1—FortinetFortiSIEMCWE-601A url redirection to untrusted site ('open redirect') vulnerability in Fortin…
CVE-2026-866702.9—aircheng-orgiWebShop-5CWE-326aircheng-org iWebShop-5 Authentication Storage admin.php weak password hash
CVE-2026-843922.7—FortinetFortiOSCWE-476A NULL Pointer Dereference vulnerability [CWE-476] vulnerability in Fortinet …
CVE-2026-820602.3—MongoDBMongoDB ServerCWE-943Insufficient Validation of Shard Key Values in MongoDB Server Leads to Query …
CVE-2026-866682.1—aircheng-orgiWebShop-5CWE-79aircheng-org iWebShop-5 pic.php uploadFile cross site scripting
CVE-2026-866742.1—ningzichunStudent Management SystemCWE-384ningzichun Student Management System login.php session_start session fixiation
CVE-2026-866752.1—itsourcecodeSales and Inventory SystemCWE-74itsourcecode Sales and Inventory System us_edit.php sql injection
CVE-2026-866442.0—star7thshowdocCWE-79star7th showdoc API Page Save Endpoint editormd.js cross site scripting
CVE-2026-866672.0—aircheng-orgiWebShop-5CWE-74aircheng-org iWebShop-5 member.php member_list sql injection
CVE-2026-92151.8—NETGEARXR1000CWE-352A CSRF vulnerability exists in certain NETGEAR XR series devices
CVE-2026-92161.2—NETGEARRAX30CWE-121Insufficient input validation vulnerability exists in certain NETGEAR RAX Models
CVE-2026-0054await—GoogleAndroid—In isCallerAllowed of WalletContextualLocationsService.kt, there is a possibl…
CVE-2026-0065await—GoogleAndroid—In areBackgroundActivityStartsAllowed of BackgroundLaunchProcessController.ja…
CVE-2026-0084await—GoogleAndroid—In multiple functions of HostEmulationManager.java, there is a possible backg…
CVE-2026-0860await—Arm LtdValhall GPU Kernel DriverCWE-200Mali GPU Kernel Driver allows access to sensitive kernel information
CVE-2026-5729await—Arm LtdValhall GPU Kernel DriverCWE-416Mali GPU Kernel Driver allows access to already freed memory
CVE-2026-7476await—Arm LtdBifrost GPU Kernel DriverCWE-416Mali GPU Kernel Driver allows access to already freed memory
CVE-2026-7477await—Arm LtdBifrost GPU Kernel DriverCWE-416Mali GPU Kernel Driver allows access to already freed memory
CVE-2026-9034await—Arm LtdBifrost GPU Userspace DriverCWE-416Mali GPU Userspace Driver allows access to already freed memory
CVE-2026-9040await—Arm LtdBifrost GPU Kernel DriverCWE-362Mali GPU Kernel Driver allows denial of service or disclosure of sensitive in…
CVE-2026-11891await—Arm LtdValhall GPU Userspace DriverCWE-416Mali GPU Userspace Driver allows access to already freed memory
CVE-2026-12285await—Arm LtdBifrost GPU Kernel DriverCWE-416Mali GPU Kernel Driver allows access to already freed memory
CVE-2026-12387await—Arm LtdBifrost GPU Kernel DriverCWE-416Mali GPU Kernel Driver allows access to already freed memory
CVE-2026-19872await——HTML-FormHandlerCWE-79HTML::FormHandler versions before 0.410000 for Perl allow cross-site scriptin…
CVE-2026-28572await—GoogleAndroid—In onCreate of InstallLaunch.kt, there is a possible misleading UI due to a t…
CVE-2026-28582await—GoogleAndroid—In onCreate of ConfirmDeviceCredentialActivity.java, there is a possible unau…
CVE-2026-28583await—GoogleAndroid—In validate_camera_metadata_structure of camera_metadata.c, there is a possib…
CVE-2026-28584await—GoogleAndroid—In createSessionInternal of PackageInstallerService.java, there is a possible…
CVE-2026-28590await—GoogleAndroid—In multiple locations, there is a possible improper encryption key validation…
