Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-55040 KEV |
|
[KEV] Vulnerability in Microsoft sharepoint-server (CVE-2026-55040)
vulnerability in Microsoft sharepoint-server (CVE-2026-55040). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.
|
| CVE-2026-55038 |
|
Vulnerability in microsoft (CVE-2026-55038)
vulnerability in microsoft (CVE-2026-55038). Successful exploitation can lead to full system takeover.
|
| CVE-2026-55035 |
|
Out-of-Bounds Read in microsoft (CVE-2026-55035)
vulnerability in microsoft (CVE-2026-55035). Confidential information can be exposed externally.
|
| CVE-2026-55034 |
|
Cross-Site Scripting (XSS) in microsoft (CVE-2026-55034)
cross-site scripting in microsoft (CVE-2026-55034). Confidential information can be exposed externally.
|
| CVE-2026-55033 |
|
Vulnerability in microsoft (CVE-2026-55033)
vulnerability in microsoft (CVE-2026-55033). Successful exploitation can lead to full system takeover.
|
| CVE-2026-55032 |
|
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
|
| CVE-2026-55031 |
|
Out-of-Bounds Read in microsoft (CVE-2026-55031)
vulnerability in microsoft (CVE-2026-55031). Successful exploitation can lead to full system takeover.
|
| CVE-2026-55036 |
|
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
|
| CVE-2026-55037 |
|
Vulnerability in microsoft (CVE-2026-55037)
vulnerability in microsoft (CVE-2026-55037). Successful exploitation can lead to full system takeover.
|
| CVE-2026-55024 |
|
Vulnerability in microsoft (CVE-2026-55024)
vulnerability in microsoft (CVE-2026-55024). Successful exploitation can lead to full system takeover.
|
| CVE-2026-55025 |
|
Vulnerability in microsoft (CVE-2026-55025)
vulnerability in microsoft (CVE-2026-55025). Successful exploitation can lead to full system takeover.
|
| CVE-2026-55029 |
|
Vulnerability in microsoft (CVE-2026-55029)
vulnerability in microsoft (CVE-2026-55029). Successful exploitation can lead to full system takeover.
|
| CVE-2026-55030 |
|
Cross-Site Scripting (XSS) in microsoft (CVE-2026-55030)
cross-site scripting in microsoft (CVE-2026-55030). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55028 |
|
Out-of-Bounds Read in microsoft (CVE-2026-55028)
vulnerability in microsoft (CVE-2026-55028). Confidential information can be exposed externally.
|
| CVE-2026-55027 |
|
Out-of-Bounds Read in microsoft (CVE-2026-55027)
vulnerability in microsoft (CVE-2026-55027). Confidential information can be exposed externally.
|
| CVE-2026-55026 |
|
Vulnerability in microsoft (CVE-2026-55026)
vulnerability in microsoft (CVE-2026-55026). Confidential information can be exposed externally.
|
| CVE-2026-55023 |
|
Out-of-Bounds Read in microsoft (CVE-2026-55023)
vulnerability in microsoft (CVE-2026-55023). Confidential information can be exposed externally.
|
| CVE-2026-55021 |
|
Cross-Site Scripting (XSS) in microsoft (CVE-2026-55021)
cross-site scripting in microsoft (CVE-2026-55021). Confidential information can be exposed externally.
|
| CVE-2026-55020 |
|
Cross-Site Scripting (XSS) in microsoft (CVE-2026-55020)
cross-site scripting in microsoft (CVE-2026-55020). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55019 |
|
Cross-Site Scripting (XSS) in microsoft (CVE-2026-55019)
cross-site scripting in microsoft (CVE-2026-55019). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-55016 |
|
Cross-Site Scripting (XSS) in microsoft (CVE-2026-55016)
cross-site scripting in microsoft (CVE-2026-55016). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-58644 KEV |
|
[KEV] Unsafe Deserialization in Microsoft deserialization (CVE-2026-58644)
vulnerability in Microsoft deserialization (CVE-2026-58644). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2026-58618 |
|
Vulnerability in microsoft (CVE-2026-58618)
vulnerability in microsoft (CVE-2026-58618). Successful exploitation can lead to full system takeover.
|
| CVE-2026-56170 |
|
Vulnerability in Microsoft.AspNetCore.App.Runtime.linux-arm (CVE-2026-56170)
vulnerability in Microsoft.AspNetCore.App.Runtime.linux-arm (CVE-2026-56170). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.26` or later.
