Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2026-49790 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
CVE-2026-49789 Vulnerability in microsoft (CVE-2026-49789)
vulnerability in microsoft (CVE-2026-49789). Successful exploitation can lead to full system takeover.
CVE-2026-49792 Vulnerability in microsoft (CVE-2026-49792)
vulnerability in microsoft (CVE-2026-49792). Successful exploitation can lead to full system takeover.
CVE-2026-49783 Vulnerability in microsoft (CVE-2026-49783)
vulnerability in microsoft (CVE-2026-49783). Successful exploitation can lead to full system takeover.
CVE-2026-49784 Vulnerability in microsoft (CVE-2026-49784)
vulnerability in microsoft (CVE-2026-49784). Successful exploitation can lead to full system takeover.
CVE-2026-49184 Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
CVE-2026-49181 Vulnerability in microsoft (CVE-2026-49181)
vulnerability in microsoft (CVE-2026-49181). Confidential information can be exposed externally.
CVE-2026-49183 Vulnerability in microsoft (CVE-2026-49183)
vulnerability in microsoft (CVE-2026-49183). Successful exploitation can lead to full system takeover.
CVE-2026-49173 Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-49175 Vulnerability in microsoft (CVE-2026-49175)
vulnerability in microsoft (CVE-2026-49175). Successful exploitation can lead to full system takeover.
CVE-2026-49171 Use-After-Free in microsoft (CVE-2026-49171)
vulnerability in microsoft (CVE-2026-49171). Successful exploitation can lead to full system takeover.
CVE-2026-49178 Vulnerability in microsoft (CVE-2026-49178)
vulnerability in microsoft (CVE-2026-49178). Successful exploitation can lead to full system takeover.
CVE-2026-49176 Vulnerability in microsoft (CVE-2026-49176)
vulnerability in microsoft (CVE-2026-49176). Successful exploitation can lead to full system takeover.
CVE-2026-49166 Use-After-Free in microsoft (CVE-2026-49166)
vulnerability in microsoft (CVE-2026-49166). Successful exploitation can lead to full system takeover.
CVE-2026-49169 Use after free in DNS Server allows an authorized attacker to execute code over a network.
Use after free in DNS Server allows an authorized attacker to execute code over a network.
CVE-2026-49170 Vulnerability in microsoft (CVE-2026-49170)
vulnerability in microsoft (CVE-2026-49170). Successful exploitation can lead to full system takeover.
CVE-2026-49165 Vulnerability in microsoft (CVE-2026-49165)
vulnerability in microsoft (CVE-2026-49165). Confidential information can be exposed externally.
CVE-2026-49164 Vulnerability in microsoft (CVE-2026-49164)
vulnerability in microsoft (CVE-2026-49164). Successful exploitation can lead to full system takeover.
CVE-2026-48572 Vulnerability in microsoft (CVE-2026-48572)
vulnerability in microsoft (CVE-2026-48572). Successful exploitation can lead to full system takeover.
CVE-2026-48581 Vulnerability in microsoft (CVE-2026-48581)
vulnerability in microsoft (CVE-2026-48581). Successful exploitation can lead to full system takeover.
CVE-2026-48571 Use-After-Free in microsoft (CVE-2026-48571)
vulnerability in microsoft (CVE-2026-48571). Successful exploitation can lead to full system takeover.
CVE-2026-49162 Use-After-Free in microsoft (CVE-2026-49162)
vulnerability in microsoft (CVE-2026-49162). Successful exploitation can lead to full system takeover.
CVE-2026-47632 Vulnerability in microsoft (CVE-2026-47632)
vulnerability in microsoft (CVE-2026-47632). Successful exploitation can lead to full system takeover.
CVE-2026-47296 SQL Injection in sqli (CVE-2026-47296)
SQL injection in sqli (CVE-2026-47296). Successful exploitation can lead to full system takeover.
CVE-2026-45646 Vulnerability in csharp (CVE-2026-45646)
vulnerability in csharp (CVE-2026-45646). Risk of unauthorized operations or information disclosure.
CVE-2026-48564 Vulnerability in microsoft (CVE-2026-48564)
vulnerability in microsoft (CVE-2026-48564). Successful exploitation can lead to full system takeover.
CVE-2026-42982 Vulnerability in microsoft (CVE-2026-42982)
vulnerability in microsoft (CVE-2026-42982). Successful exploitation can lead to full system takeover.
