Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-50676 |
|
Vulnerability in microsoft (CVE-2026-50676)
vulnerability in microsoft (CVE-2026-50676). Successful exploitation can lead to full system takeover.
|
| CVE-2026-50665 |
|
Out-of-Bounds Read in microsoft (CVE-2026-50665)
vulnerability in microsoft (CVE-2026-50665). Successful exploitation can lead to full system takeover.
|
| CVE-2026-50666 |
|
Use-After-Free in microsoft (CVE-2026-50666)
vulnerability in microsoft (CVE-2026-50666). Successful exploitation can lead to full system takeover.
|
| CVE-2026-50667 |
|
Vulnerability in microsoft (CVE-2026-50667)
vulnerability in microsoft (CVE-2026-50667). Successful exploitation can lead to full system takeover.
|
| CVE-2026-50668 |
|
Vulnerability in microsoft (CVE-2026-50668)
vulnerability in microsoft (CVE-2026-50668). Successful exploitation can lead to full system takeover.
|
| CVE-2026-50669 |
|
Vulnerability in microsoft (CVE-2026-50669)
vulnerability in microsoft (CVE-2026-50669). Successful exploitation can lead to full system takeover.
|
| CVE-2026-50658 |
|
Vulnerability in microsoft (CVE-2026-50658)
vulnerability in microsoft (CVE-2026-50658). Successful exploitation can lead to full system takeover.
|
| CVE-2026-50661 |
|
Vulnerability in microsoft (CVE-2026-50661)
vulnerability in microsoft (CVE-2026-50661). Confidential information can be exposed externally.
|
| CVE-2026-50518 |
|
Vulnerability in microsoft (CVE-2026-50518)
vulnerability in microsoft (CVE-2026-50518). Successful exploitation can lead to full system takeover.
|
| CVE-2026-50502 |
|
Vulnerability in microsoft (CVE-2026-50502)
vulnerability in microsoft (CVE-2026-50502). Successful exploitation can lead to full system takeover.
|
| CVE-2026-50491 |
|
Out-of-Bounds Read in microsoft (CVE-2026-50491)
vulnerability in microsoft (CVE-2026-50491). Successful exploitation can lead to full system takeover.
|
| CVE-2026-50494 |
|
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
|
| CVE-2026-50479 |
|
Vulnerability in microsoft (CVE-2026-50479)
vulnerability in microsoft (CVE-2026-50479). Successful exploitation can lead to full system takeover.
|
| CVE-2026-50470 |
|
Out-of-Bounds Read in microsoft (CVE-2026-50470)
vulnerability in microsoft (CVE-2026-50470). Confidential information can be exposed externally.
|
| CVE-2026-50473 |
|
Information Disclosure in microsoft (CVE-2026-50473)
vulnerability in microsoft (CVE-2026-50473). Confidential information can be exposed externally.
|
| CVE-2026-50463 |
|
Out-of-Bounds Read in microsoft (CVE-2026-50463)
vulnerability in microsoft (CVE-2026-50463). Confidential information can be exposed externally.
|
| CVE-2026-50465 |
|
Vulnerability in microsoft (CVE-2026-50465)
vulnerability in microsoft (CVE-2026-50465). Data can be tampered with by attackers.
|
| CVE-2026-59888 |
|
Vulnerability in com.fasterxml.jackson.core:jackson-databind (CVE-2026-59888)
vulnerability in com.fasterxml.jackson.core:jackson-databind (CVE-2026-59888). Risk of unauthorized operations or information disclosure. Exploitable via ``PropertyNamingStrategy``. Mitigation: upgrade to `2.21.4` or later.
|
| CVE-2026-58640 |
|
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
|
| CVE-2026-58644 KEV |
|
[KEV] Unsafe Deserialization in Microsoft deserialization (CVE-2026-58644)
vulnerability in Microsoft deserialization (CVE-2026-58644). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2026-58647 |
|
Cross-Site Scripting (XSS) in microsoft (CVE-2026-58647)
cross-site scripting in microsoft (CVE-2026-58647). Successful exploitation can lead to full system takeover.
|
| CVE-2026-58609 |
|
Out-of-Bounds Read in microsoft (CVE-2026-58609)
vulnerability in microsoft (CVE-2026-58609). Successful exploitation can lead to full system takeover.
|
| CVE-2026-58610 |
|
Vulnerability in microsoft (CVE-2026-58610)
vulnerability in microsoft (CVE-2026-58610). Successful exploitation can lead to full system takeover.
|
| CVE-2026-58614 |
|
Out-of-Bounds Read in microsoft (CVE-2026-58614)
vulnerability in microsoft (CVE-2026-58614). Confidential information can be exposed externally.
