Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-50479 |
|
Vulnerability in microsoft (CVE-2026-50479)
vulnerability in microsoft (CVE-2026-50479). Successful exploitation can lead to full system takeover.
|
| CVE-2026-50470 |
|
Out-of-Bounds Read in microsoft (CVE-2026-50470)
vulnerability in microsoft (CVE-2026-50470). Confidential information can be exposed externally.
|
| CVE-2026-50463 |
|
Out-of-Bounds Read in microsoft (CVE-2026-50463)
vulnerability in microsoft (CVE-2026-50463). Confidential information can be exposed externally.
|
| CVE-2026-50465 |
|
Vulnerability in microsoft (CVE-2026-50465)
vulnerability in microsoft (CVE-2026-50465). Data can be tampered with by attackers.
|
| CVE-2026-59886 |
|
Vulnerability in pyasn1 (CVE-2026-59886)
vulnerability in pyasn1 (CVE-2026-59886). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.6.4` or later.
|
| CVE-2026-58647 |
|
Cross-Site Scripting (XSS) in microsoft (CVE-2026-58647)
cross-site scripting in microsoft (CVE-2026-58647). Successful exploitation can lead to full system takeover.
|
| CVE-2026-59885 |
|
Vulnerability in pyasn1 (CVE-2026-59885)
vulnerability in pyasn1 (CVE-2026-59885). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.6.4` or later.
|
| CVE-2026-59884 |
|
Vulnerability in pyssn1 (CVE-2026-59884)
vulnerability in pyssn1 (CVE-2026-59884). Risk of unauthorized operations or information disclosure. Exploitable via ``ValueError``. Mitigation: upgrade to `0.6.4` or later.
|
| CVE-2026-59197 |
|
Vulnerability in Pillow (CVE-2026-59197)
vulnerability in Pillow (CVE-2026-59197). Risk of unauthorized operations or information disclosure. Exploitable via ``INT_MAX``. Mitigation: upgrade to `12.3.0` or later.
|
| CVE-2026-59200 |
|
Vulnerability in Pillow (CVE-2026-59200)
vulnerability in Pillow (CVE-2026-59200). Risk of unauthorized operations or information disclosure. Exploitable via ``PdfParser.py``. Mitigation: upgrade to `12.3.0` or later.
|
| CVE-2026-58640 |
|
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
|
| CVE-2026-58631 |
|
Vulnerability in microsoft (CVE-2026-58631)
vulnerability in microsoft (CVE-2026-58631). Successful exploitation can lead to full system takeover.
|
| CVE-2026-58610 |
|
Vulnerability in microsoft (CVE-2026-58610)
vulnerability in microsoft (CVE-2026-58610). Successful exploitation can lead to full system takeover.
|
| CVE-2026-58618 |
|
Vulnerability in microsoft (CVE-2026-58618)
vulnerability in microsoft (CVE-2026-58618). Successful exploitation can lead to full system takeover.
|
| CVE-2026-58635 |
|
Command Injection in microsoft (CVE-2026-58635)
command injection in microsoft (CVE-2026-58635). Successful exploitation can lead to full system takeover.
|
| CVE-2026-58636 |
|
Vulnerability in microsoft (CVE-2026-58636)
vulnerability in microsoft (CVE-2026-58636). Successful exploitation can lead to full system takeover.
|
| CVE-2026-58609 |
|
Out-of-Bounds Read in microsoft (CVE-2026-58609)
vulnerability in microsoft (CVE-2026-58609). Successful exploitation can lead to full system takeover.
|
| CVE-2026-58595 |
|
Vulnerability in microsoft (CVE-2026-58595)
vulnerability in microsoft (CVE-2026-58595). Data can be tampered with by attackers.
|
| CVE-2026-58601 |
|
Vulnerability in microsoft (CVE-2026-58601)
vulnerability in microsoft (CVE-2026-58601). Successful exploitation can lead to full system takeover.
|
| CVE-2026-58526 |
|
Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.
Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.
|
| CVE-2026-58602 |
|
Use-After-Free in microsoft (CVE-2026-58602)
vulnerability in microsoft (CVE-2026-58602). Successful exploitation can lead to full system takeover.
|
| CVE-2026-58608 |
|
Vulnerability in microsoft (CVE-2026-58608)
vulnerability in microsoft (CVE-2026-58608). Successful exploitation can lead to full system takeover.
|
| CVE-2026-57107 |
|
Authentication Bypass in microsoft (CVE-2026-57107)
authentication bypass in microsoft (CVE-2026-57107). Successful exploitation can lead to full system takeover.
|
| CVE-2026-56170 |
|
Vulnerability in Microsoft.AspNetCore.App.Runtime.linux-arm (CVE-2026-56170)
vulnerability in Microsoft.AspNetCore.App.Runtime.linux-arm (CVE-2026-56170). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.0.26` or later.