CVE-2026-42975 Vulnerability in microsoft (CVE-2026-42975)
vulnerability in microsoft (CVE-2026-42975). Successful exploitation can lead to full system takeover.
CVE-2026-44800 Vulnerability in microsoft (CVE-2026-44800)
vulnerability in microsoft (CVE-2026-44800). Successful exploitation can lead to full system takeover.
CVE-2026-40378 Vulnerability in microsoft (CVE-2026-40378)
vulnerability in microsoft (CVE-2026-40378). Risk of unauthorized operations or information disclosure.
CVE-2026-42900 Vulnerability in microsoft (CVE-2026-42900)
vulnerability in microsoft (CVE-2026-42900). Successful exploitation can lead to full system takeover.
CVE-2026-40400 Vulnerability in path-traversal (CVE-2026-40400)
vulnerability in path-traversal (CVE-2026-40400). Successful exploitation can lead to full system takeover.
CVE-2026-15703 Vulnerability in sqli (CVE-2026-15703)
vulnerability in sqli (CVE-2026-15703). Risk of unauthorized operations or information disclosure.
CVE-2026-15429 Vulnerability in privilege-escalation (CVE-2026-15429)
vulnerability in privilege-escalation (CVE-2026-15429). Successful exploitation can lead to full system takeover.
CVE-2026-15428 OS Command Injection in tp-link (CVE-2026-15428)
OS command injection in tp-link (CVE-2026-15428). Successful exploitation can lead to full system takeover.
CVE-2026-15427 OS Command Injection in tp-link (CVE-2026-15427)
OS command injection in tp-link (CVE-2026-15427). Successful exploitation can lead to full system takeover.
CVE-2026-9128 Vulnerability in rockwellautomation (CVE-2026-9128)
vulnerability in rockwellautomation (CVE-2026-9128). Successful exploitation can lead to full system takeover.
CVE-2026-9108 Path Traversal in path-traversal (CVE-2026-9108)
path traversal in path-traversal (CVE-2026-9108). Successful exploitation can lead to full system takeover.
CVE-2026-9127 Authorization Flaw in rockwellautomation (CVE-2026-9127)
vulnerability in rockwellautomation (CVE-2026-9127). Successful exploitation can lead to full system takeover.
CVE-2026-62643 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-62643)
SSRF in ssrf (CVE-2026-62643). Risk of unauthorized operations or information disclosure.
CVE-2026-60081 Vulnerability in CVE-2026-60081 (CVE-2026-60081)
vulnerability in CVE-2026-60081 (CVE-2026-60081). Risk of unauthorized operations or information disclosure.
CVE-2026-59841 Vulnerability in fortinet (CVE-2026-59841)
vulnerability in fortinet (CVE-2026-59841). Successful exploitation can lead to full system takeover.
CVE-2026-59836 Vulnerability in fortinet (CVE-2026-59836)
vulnerability in fortinet (CVE-2026-59836). Successful exploitation can lead to full system takeover.
CVE-2026-59205 Out-of-Bounds Write in pillow (CVE-2026-59205)
out-of-bounds write in pillow (CVE-2026-59205). Risk of unauthorized operations or information disclosure. Exploitable via ``imOut``. Mitigation: upgrade to `12.3.0` or later.
CVE-2026-59204 Vulnerability in pillow (CVE-2026-59204)
vulnerability in pillow (CVE-2026-59204). Risk of unauthorized operations or information disclosure. Exploitable via ``total_component_width``. Mitigation: upgrade to `12.3.0` or later.
CVE-2026-59835 Vulnerability in fortinet (CVE-2026-59835)
vulnerability in fortinet (CVE-2026-59835). Confidential information can be exposed externally.
CVE-2026-59199 Vulnerability in Pillow (CVE-2026-59199)
vulnerability in Pillow (CVE-2026-59199). Risk of unauthorized operations or information disclosure. Exploitable via ``RGBA``. Mitigation: upgrade to `12.3.0` or later.
CVE-2026-55651 Information Disclosure in alextselegidis/easyappointments (CVE-2026-55651)
vulnerability in alextselegidis/easyappointments (CVE-2026-55651). Data can be tampered with by attackers.
CVE-2026-15392 Path Traversal in CVE-2026-15392 (CVE-2026-15392)
path traversal in CVE-2026-15392 (CVE-2026-15392). Confidential information can be exposed externally.
CVE-2026-12707 Vulnerability in CVE-2026-12707 (CVE-2026-12707)
vulnerability in CVE-2026-12707 (CVE-2026-12707). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →