2026

Insecure permissions in bookcars v8.3 allows authenticated attackers to escalate privileges from user to admin via modif

An information disclosure vulnerability in the /api/v1/user/info endpoint of AgentChat v2.3.0 allows unauthenticated att

A NULL pointer dereference in the gf_odf_vvc_cfg_write_bs function (odf/descriptors.c) of GPAC MP4Box v2.4 allows attack

A segmentation violaton in the gf_hevc_read_sps_bs_internal function (media_tools/av_parsers.c) of GPAC MP4Box v2.4 allo

A stack buffer overflow in the filein_process function (in_file.c) of GPAC MP4Box v2.4 allows attackers to cause a Denia

An issue was discovered in Malwarebytes 4.x and 5.x (and Nebula 2020-10-21 and later). There is a Heap buffer overflow i

The utility functions used by Malwarebytes EDR 1.0.11 on Linux for calculating a cryptographic hash of data bytes trunca

The RemoteControl API methods invite_participants and remind_participants pass a caller-supplied token-ID array into Tok

LimeSurvey constructs account password-reset links from the client-supplied HTTP Host header without validating it. The

Missing authentication for critical function in Microsoft PC Manager allows an authorized attacker to elevate privileges

Improper link resolution before file access ('link following') in Microsoft PC Manager allows an authorized attacker to

InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by an out-of-bounds write vulnerability that could resul

InCopy versions 21.3, 20.5.3 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result i

InCopy versions 21.3, 20.5.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in

InCopy versions 21.3, 20.5.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbit

InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a Stack-based Buffer Overflow vulnerability that coul

InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could

InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by an out-of-bounds write vulnerability that could resul

InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could

InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could

InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a Stack-based Buffer Overflow vulnerability that coul

InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a Use After Free vulnerability that could result in a

InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a Stack-based Buffer Overflow vulnerability that coul

Adobe Experience Manager Forms JEE versions LTS SP1, 6.5.24.0 and earlier are affected by a reflected Cross-Site Scripti

A vulnerability in the affected NETGEAR gaming routers allows attackers with the ability to intercept and tamper with tr

Insufficient authentication and input validation in the listed NETGEAR models allow users connected to the local network

An unauthenticated user on the local network can gain control of the router and make unauthorized changes to its operati

Issue summary: When CMS password-based decryption (RFC 3211 / PWRI key unwrap) processes attacker-supplied CMS data, an

Issue summary: A signed integer overflow when sizing the destination buffer for Unicode output in ASN1_mbstring_ncopy()

Hermes WebUI before version 0.51.311 contains a remote code execution vulnerability that allows authenticated attackers

Hermes WebUI before version 0.51.296 contains a workspace boundary bypass vulnerability that allows authenticated attack

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to

Improper access control in Microsoft PC Manager allows an authorized attacker to bypass a security feature locally.

Uncontrolled resource consumption in HTTP/2 allows an unauthorized attacker to deny service over a network.

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

Improper access control in Windows Secure Boot allows an authorized attacker to elevate privileges locally.

No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally.

No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

Improper input validation in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

Untrusted search path in Windows Narrator Braille allows an authorized attacker to elevate privileges locally.

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Protection mechanism failure in Windows Boot Manager allows an authorized attacker to bypass a security feature locally.

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.