Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-64905 |
|
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to execute code locally.
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to execute code locally.
|
| CVE-2026-64907 |
|
Vulnerability in microsoft (CVE-2026-64907)
vulnerability in microsoft (CVE-2026-64907). Successful exploitation can lead to full system takeover.
|
| CVE-2026-64900 |
|
Cross-Site Scripting (XSS) in microsoft (CVE-2026-64900)
cross-site scripting in microsoft (CVE-2026-64900). Confidential information can be exposed externally.
|
| CVE-2026-64897 |
|
Cross-Site Scripting (XSS) in microsoft (CVE-2026-64897)
cross-site scripting in microsoft (CVE-2026-64897). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-64901 |
|
Unsafe Deserialization in deserialization (CVE-2026-64901)
vulnerability in deserialization (CVE-2026-64901). Successful exploitation can lead to full system takeover.
|
| CVE-2026-63531 |
|
Out-of-Bounds Read in microsoft (CVE-2026-63531)
vulnerability in microsoft (CVE-2026-63531). Confidential information can be exposed externally.
|
| CVE-2026-63525 |
|
Vulnerability in microsoft (CVE-2026-63525)
vulnerability in microsoft (CVE-2026-63525). Successful exploitation can lead to full system takeover.
|
| CVE-2026-63527 |
|
Vulnerability in microsoft (CVE-2026-63527)
vulnerability in microsoft (CVE-2026-63527). Successful exploitation can lead to full system takeover.
|
| CVE-2026-63528 |
|
Out-of-Bounds Read in microsoft (CVE-2026-63528)
vulnerability in microsoft (CVE-2026-63528). Confidential information can be exposed externally.
|
| CVE-2026-63530 |
|
Out-of-Bounds Read in microsoft (CVE-2026-63530)
vulnerability in microsoft (CVE-2026-63530). Confidential information can be exposed externally.
|
| CVE-2026-63521 |
|
Out-of-Bounds Read in microsoft (CVE-2026-63521)
vulnerability in microsoft (CVE-2026-63521). Confidential information can be exposed externally.
|
| CVE-2026-63518 |
|
Vulnerability in microsoft (CVE-2026-63518)
vulnerability in microsoft (CVE-2026-63518). Successful exploitation can lead to full system takeover.
|
| CVE-2026-63520 |
|
Vulnerability in microsoft (CVE-2026-63520)
vulnerability in microsoft (CVE-2026-63520). Successful exploitation can lead to full system takeover.
|
| CVE-2026-63514 |
|
Unsafe Deserialization in deserialization (CVE-2026-63514)
vulnerability in deserialization (CVE-2026-63514). Successful exploitation can lead to full system takeover.
|
| CVE-2026-63516 |
|
Unsafe Deserialization in deserialization (CVE-2026-63516)
vulnerability in deserialization (CVE-2026-63516). Confidential information can be exposed externally.
|
| CVE-2026-62917 |
|
Vulnerability in microsoft (CVE-2026-62917)
vulnerability in microsoft (CVE-2026-62917). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-62912 |
|
Unsafe Deserialization in deserialization (CVE-2026-62912)
vulnerability in deserialization (CVE-2026-62912). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-62913 |
|
Vulnerability in microsoft (CVE-2026-62913)
vulnerability in microsoft (CVE-2026-62913). Successful exploitation can lead to full system takeover.
|
| CVE-2026-62914 |
|
Cross-Site Scripting (XSS) in microsoft (CVE-2026-62914)
cross-site scripting in microsoft (CVE-2026-62914). Confidential information can be exposed externally.
|
| CVE-2026-62915 |
|
Vulnerability in microsoft (CVE-2026-62915)
vulnerability in microsoft (CVE-2026-62915). Data can be tampered with by attackers.
|
| CVE-2026-63512 |
|
Authorization Flaw in microsoft (CVE-2026-63512)
vulnerability in microsoft (CVE-2026-63512). Data can be tampered with by attackers.
|
| CVE-2026-62911 |
|
Vulnerability in microsoft (CVE-2026-62911)
vulnerability in microsoft (CVE-2026-62911). Successful exploitation can lead to full system takeover.
|
| CVE-2026-62901 |
|
Vulnerability in Microsoft.NETCore.App.Runtime.win-arm64 (CVE-2026-62901)
vulnerability in Microsoft.NETCore.App.Runtime.win-arm64 (CVE-2026-62901). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.30` or later.
|
| CVE-2026-62902 |
|
Vulnerability in Microsoft.WindowsDesktop.App.Runtime.win-arm64 (CVE-2026-62902)
vulnerability in Microsoft.WindowsDesktop.App.Runtime.win-arm64 (CVE-2026-62902). Confidential information can be exposed externally. Mitigation: upgrade to `8.0.30` or later.
|
| CVE-2026-62909 |
|
Vulnerability in Microsoft.NETCore.App.Runtime.linux-arm (CVE-2026-62909)
vulnerability in Microsoft.NETCore.App.Runtime.linux-arm (CVE-2026-62909). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `8.0.30` or later.
|
| CVE-2026-62900 |
|
Vulnerability in csharp (CVE-2026-62900)
vulnerability in csharp (CVE-2026-62900). Confidential information can be exposed externally.
