Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-55008 |
|
Cross-Site Scripting (XSS) in microsoft (CVE-2026-55008)
cross-site scripting in microsoft (CVE-2026-55008). Successful exploitation can lead to full system takeover.
|
| CVE-2026-55006 |
|
Vulnerability in microsoft (CVE-2026-55006)
vulnerability in microsoft (CVE-2026-55006). Successful exploitation can lead to full system takeover.
|
| CVE-2026-55005 |
|
Vulnerability in microsoft (CVE-2026-55005)
vulnerability in microsoft (CVE-2026-55005). Successful exploitation can lead to full system takeover.
|
| CVE-2026-55004 |
|
Vulnerability in microsoft (CVE-2026-55004)
vulnerability in microsoft (CVE-2026-55004). Successful exploitation can lead to full system takeover.
|
| CVE-2026-55003 |
|
Vulnerability in microsoft (CVE-2026-55003)
vulnerability in microsoft (CVE-2026-55003). Confidential information can be exposed externally.
|
| CVE-2026-55002 |
|
Vulnerability in microsoft (CVE-2026-55002)
vulnerability in microsoft (CVE-2026-55002). Successful exploitation can lead to full system takeover.
|
| CVE-2026-55001 |
|
Vulnerability in microsoft (CVE-2026-55001)
vulnerability in microsoft (CVE-2026-55001). Successful exploitation can lead to full system takeover.
|
| CVE-2026-55000 |
|
Use-After-Free in microsoft (CVE-2026-55000)
vulnerability in microsoft (CVE-2026-55000). Successful exploitation can lead to full system takeover.
|
| CVE-2026-54999 |
|
Vulnerability in microsoft (CVE-2026-54999)
vulnerability in microsoft (CVE-2026-54999). Successful exploitation can lead to full system takeover.
|
| CVE-2026-54997 |
|
Vulnerability in microsoft (CVE-2026-54997)
vulnerability in microsoft (CVE-2026-54997). Confidential information can be exposed externally.
|
| CVE-2026-54996 |
|
Out-of-Bounds Read in microsoft (CVE-2026-54996)
vulnerability in microsoft (CVE-2026-54996). Successful exploitation can lead to full system takeover.
|
| CVE-2026-54995 |
|
Use-After-Free in microsoft (CVE-2026-54995)
vulnerability in microsoft (CVE-2026-54995). Successful exploitation can lead to full system takeover.
|
| CVE-2026-54993 |
|
Vulnerability in microsoft (CVE-2026-54993)
vulnerability in microsoft (CVE-2026-54993). Successful exploitation can lead to full system takeover.
|
| CVE-2026-54992 |
|
Vulnerability in microsoft (CVE-2026-54992)
vulnerability in microsoft (CVE-2026-54992). Successful exploitation can lead to full system takeover.
|
| CVE-2026-54991 |
|
Out-of-Bounds Read in microsoft (CVE-2026-54991)
vulnerability in microsoft (CVE-2026-54991). Successful exploitation can lead to full system takeover.
|
| CVE-2026-54990 |
|
Vulnerability in microsoft (CVE-2026-54990)
vulnerability in microsoft (CVE-2026-54990). Successful exploitation can lead to full system takeover.
|
| CVE-2026-54989 |
|
Use-After-Free in microsoft (CVE-2026-54989)
vulnerability in microsoft (CVE-2026-54989). Successful exploitation can lead to full system takeover.
|
| CVE-2026-54988 |
|
Out-of-Bounds Read in microsoft (CVE-2026-54988)
vulnerability in microsoft (CVE-2026-54988). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-54987 |
|
Vulnerability in microsoft (CVE-2026-54987)
vulnerability in microsoft (CVE-2026-54987). Successful exploitation can lead to full system takeover.
|
| CVE-2026-54986 |
|
Vulnerability in microsoft (CVE-2026-54986)
vulnerability in microsoft (CVE-2026-54986). Successful exploitation can lead to full system takeover.
|
| CVE-2026-54983 |
|
Vulnerability in microsoft (CVE-2026-54983)
vulnerability in microsoft (CVE-2026-54983). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-54982 |
|
Vulnerability in microsoft (CVE-2026-54982)
vulnerability in microsoft (CVE-2026-54982). Successful exploitation can lead to full system takeover.
|
| CVE-2026-54433 |
|
Cross-Site Scripting (XSS) in roundcube (CVE-2026-54433)
cross-site scripting in roundcube (CVE-2026-54433). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-54432 |
|
Cross-Site Scripting (XSS) in CVE-2026-54432 (CVE-2026-54432)
cross-site scripting in CVE-2026-54432 (CVE-2026-54432). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-54132 |
|
Vulnerability in microsoft (CVE-2026-54132)
vulnerability in microsoft (CVE-2026-54132). Successful exploitation can lead to full system takeover.
|
| CVE-2026-54129 |
|
Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
|
| CVE-2026-54127 |
|
Use after free in Windows Hyper-V allows an unauthorized attacker to elevate privileges locally.