CVE-2026-28593await—GoogleAndroid—In getItemList of SettingsFragment.java, there is a possible user interaction…
CVE-2026-28594await—GoogleAndroid—In multiple locations, there is a possible use after free due to a logic erro…
CVE-2026-28596await—GoogleAndroid—In parseInterventionFromXml of GameManagerService.java, there is a possible p…
CVE-2026-28599await—GoogleAndroid—In addCreatorToken of ActivityManagerService.java, there is a possible Intent…
CVE-2026-28600await—GoogleAndroid—In onCreate of PaymentDefaultDialog.java, there is a possible way to change d…
CVE-2026-28602await—GoogleAndroid—In setClipboardAccessNotificationsEnabledForUser of ClipboardService.java, th…
CVE-2026-28603await—GoogleAndroid—In assertSafeToStartCustomActivity of AppRestrictionsFragment.java, there is …
CVE-2026-28604await—GoogleAndroid—In multiple locations, there is a possible use after free due to a race condi…
CVE-2026-28606await—GoogleAndroid—In handleBondStateChanged of AdapterService.java, there is a possible way to …
CVE-2026-28607await—GoogleAndroid—In multiple functions in multiple locations, there is a possible background a…
CVE-2026-28609await—GoogleAndroid—In read of MatroskaExtractor.cpp, there is a possible out-of-bounds write due…
CVE-2026-28611await—GoogleAndroid—In multiple functions of NfcService.java, there is a possible silent payment …
CVE-2026-28612await—GoogleAndroid—In resolveActivity of ActivityStarter.java, there is a possible way to perfor…
CVE-2026-28613await—GoogleAndroid—In initAppLinkTypeAndIntent of ChannelImpl.java, there is a possible launch a…
CVE-2026-28614await—GoogleAndroid—In onCreate of SlicePermissionActivity.java, there is a possible permission b…
CVE-2026-28616await—GoogleAndroid—In Setup Wizard, there is a possible way to force connection to a malicious n…
CVE-2026-28617await—GoogleAndroid—In add of WifiNetworkSuggestionsManager.java, there is a possible persistent …
CVE-2026-28618await—GoogleAndroid—In dec_frm_prepare of oapv.c, there is a possible OOB write due to a heap buf…
CVE-2026-28620await—GoogleAndroid—In multiple locations, there is a possible unauthorized URI access due to a p…
CVE-2026-28622await—GoogleAndroid—In getQueryBuilderInternal of MediaProvider.java, there is a possible way to …
CVE-2026-28623await—GoogleAndroid—In writeToParcel of BleRssiRangingCapabilities.java, there is a possible way …
CVE-2026-28624await—GoogleAndroid—In multiple locations, there is a possible read/write access to files without…
CVE-2026-28626await—GoogleAndroid—In onCreate of SetupPassthroughActivity.java, there is a possible way to laun…
CVE-2026-28627await—GoogleAndroid—In btm_sec_encrypt_change of btm_sec.cc, there is a possible downgrade attack…
CVE-2026-28630await—GoogleAndroid—In onCreate of ContactsPickerActivity.kt, there is a possible misleading UI d…
CVE-2026-28631await—GoogleAndroid—In buildMiniResolver of IntentForwarderActivity.java, there is a possible con…
CVE-2026-28633await—GoogleAndroid—In initForUserNoTracing of VoiceInteractionManagerService.java, there is a po…
CVE-2026-28634await—GoogleAndroid—In handleUssdRequest of PhoneInterfaceManager.java, there is a possible way t…
CVE-2026-28636await—GoogleAndroid—In setupLayout of PickActivity.java, there is a possible bypass of the "Insta…
CVE-2026-28638await—GoogleAndroid—In multiple functions of XmpDataParser.java, there is a possible improper dat…
CVE-2026-28639await—GoogleAndroid—In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible out of bounds writ…