|
| CVE-2026-62899 |
|
Vulnerability in Microsoft.NETCore.App.Runtime.linux-arm (CVE-2026-62899)
vulnerability in Microsoft.NETCore.App.Runtime.linux-arm (CVE-2026-62899). Confidential information can be exposed externally. Mitigation: upgrade to `8.0.30` or later.
|
| CVE-2026-62910 |
|
Vulnerability in microsoft (CVE-2026-62910)
vulnerability in microsoft (CVE-2026-62910). Successful exploitation can lead to full system takeover.
|
| CVE-2026-62897 |
|
Vulnerability in Microsoft.WindowsDesktop.App.Runtime.win-arm64 (CVE-2026-62897)
vulnerability in Microsoft.WindowsDesktop.App.Runtime.win-arm64 (CVE-2026-62897). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `8.0.30` or later.
|
| CVE-2026-62886 |
|
Vulnerability in Microsoft.WindowsDesktop.App.Runtime.win-arm64 (CVE-2026-62886)
vulnerability in Microsoft.WindowsDesktop.App.Runtime.win-arm64 (CVE-2026-62886). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `8.0.30` or later.
|
| CVE-2026-62882 |
|
Vulnerability in microsoft (CVE-2026-62882)
vulnerability in microsoft (CVE-2026-62882). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-62872 |
|
Authorization Flaw in csharp (CVE-2026-62872)
vulnerability in csharp (CVE-2026-62872). Successful exploitation can lead to full system takeover.
|
| CVE-2026-62871 |
|
Vulnerability in Microsoft.WindowsDesktop.App.Runtime.win-arm64 (CVE-2026-62871)
vulnerability in Microsoft.WindowsDesktop.App.Runtime.win-arm64 (CVE-2026-62871). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `8.0.30` or later.
|
| CVE-2026-62839 |
|
Vulnerability in microsoft (CVE-2026-62839)
vulnerability in microsoft (CVE-2026-62839). Confidential information can be exposed externally.
|
| CVE-2026-62837 |
|
Vulnerability in path-traversal (CVE-2026-62837)
vulnerability in path-traversal (CVE-2026-62837). Confidential information can be exposed externally.
|
| CVE-2026-62827 |
|
Authentication Bypass in microsoft (CVE-2026-62827)
authentication bypass in microsoft (CVE-2026-62827). Successful exploitation can lead to full system takeover.
|
| CVE-2026-62829 |
|
Cross-Site Scripting (XSS) in microsoft (CVE-2026-62829)
cross-site scripting in microsoft (CVE-2026-62829). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-72778 |
|
Vulnerability in csrf (CVE-2026-72778)
vulnerability in csrf (CVE-2026-72778). Successful exploitation can lead to full system takeover.
|
| CVE-2026-72771 |
|
Authorization Flaw in n8n (CVE-2026-72771)
vulnerability in n8n (CVE-2026-72771). Confidential information can be exposed externally.
|
| CVE-2026-72750 |
|
SQL Injection in sqli (CVE-2026-72750)
SQL injection in sqli (CVE-2026-72750). Successful exploitation can lead to full system takeover.
|
| CVE-2026-72766 |
|
Vulnerability in ssrf (CVE-2026-72766)
vulnerability in ssrf (CVE-2026-72766). Confidential information can be exposed externally.
|
| CVE-2026-72748 |
|
Vulnerability in dos (CVE-2026-72748)
vulnerability in dos (CVE-2026-72748). Data can be tampered with by attackers.
|
| CVE-2026-72556 |
|
OS Command Injection in CVE-2026-72556 (CVE-2026-72556)
OS command injection in CVE-2026-72556 (CVE-2026-72556). Successful exploitation can lead to full system takeover.
|
| CVE-2026-72557 |
|
Unrestricted File Upload in CVE-2026-72557 (CVE-2026-72557)
vulnerability in CVE-2026-72557 (CVE-2026-72557). Successful exploitation can lead to full system takeover.
|
| CVE-2026-72551 |
|
OS Command Injection in CVE-2026-72551 (CVE-2026-72551)
OS command injection in CVE-2026-72551 (CVE-2026-72551). Successful exploitation can lead to full system takeover.
|
| CVE-2026-73033 |
|
Path Traversal in wordpress (CVE-2026-73033)
path traversal in wordpress (CVE-2026-73033). Data can be tampered with by attackers.
|
| CVE-2026-69118 |
|
Authorization Flaw in CVE-2026-69118 (CVE-2026-69118)
vulnerability in CVE-2026-69118 (CVE-2026-69118). Successful exploitation can lead to full system takeover.
|
| CVE-2026-44401 |
|
Cross-Site Scripting (XSS) in CVE-2026-44401 (CVE-2026-44401)
cross-site scripting in CVE-2026-44401 (CVE-2026-44401). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-68871 |
|
Vulnerability in apache (CVE-2026-68871)
vulnerability in apache (CVE-2026-68871). Confidential information can be exposed externally.
|
| CVE-2026-68870 |
|
Vulnerability in apache (CVE-2026-68870)
vulnerability in apache (CVE-2026-68870). Confidential information can be exposed externally.
|