Use after free in Windows Hyper-V allows an unauthorized attacker to elevate privileges locally.
|
| CVE-2026-54122 |
|
Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code locally.
Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code locally.
|
| CVE-2026-54119 |
|
Vulnerability in microsoft (CVE-2026-54119)
vulnerability in microsoft (CVE-2026-54119). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-54118 |
|
Unsafe Deserialization in deserialization (CVE-2026-54118)
vulnerability in deserialization (CVE-2026-54118). Successful exploitation can lead to full system takeover.
|
| CVE-2026-54117 |
|
Unsafe Deserialization in deserialization (CVE-2026-54117)
vulnerability in deserialization (CVE-2026-54117). Successful exploitation can lead to full system takeover.
|
| CVE-2026-54114 |
|
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
|
| CVE-2026-54112 |
|
Vulnerability in microsoft (CVE-2026-54112)
vulnerability in microsoft (CVE-2026-54112). Successful exploitation can lead to full system takeover.
|
| CVE-2026-54111 |
|
Out-of-Bounds Read in microsoft (CVE-2026-54111)
vulnerability in microsoft (CVE-2026-54111). Successful exploitation can lead to full system takeover.
|
| CVE-2026-54109 |
|
Vulnerability in microsoft (CVE-2026-54109)
vulnerability in microsoft (CVE-2026-54109). Successful exploitation can lead to full system takeover.
|
| CVE-2026-54108 |
|
Vulnerability in microsoft (CVE-2026-54108)
vulnerability in microsoft (CVE-2026-54108). Confidential information can be exposed externally.
|
| CVE-2026-54107 |
|
Vulnerability in microsoft (CVE-2026-54107)
vulnerability in microsoft (CVE-2026-54107). Successful exploitation can lead to full system takeover.
|
| CVE-2026-54058 |
|
Out-of-Bounds Read in pillow (CVE-2026-54058)
vulnerability in pillow (CVE-2026-54058). Confidential information can be exposed externally. Exploitable via ``raw``. Mitigation: upgrade to `12.3.0` or later.
|
| CVE-2026-50697 |
|
Information Disclosure in microsoft (CVE-2026-50697)
vulnerability in microsoft (CVE-2026-50697). Successful exploitation can lead to full system takeover.
|
| CVE-2026-50696 |
|
Vulnerability in microsoft (CVE-2026-50696)
vulnerability in microsoft (CVE-2026-50696). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-50695 |
|
Vulnerability in microsoft (CVE-2026-50695)
vulnerability in microsoft (CVE-2026-50695). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-50694 |
|
Use-After-Free in microsoft (CVE-2026-50694)
vulnerability in microsoft (CVE-2026-50694). Successful exploitation can lead to full system takeover.
|
| CVE-2026-50678 |
|
Vulnerability in microsoft (CVE-2026-50678)
vulnerability in microsoft (CVE-2026-50678). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-50675 |
|
Vulnerability in microsoft (CVE-2026-50675)
vulnerability in microsoft (CVE-2026-50675). Successful exploitation can lead to full system takeover.
|
| CVE-2026-50663 |
|
Vulnerability in path-traversal (CVE-2026-50663)
vulnerability in path-traversal (CVE-2026-50663). Successful exploitation can lead to full system takeover.
|
| CVE-2026-50653 |
|
Vulnerability in microsoft (CVE-2026-50653)
vulnerability in microsoft (CVE-2026-50653). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-50652 |
|
Unsafe Deserialization in deserialization (CVE-2026-50652)
vulnerability in deserialization (CVE-2026-50652). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-50522 KEV |
|
[KEV] Unsafe Deserialization in Microsoft deserialization (CVE-2026-50522)
vulnerability in Microsoft deserialization (CVE-2026-50522). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2026-50520 |
|
Command Injection in microsoft (CVE-2026-50520)
command injection in microsoft (CVE-2026-50520). Successful exploitation can lead to full system takeover.
|
| CVE-2026-50506 |
|
Vulnerability in csharp (CVE-2026-50506)
vulnerability in csharp (CVE-2026-50506). Risk of unauthorized operations or information disclosure.
|