|
| CVE-2026-56193 |
|
Out-of-Bounds Read in microsoft (CVE-2026-56193)
vulnerability in microsoft (CVE-2026-56193). Confidential information can be exposed externally.
|
| CVE-2026-56169 |
|
Authentication Bypass in microsoft (CVE-2026-56169)
authentication bypass in microsoft (CVE-2026-56169). Confidential information can be exposed externally.
|
| CVE-2026-57969 |
|
Vulnerability in microsoft (CVE-2026-57969)
vulnerability in microsoft (CVE-2026-57969). Successful exploitation can lead to full system takeover.
|
| CVE-2026-55948 |
|
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
|
| CVE-2026-55899 |
|
Vulnerability in microsoft (CVE-2026-55899)
vulnerability in microsoft (CVE-2026-55899). Successful exploitation can lead to full system takeover.
|
| CVE-2026-56155 KEV |
|
[KEV] Vulnerability in Microsoft windows-10-1607 (CVE-2026-56155)
vulnerability in Microsoft windows-10-1607 (CVE-2026-56155). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2026-55144 |
|
Vulnerability in microsoft (CVE-2026-55144)
vulnerability in microsoft (CVE-2026-55144). Confidential information can be exposed externally.
|
| CVE-2026-55014 |
|
Vulnerability in microsoft (CVE-2026-55014)
vulnerability in microsoft (CVE-2026-55014). Successful exploitation can lead to full system takeover.
|
| CVE-2026-55012 |
|
Vulnerability in microsoft (CVE-2026-55012)
vulnerability in microsoft (CVE-2026-55012). Successful exploitation can lead to full system takeover.
|
| CVE-2026-55004 |
|
Vulnerability in microsoft (CVE-2026-55004)
vulnerability in microsoft (CVE-2026-55004). Successful exploitation can lead to full system takeover.
|
| CVE-2026-55002 |
|
Vulnerability in microsoft (CVE-2026-55002)
vulnerability in microsoft (CVE-2026-55002). Successful exploitation can lead to full system takeover.
|
| CVE-2026-55011 |
|
Vulnerability in microsoft (CVE-2026-55011)
vulnerability in microsoft (CVE-2026-55011). Successful exploitation can lead to full system takeover.
|
| CVE-2026-55009 |
|
Unsafe Deserialization in deserialization (CVE-2026-55009)
vulnerability in deserialization (CVE-2026-55009). Successful exploitation can lead to full system takeover.
|
| CVE-2026-55006 |
|
Vulnerability in microsoft (CVE-2026-55006)
vulnerability in microsoft (CVE-2026-55006). Successful exploitation can lead to full system takeover.
|
| CVE-2026-55005 |
|
Vulnerability in microsoft (CVE-2026-55005)
vulnerability in microsoft (CVE-2026-55005). Successful exploitation can lead to full system takeover.
|
| CVE-2026-55001 |
|
Vulnerability in microsoft (CVE-2026-55001)
vulnerability in microsoft (CVE-2026-55001). Successful exploitation can lead to full system takeover.
|
| CVE-2026-54996 |
|
Out-of-Bounds Read in microsoft (CVE-2026-54996)
vulnerability in microsoft (CVE-2026-54996). Successful exploitation can lead to full system takeover.
|
| CVE-2026-54993 |
|
Vulnerability in microsoft (CVE-2026-54993)
vulnerability in microsoft (CVE-2026-54993). Successful exploitation can lead to full system takeover.
|
| CVE-2026-54995 |
|
Use-After-Free in microsoft (CVE-2026-54995)
vulnerability in microsoft (CVE-2026-54995). Successful exploitation can lead to full system takeover.
|
| CVE-2026-54999 |
|
Vulnerability in microsoft (CVE-2026-54999)
vulnerability in microsoft (CVE-2026-54999). Successful exploitation can lead to full system takeover.
|
| CVE-2026-54987 |
|
Vulnerability in microsoft (CVE-2026-54987)
vulnerability in microsoft (CVE-2026-54987). Successful exploitation can lead to full system takeover.
|
| CVE-2026-54989 |
|
Use-After-Free in microsoft (CVE-2026-54989)
vulnerability in microsoft (CVE-2026-54989). Successful exploitation can lead to full system takeover.
|
| CVE-2026-54986 |
|
Vulnerability in microsoft (CVE-2026-54986)
vulnerability in microsoft (CVE-2026-54986). Successful exploitation can lead to full system takeover.
|
| CVE-2026-54992 |
|
Vulnerability in microsoft (CVE-2026-54992)
vulnerability in microsoft (CVE-2026-54992). Successful exploitation can lead to full system takeover.
|
| CVE-2026-54991 |
|
Out-of-Bounds Read in microsoft (CVE-2026-54991)
vulnerability in microsoft (CVE-2026-54991). Successful exploitation can lead to full system takeover.
|
| CVE-2026-54129 |
|
Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
|