CVE-2026-28642await—GoogleAndroid—In executeRequest of ActivityStarter.java, there is a possible background act…
CVE-2026-28644await—GoogleAndroid—In startNextMatchingActivity of ActivityTaskManagerService.java, there is a p…
CVE-2026-28650await—GoogleAndroid—In setHiddenWhileSuspended of WindowState.java, there is a possible overlay b…
CVE-2026-28652await—GoogleAndroid—In multiple functions of RangingServiceImpl.java, there is a possible MITM du…
CVE-2026-28653await—GoogleAndroid—In multiple functions of rw_t3t.cc, there is a possible out of bounds write d…
CVE-2026-28655await—GoogleAndroid—In multiple functions of RemoteViews.java, there is a possible background act…
CVE-2026-28656await—GoogleAndroid—In multiple functions of DeviceAdminAdd.java, there is a possible way to an o…
CVE-2026-28657await—GoogleAndroid—In onActivityResult of AppWidgetConfigActivityProxy.java, there is a possible…
CVE-2026-28658await—GoogleAndroid—In findMetaAuthUid of AccountsDb.java, there is a possible frp bypass due to …
CVE-2026-28660await—GoogleAndroid—In getAllSessions of multiple files, there is a possible confused deputy due …
CVE-2026-28662await—GoogleAndroid—In p2p_process_prov_disc_bootstrap_req of p2p_pd.c, there is a possible out o…
CVE-2026-28663await—GoogleAndroid—In buildIntentSenderForUser of LauncherAppsService.java, there is a possible …
CVE-2026-28666await—GoogleAndroid—In multiple functions of LocalImageResolver.java, there is a possible Remote …
CVE-2026-28668await—GoogleAndroid—In LimitRealloc of malloc_limit.cpp, there is a possible use after free due t…
CVE-2026-28671await—GoogleAndroid—In updateInternal of MediaProvider.java, there is a possible expose contents …
CVE-2026-30754await—n/an/a—A memory corruption vulnerability exists in FFmpeg before 8.1. The RTP encodi…
CVE-2026-45515await—GoogleAndroid—In a2dp_vendor_opus_decoder_decode_packet of a2dp_vendor_opus_decoder.cc, the…
CVE-2026-45519await—GoogleAndroid—In screenArgsForPermissionCheckIfAny of multiple locations there is a possibl…
CVE-2026-45520await—GoogleAndroid—In onAttach of BiometricsSettingsBase.java, there is a possible authenticatio…
CVE-2026-45521await—GoogleAndroid—In openFile of AppFuseBridge.java, there is a possible information disclosure…
CVE-2026-45525await—GoogleAndroid—In multiple locations, there is a possible improper data sanitization due to …
CVE-2026-45527await—GoogleAndroid—In convertCleanApertureToRect of HeifCleanAperture.cpp, there is a possible w…
CVE-2026-45528await—GoogleAndroid—In getManageSpaceActivityIntent of StorageManagerService.java, there is a pos…
CVE-2026-45531await—GoogleAndroid—In read_boot_region of fsck.c, there is a possible out of bounds read due to …
CVE-2026-49879await—GoogleAndroid—In multiple functions of rw_t3t.cc, there is a possible out of bounds write d…
CVE-2026-49881await—GoogleAndroid—In serviceClassExists of InCallController.java, there is a possible arbitrary…
CVE-2026-49882await—GoogleAndroid—In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible memory safety issu…
CVE-2026-49884await—GoogleAndroid—In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible out of bounds writ…
CVE-2026-49887await—GoogleAndroid—In maybeRemoveInvalidInstallerPackageName of InstallRepository.kt, there is a…
CVE-2026-49895await—GoogleAndroid—In get_eht_operation_channel_width of ieee802_11_common.c, there is a possibl…