|
| CVE-2026-58618 |
|
Vulnerability in microsoft (CVE-2026-58618)
vulnerability in microsoft (CVE-2026-58618). Successful exploitation can lead to full system takeover.
|
| CVE-2026-58631 |
|
Vulnerability in microsoft (CVE-2026-58631)
vulnerability in microsoft (CVE-2026-58631). Successful exploitation can lead to full system takeover.
|
| CVE-2026-58635 |
|
Command Injection in microsoft (CVE-2026-58635)
command injection in microsoft (CVE-2026-58635). Successful exploitation can lead to full system takeover.
|
| CVE-2026-58636 |
|
Vulnerability in microsoft (CVE-2026-58636)
vulnerability in microsoft (CVE-2026-58636). Successful exploitation can lead to full system takeover.
|
| CVE-2026-58279 |
|
Vulnerability in microsoft (CVE-2026-58279)
vulnerability in microsoft (CVE-2026-58279). Data can be tampered with by attackers.
|
| CVE-2026-58526 |
|
Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.
Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.
|
| CVE-2026-58595 |
|
Vulnerability in microsoft (CVE-2026-58595)
vulnerability in microsoft (CVE-2026-58595). Data can be tampered with by attackers.
|
| CVE-2026-58601 |
|
Vulnerability in microsoft (CVE-2026-58601)
vulnerability in microsoft (CVE-2026-58601). Successful exploitation can lead to full system takeover.
|
| CVE-2026-58602 |
|
Use-After-Free in microsoft (CVE-2026-58602)
vulnerability in microsoft (CVE-2026-58602). Successful exploitation can lead to full system takeover.
|
| CVE-2026-58608 |
|
Vulnerability in microsoft (CVE-2026-58608)
vulnerability in microsoft (CVE-2026-58608). Successful exploitation can lead to full system takeover.
|
| CVE-2026-57976 |
|
Vulnerability in microsoft (CVE-2026-57976)
vulnerability in microsoft (CVE-2026-57976). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-57979 |
|
Out-of-Bounds Read in microsoft (CVE-2026-57979)
vulnerability in microsoft (CVE-2026-57979). Confidential information can be exposed externally.
|
| CVE-2026-56170 |
|
Vulnerability in Microsoft.AspNetCore.App.Runtime.linux-arm (CVE-2026-56170)
vulnerability in Microsoft.AspNetCore.App.Runtime.linux-arm (CVE-2026-56170). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.26` or later.
|
| CVE-2026-56169 |
|
Authentication Bypass in microsoft (CVE-2026-56169)
authentication bypass in microsoft (CVE-2026-56169). Confidential information can be exposed externally.
|
| CVE-2026-56185 |
|
Code Injection in microsoft (CVE-2026-56185)
code injection in microsoft (CVE-2026-56185). Confidential information can be exposed externally.
|
| CVE-2026-56193 |
|
Out-of-Bounds Read in microsoft (CVE-2026-56193)
vulnerability in microsoft (CVE-2026-56193). Confidential information can be exposed externally.
|
| CVE-2026-57097 |
|
Vulnerability in microsoft (CVE-2026-57097)
vulnerability in microsoft (CVE-2026-57097). Successful exploitation can lead to full system takeover.
|
| CVE-2026-57107 |
|
Authentication Bypass in microsoft (CVE-2026-57107)
authentication bypass in microsoft (CVE-2026-57107). Successful exploitation can lead to full system takeover.
|
| CVE-2026-57969 |
|
Vulnerability in microsoft (CVE-2026-57969)
vulnerability in microsoft (CVE-2026-57969). Successful exploitation can lead to full system takeover.
|
| CVE-2026-55012 |
|
Vulnerability in microsoft (CVE-2026-55012)
vulnerability in microsoft (CVE-2026-55012). Successful exploitation can lead to full system takeover.
|
| CVE-2026-55014 |
|
Vulnerability in microsoft (CVE-2026-55014)
vulnerability in microsoft (CVE-2026-55014). Successful exploitation can lead to full system takeover.
|
| CVE-2026-55144 |
|
Vulnerability in microsoft (CVE-2026-55144)
vulnerability in microsoft (CVE-2026-55144). Confidential information can be exposed externally.
|
| CVE-2026-55899 |
|
Vulnerability in microsoft (CVE-2026-55899)
vulnerability in microsoft (CVE-2026-55899). Successful exploitation can lead to full system takeover.
|
| CVE-2026-55948 |
|
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
|
| CVE-2026-56155 KEV |
|
[KEV] Vulnerability in Microsoft windows-10-1607 (CVE-2026-56155)
vulnerability in Microsoft windows-10-1607 (CVE-2026-56155). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2026-56164 KEV |
|
[KEV] Vulnerability in Microsoft sharepoint-server (CVE-2026-56164)
vulnerability in Microsoft sharepoint-server (CVE-2026-56164). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|