Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-73085 |
|
Authentication Bypass in CVE-2026-73085 (CVE-2026-73085)
authentication bypass in CVE-2026-73085 (CVE-2026-73085). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73084 |
|
Cross-Site Scripting (XSS) in CVE-2026-73084 (CVE-2026-73084)
cross-site scripting in CVE-2026-73084 (CVE-2026-73084). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73083 |
|
Vulnerability in CVE-2026-73083 (CVE-2026-73083)
vulnerability in CVE-2026-73083 (CVE-2026-73083). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-70354 |
|
Out-of-Bounds Write in Microsoft.WindowsDesktop.App.Runtime.win-arm64 (CVE-2026-70354)
out-of-bounds write in Microsoft.WindowsDesktop.App.Runtime.win-arm64 (CVE-2026-70354). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `8.0.30` or later.
|
| CVE-2026-70337 |
|
Vulnerability in path-traversal (CVE-2026-70337)
vulnerability in path-traversal (CVE-2026-70337). Successful exploitation can lead to full system takeover.
|
| CVE-2026-70338 |
|
Code Injection in microsoft (CVE-2026-70338)
code injection in microsoft (CVE-2026-70338). Successful exploitation can lead to full system takeover.
|
| CVE-2026-65810 |
|
Vulnerability in csharp (CVE-2026-65810)
vulnerability in csharp (CVE-2026-65810). Successful exploitation can lead to full system takeover.
|
| CVE-2026-62899 |
|
Vulnerability in Microsoft.NETCore.App.Runtime.linux-arm (CVE-2026-62899)
vulnerability in Microsoft.NETCore.App.Runtime.linux-arm (CVE-2026-62899). Confidential information can be exposed externally. Mitigation: upgrade to `8.0.30` or later.
|
| CVE-2026-62900 |
|
Vulnerability in csharp (CVE-2026-62900)
vulnerability in csharp (CVE-2026-62900). Confidential information can be exposed externally.
|
| CVE-2026-62901 |
|
Vulnerability in Microsoft.NETCore.App.Runtime.win-arm64 (CVE-2026-62901)
vulnerability in Microsoft.NETCore.App.Runtime.win-arm64 (CVE-2026-62901). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.30` or later.
|
| CVE-2026-62902 |
|
Vulnerability in Microsoft.WindowsDesktop.App.Runtime.win-arm64 (CVE-2026-62902)
vulnerability in Microsoft.WindowsDesktop.App.Runtime.win-arm64 (CVE-2026-62902). Confidential information can be exposed externally. Mitigation: upgrade to `8.0.30` or later.
|
| CVE-2026-62909 |
|
Vulnerability in Microsoft.NETCore.App.Runtime.linux-arm (CVE-2026-62909)
vulnerability in Microsoft.NETCore.App.Runtime.linux-arm (CVE-2026-62909). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `8.0.30` or later.
|
| CVE-2026-62897 |
|
Vulnerability in Microsoft.WindowsDesktop.App.Runtime.win-arm64 (CVE-2026-62897)
vulnerability in Microsoft.WindowsDesktop.App.Runtime.win-arm64 (CVE-2026-62897). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `8.0.30` or later.
|
| CVE-2026-62886 |
|
Vulnerability in Microsoft.WindowsDesktop.App.Runtime.win-arm64 (CVE-2026-62886)
vulnerability in Microsoft.WindowsDesktop.App.Runtime.win-arm64 (CVE-2026-62886). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `8.0.30` or later.
|
| CVE-2026-62871 |
|
Vulnerability in Microsoft.WindowsDesktop.App.Runtime.win-arm64 (CVE-2026-62871)
vulnerability in Microsoft.WindowsDesktop.App.Runtime.win-arm64 (CVE-2026-62871). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `8.0.30` or later.
|
| CVE-2026-62872 |
|
Authorization Flaw in csharp (CVE-2026-62872)
vulnerability in csharp (CVE-2026-62872). Successful exploitation can lead to full system takeover.
|
| CVE-2026-73070 |
|
Vulnerability in c (CVE-2026-73070)
vulnerability in c (CVE-2026-73070). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73071 |
|
Use-After-Free in c (CVE-2026-73071)
vulnerability in c (CVE-2026-73071). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73072 |
|
Vulnerability in c (CVE-2026-73072)
vulnerability in c (CVE-2026-73072). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73074 |
|
Vulnerability in c (CVE-2026-73074)
vulnerability in c (CVE-2026-73074). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73075 |
|
Vulnerability in c (CVE-2026-73075)
vulnerability in c (CVE-2026-73075). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73066 |
|
Out-of-Bounds Write in cpp (CVE-2026-73066)
out-of-bounds write in cpp (CVE-2026-73066). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-73067 |
|
Out-of-Bounds Read in cpp (CVE-2026-73067)
vulnerability in cpp (CVE-2026-73067). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-72925 |
|
Cross-Site Scripting (XSS) in CVE-2026-72925 (CVE-2026-72925)
cross-site scripting in CVE-2026-72925 (CVE-2026-72925). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-19434 |
|
Cross-Site Scripting (XSS) in CVE-2026-19434 (CVE-2026-19434)
cross-site scripting in CVE-2026-19434 (CVE-2026-19434). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-72778 |
|
Vulnerability in csrf (CVE-2026-72778)
vulnerability in csrf (CVE-2026-72778). Successful exploitation can lead to full system takeover.