CVE-2026-49918await—GoogleAndroid—In multiple functions, there is a possible out of bounds write due to an inte…
CVE-2026-49919await—GoogleAndroid—In tt_face_colr_blend_layer of ttcolr.c, there is a possible remote code exec…
CVE-2026-52307await—n/an/a—An authenticated stored cross-site scripting (XSS) vulnerability in the Colum…
CVE-2026-52486await—n/an/a—An issue in OpenDDS 3.33.x allows a local attacker to cause a denial of servi…
CVE-2026-55256await—GoogleAndroid—In parsePartHeaders of multiple files, there is a possible persistent denial …
CVE-2026-55290await—GoogleAndroid—In setTo of ResourceTypes.cpp, there is a possible out-of-bounds heap read du…
CVE-2026-58820await—GoogleAndroid—In multiple locations, there is a possible memory safety issue due to integer…
CVE-2026-62437await—XenXen—x86: DMs may cause mem leak by IRQ binding
CVE-2026-78738await—n/an/a—Silverpeas Core 6.4.6 is vulnerable to Cross Site Scripting (XSS) via the Doc…
CVE-2026-78741await—n/an/a—Silverpeas Core <=6.4.6 is vulnerable to Cross Site Scripting (XSS) in the wy…
CVE-2026-78742await—n/an/a—Silverpeas Core <=6.4.6 is vulnerable to Cross Site Scripting (XSS) via the M…
CVE-2026-78834await—n/an/a—A code execution vulnerability exists in CMSimple 5.22 in the CoAuthors plugi…
CVE-2026-78837await—n/an/a—A SQL injection vulnerability in the ap_form_{id} parameter in AppNitro MachF…
CVE-2026-78838await—n/an/a—A reflected cross-site scripting (XSS) vulnerability in the grid_datasource.p…
CVE-2026-78971await—n/an/a—In Halo <= 2.25.4, the plugin management feature allows users to install/upda…
CVE-2026-78997await—n/an/a—UC Browser for Android (package com.UCMobile.intl, version 13.7.8.1314) conta…
CVE-2026-79378await—n/an/a—An issue in the btm_acl_handle() function of Bestechnic Co., Ltd BES2300 Blue…
CVE-2026-79379await—n/an/a—A buffer overflow in the SBC_DecodeFrames() function of Bestechnic Co., Ltd B…
CVE-2026-79570await—n/an/a—mfish-nocode-pro v1.0.0 was discovered to contain a SQL injection vulnerabili…
CVE-2026-79571await—n/an/a—Incorrect access control in the SellerAuthorizeAspect component of springboot…
CVE-2026-79572await—n/an/a—An XXE (XML External Entity) vulnerability in the level-rule module of Distri…
CVE-2026-79573await—n/an/a—L-ONE v1.0.0 was discovered to contain multiple SQL injection vulnerabilities…
CVE-2026-79574await—n/an/a—An issue in the gateway server of mpush v0.8.1 allows attackers to execute ar…
CVE-2026-79575await—n/an/a—The JWT signing secret in yfexam-exam v2.0 is derived from the username and t…
CVE-2026-79577await—n/an/a—An issue in the /cas/login component of sso-master v1.0.0 allows attackers to…
CVE-2026-79588await—n/an/a—U-speed WIFI4 N300 T1 Pro v1.0.0 is vulnerable to Cleartext transmission of a…
CVE-2026-79602await—XenXen—x86: improper handling of HVM emulation return codes
CVE-2026-84282await—Ascensio System SIA / OnlyOfficeONLYOFFICE ownCloud integration plugin—A Server-Side Request Forgery (SSRF) vulnerability exists in the ONLYOFFICE o…
CVE-2026-85484await——HTML-FormHandlerCWE-79HTML::FormHandler versions before 0.410002 for Perl render option group label…
CVE-2026-85485await——HTML-FormHandlerCWE-79HTML::FormHandler versions before 0.410002 for Perl render some error message…
CVE-2026-85630await——HTML-FormHandlerCWE-79HTML::FormHandler versions before 0.410002 for Perl render field attributes i…
CVE-2026-86840await—Bitfrost.ioBifrost—Bifrost Unauthorized Channel Commission Attribution Allows Commission Diversion