|
| CVE-2026-56164 KEV |
|
[KEV] Vulnerability in Microsoft sharepoint-server (CVE-2026-56164)
vulnerability in Microsoft sharepoint-server (CVE-2026-56164). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2026-55899 |
|
Vulnerability in microsoft (CVE-2026-55899)
vulnerability in microsoft (CVE-2026-55899). Successful exploitation can lead to full system takeover.
|
| CVE-2026-55948 |
|
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
|
| CVE-2026-55012 |
|
Vulnerability in microsoft (CVE-2026-55012)
vulnerability in microsoft (CVE-2026-55012). Successful exploitation can lead to full system takeover.
|
| CVE-2026-55011 |
|
Vulnerability in microsoft (CVE-2026-55011)
vulnerability in microsoft (CVE-2026-55011). Successful exploitation can lead to full system takeover.
|
| CVE-2026-55009 |
|
Unsafe Deserialization in deserialization (CVE-2026-55009)
vulnerability in deserialization (CVE-2026-55009). Successful exploitation can lead to full system takeover.
|
| CVE-2026-55008 |
|
Cross-Site Scripting (XSS) in microsoft (CVE-2026-55008)
cross-site scripting in microsoft (CVE-2026-55008). Successful exploitation can lead to full system takeover.
|
| CVE-2026-55006 |
|
Vulnerability in microsoft (CVE-2026-55006)
vulnerability in microsoft (CVE-2026-55006). Successful exploitation can lead to full system takeover.
|
| CVE-2026-55005 |
|
Vulnerability in microsoft (CVE-2026-55005)
vulnerability in microsoft (CVE-2026-55005). Successful exploitation can lead to full system takeover.
|
| CVE-2026-54988 |
|
Out-of-Bounds Read in microsoft (CVE-2026-54988)
vulnerability in microsoft (CVE-2026-54988). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-54433 |
|
Cross-Site Scripting (XSS) in roundcube (CVE-2026-54433)
cross-site scripting in roundcube (CVE-2026-54433). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-54108 |
|
Vulnerability in microsoft (CVE-2026-54108)
vulnerability in microsoft (CVE-2026-54108). Confidential information can be exposed externally.
|
| CVE-2026-50675 |
|
Vulnerability in microsoft (CVE-2026-50675)
vulnerability in microsoft (CVE-2026-50675). Successful exploitation can lead to full system takeover.
|
| CVE-2026-50678 |
|
Vulnerability in microsoft (CVE-2026-50678)
vulnerability in microsoft (CVE-2026-50678). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-50653 |
|
Vulnerability in microsoft (CVE-2026-50653)
vulnerability in microsoft (CVE-2026-50653). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-50652 |
|
Unsafe Deserialization in deserialization (CVE-2026-50652)
vulnerability in deserialization (CVE-2026-50652). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-50522 KEV |
|
[KEV] Unsafe Deserialization in Microsoft deserialization (CVE-2026-50522)
vulnerability in Microsoft deserialization (CVE-2026-50522). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2026-15703 |
|
Vulnerability in sqli (CVE-2026-15703)
vulnerability in sqli (CVE-2026-15703). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-15700 |
|
Path Traversal in path-traversal (CVE-2026-15700)
path traversal in path-traversal (CVE-2026-15700). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-62644 |
|
Vulnerability in roundcube (CVE-2026-62644)
vulnerability in roundcube (CVE-2026-62644). Confidential information can be exposed externally.
|
| CVE-2026-62643 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-62643)
SSRF in ssrf (CVE-2026-62643). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-62642 |
|
Vulnerability in dos (CVE-2026-62642)
vulnerability in dos (CVE-2026-62642). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-62641 |
|
Vulnerability in dos (CVE-2026-62641)
vulnerability in dos (CVE-2026-62641). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59841 |
|
Vulnerability in fortinet (CVE-2026-59841)
vulnerability in fortinet (CVE-2026-59841). Successful exploitation can lead to full system takeover.
|
| CVE-2026-59839 |
|
Path Traversal in path-traversal (CVE-2026-59839)
path traversal in path-traversal (CVE-2026-59839). Data can be tampered with by attackers.
|
| CVE-2026-59840 |
|
Vulnerability in fortinet (CVE-2026-59840)
vulnerability in fortinet (CVE-2026-59840). Risk of unauthorized operations or information disclosure.
|