|
| CVE-2026-72764 |
|
Vulnerability in CVE-2026-72764 (CVE-2026-72764)
vulnerability in CVE-2026-72764 (CVE-2026-72764). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-72749 |
|
Vulnerability in dos (CVE-2026-72749)
vulnerability in dos (CVE-2026-72749). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-72747 |
|
Cross-Site Scripting (XSS) in CVE-2026-72747 (CVE-2026-72747)
cross-site scripting in CVE-2026-72747 (CVE-2026-72747). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-72748 |
|
Vulnerability in dos (CVE-2026-72748)
vulnerability in dos (CVE-2026-72748). Data can be tampered with by attackers.
|
| CVE-2026-72745 |
|
Vulnerability in c (CVE-2026-72745)
vulnerability in c (CVE-2026-72745). Confidential information can be exposed externally.
|
| CVE-2026-72559 |
|
Cross-Site Scripting (XSS) in CVE-2026-72559 (CVE-2026-72559)
cross-site scripting in CVE-2026-72559 (CVE-2026-72559). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-72553 |
|
Cross-Site Scripting (XSS) in privilege-escalation (CVE-2026-72553)
cross-site scripting in privilege-escalation (CVE-2026-72553). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-72557 |
|
Unrestricted File Upload in CVE-2026-72557 (CVE-2026-72557)
vulnerability in CVE-2026-72557 (CVE-2026-72557). Successful exploitation can lead to full system takeover.
|
| CVE-2026-72556 |
|
OS Command Injection in CVE-2026-72556 (CVE-2026-72556)
OS command injection in CVE-2026-72556 (CVE-2026-72556). Successful exploitation can lead to full system takeover.
|
| CVE-2026-72551 |
|
OS Command Injection in CVE-2026-72551 (CVE-2026-72551)
OS command injection in CVE-2026-72551 (CVE-2026-72551). Successful exploitation can lead to full system takeover.
|
| CVE-2026-19418 |
|
Vulnerability in CVE-2026-19418 (CVE-2026-19418)
vulnerability in CVE-2026-19418 (CVE-2026-19418). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12051 |
|
Vulnerability in c (CVE-2026-12051)
vulnerability in c (CVE-2026-12051). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-12052 |
|
Out-of-Bounds Write in c (CVE-2026-12052)
out-of-bounds write in c (CVE-2026-12052). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11894 |
|
Vulnerability in c (CVE-2026-11894)
vulnerability in c (CVE-2026-11894). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-11893 |
|
Vulnerability in c (CVE-2026-11893)
vulnerability in c (CVE-2026-11893). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-24330 |
|
Unrestricted File Upload in CVE-2026-24330 (CVE-2026-24330)
vulnerability in CVE-2026-24330 (CVE-2026-24330). Confidential information can be exposed externally.
|
| CVE-2026-58235 |
|
Vulnerability in CVE-2026-58235 (CVE-2026-58235)
vulnerability in CVE-2026-58235 (CVE-2026-58235). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-48161 |
|
Vulnerability in react (CVE-2026-48161)
vulnerability in react (CVE-2026-48161). Risk of unauthorized operations or information disclosure. Exploitable via ``postinstall``.
|
| CVE-2026-11812 |
|
Vulnerability in c (CVE-2026-11812)
vulnerability in c (CVE-2026-11812). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-8718 |
|
Out-of-Bounds Write in c (CVE-2026-8718)
out-of-bounds write in c (CVE-2026-8718). Data can be tampered with by attackers.
|
| CVE-2026-11811 |
|
Vulnerability in c (CVE-2026-11811)
vulnerability in c (CVE-2026-11811). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-72917 |
|
Vulnerability in CVE-2026-72917 (CVE-2026-72917)
vulnerability in CVE-2026-72917 (CVE-2026-72917). Confidential information can be exposed externally. Exploitable via `POST /api/system/recover-account`.
|
| CVE-2026-73033 |
|
Path Traversal in wordpress (CVE-2026-73033)
path traversal in wordpress (CVE-2026-73033). Data can be tampered with by attackers.
|
| CVE-2026-72743 |
|
Cross-Site Scripting (XSS) in CVE-2026-72743 (CVE-2026-72743)
cross-site scripting in CVE-2026-72743 (CVE-2026-72743). Risk of unauthorized operations or information disclosure.
|