2026

A stack overflow vulnerability exists in the AOS-10 web-based management interface of a Mobility Gateway. Successful exp

Arbitrary file deletion vulnerability have been identified in a system function of mobility conductors running AOS-8 ope

openCryptoki is a PKCS#11 library and tools for Linux and AIX. In 3.25.0 and 3.26.0, there is a heap buffer overflow vul

InDesign Desktop versions 21.0, 19.5.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could

Illustrator versions 29.8.3, 30.0 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead t

Bridge versions 15.1.2, 16.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in

InCopy versions 21.0, 19.5.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in

Illustrator versions 29.8.3, 30.0 and earlier are affected by an Untrusted Search Path vulnerability that could result i

InDesign Desktop versions 21.0, 19.5.5 and earlier are affected by an Out-of-bounds Read vulnerability that could lead t

InDesign Desktop versions 21.0, 19.5.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could

InDesign Desktop versions 21.0, 19.5.5 and earlier are affected by an Access of Uninitialized Pointer vulnerability that

InDesign Desktop versions 21.0, 19.5.5 and earlier are affected by an Access of Uninitialized Pointer vulnerability that

Dreamweaver Desktop versions 21.6 and earlier are affected by an Incorrect Authorization vulnerability that could result

Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Input Validation vulnerability that could lead

Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Input Validation vulnerability that could resu

Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Input Validation vulnerability that could resu

Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Neutralization of Special Elements used in an

Deserialization of untrusted data in Azure Core shared client library for Python allows an authorized attacker to execut

n8n is an open source workflow automation platform. From 1.36.0 to before 2.2.0, the Webhook node’s IP whitelist validat

OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems.

Windows Secure Boot stores Microsoft certificates in the UEFI KEK and DB. These original certificates are approaching ex

Stack-based buffer overflow in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally

Concurrent execution using shared resource with improper synchronization ('race condition') in Capability Access Managem

Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.

Improper verification of cryptographic signature in Windows Admin Center allows an authorized attacker to elevate privil

Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a

Use of uninitialized resource in Dynamic Root of Trust for Measurement (DRTM) allows an authorized attacker to disclose

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allo

Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information

Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally.

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Improper access control in Microsoft Office Excel allows an unauthorized attacker to bypass a security feature locally.

Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allo

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Untrusted search path in Microsoft Office allows an unauthorized attacker to execute code locally.

Improper link resolution before file access ('link following') in Host Process for Windows Tasks allows an authorized at

Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to dis

Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to el

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to dis

Out-of-bounds read in Windows NDIS allows an authorized attacker to disclose information with a physical attack.

Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an unauthorized attacker to

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows