2026 CVEs (page 232)
Page 232 of 469 — CVEs published in 2026, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-42972 | Medium | 5.5 | 2026-06-09 | Exposure of sensitive information to an unauthorized actor in Windows Hyper-V allows an authorized attacker to disclose information locally. |
CVE-2026-42971 | Medium | 5.5 | 2026-06-09 | Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally. |
CVE-2026-42970 | Medium | 5.5 | 2026-06-09 | Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally. |
CVE-2026-42969 | Medium | 5.5 | 2026-06-09 | Use of uninitialized resource in Windows Push Notifications allows an authorized attacker to disclose information locally. |
CVE-2026-42968 | Medium | 5.5 | 2026-06-09 | Out-of-bounds read in Windows Telephony Service allows an authorized attacker to disclose information locally. |
CVE-2026-42916 | High | 7.8 | 2026-06-09 | Integer overflow or wraparound in Windows NT OS Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-42915 | Medium | 5.5 | 2026-06-09 | Incorrect calculation of buffer size in Windows VMSwitch allows an authorized attacker to deny service locally. |
CVE-2026-42914 | Medium | 5.3 | 2026-06-09 | Out-of-bounds read in Windows Kerberos allows an authorized attacker to deny service over a network. |
CVE-2026-42913 | High | 7.5 | 2026-06-09 | Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized attacker to execute… |
CVE-2026-42912 | High | 7.0 | 2026-06-09 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to eleva… |
CVE-2026-42911 | High | 7.0 | 2026-06-09 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
CVE-2026-42910 | High | 7.8 | 2026-06-09 | Out-of-bounds write in Windows Hotpatch Monitoring Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-42909 | High | 7.5 | 2026-06-09 | Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized attacker to execute… |
CVE-2026-42908 | High | 7.5 | 2026-06-09 | Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network. |
CVE-2026-42907 | Medium | 6.5 | 2026-06-09 | Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to disclose information over a network. |
CVE-2026-42906 | Medium | 5.5 | 2026-06-09 | Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to disclose information locally. |
CVE-2026-42905 | High | 7.8 | 2026-06-09 | Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
CVE-2026-42904 | Critical | 9.6 | 2026-06-09 | Heap-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to elevate privileges over an adjacent network. |
CVE-2026-42903 | Medium | 6.5 | 2026-06-09 | Null pointer dereference in Windows Kerberos allows an authorized attacker to deny service over a network. |
CVE-2026-42902 | High | 7.8 | 2026-06-09 | Improper authorization in Microsoft PowerToys allows an authorized attacker to elevate privileges locally. |
CVE-2026-42837 | High | 7.8 | 2026-06-09 | Out-of-bounds read in Windows Projected File System Filter Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-42836 | High | 7.0 | 2026-06-09 | Concurrent execution using shared resource with improper synchronization ('race condition') in Function Discovery Service (fdwsd.dll) allows an authorized atta… |
CVE-2026-42835 | High | 8.1 | 2026-06-09 | Improper neutralization of special elements in output used by a downstream component ('injection') in Microsoft Teams for Android allows an authorized attacker… |
CVE-2026-42829 | High | 7.8 | 2026-06-09 | Improper access control in Windows Administrator Protection allows an authorized attacker to bypass a security feature locally. |
CVE-2026-42828 | High | 7.8 | 2026-06-09 | Buffer over-read in Windows Projected File System Filter Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-42771 | Medium | 6.2 | 2026-06-09 | Issue summary: When the X509_VERIFY_PARAM_set1_email is called by an application to validate a crafted e-mail address, such as during S/MIME message validation… |
CVE-2026-42770 | Low | 3.7 | 2026-06-09 | Issue summary: When EVP_PKEY_derive_set_peer() is called with a DHX (X9.42) peer key, the peer key is not properly checked for the subgroup membership. Impact… |
CVE-2026-42769 | Medium | 5.3 | 2026-06-09 | Issue Summary: An error in the callback used to verify the certificate provided in a Root CA key update Certificate Management Protocol (CMP) message response… |
CVE-2026-42768 | Low | 3.7 | 2026-06-09 | Issue summary: The CMS_decrypt and PKCS7_decrypt functions are vulnerable to Bleichenbacher-style attack when an attacker is able to provide the CMS or S/MIME… |
CVE-2026-42767 | Medium | 5.9 | 2026-06-09 | Issue summary: An attacker-controlled CMP (Certificate Management Protocol) server could trigger a NULL pointer dereference in a CMP client application. Impac… |
CVE-2026-42766 | Medium | 5.9 | 2026-06-09 | Issue summary: A specially crafted password-encrypted CMS message can trigger a NULL pointer dereference during CMS decryption. Impact summary: This NULL poin… |
CVE-2026-42765 | High | 7.5 | 2026-06-09 | Issue summary: When a partial-chain certificate verification is enabled together with OCSP response checking for the whole chain, a NULL dereference will happe… |
CVE-2026-42764 | High | 7.5 | 2026-06-09 | Issue summary: Receiving a QUIC initial packet with an invalid token may trigger a NULL pointer dereference in the OpenSSL QUIC server with address validation… |
CVE-2026-42599 | Medium | 6.1 | 2026-06-09 | Svelte is a performance oriented web framework. Prior to version 5.55.7, when using spread syntax to render attributes from untrusted data, event handler prope… |
CVE-2026-42573 | Medium | 6.1 | 2026-06-09 | Svelte is a performance oriented web framework. Prior to version 5.55.7, Svelte was vulnerable to DOM clobbering of its internal framework state on elements, p… |
CVE-2026-42570 | High | 7.5 | 2026-06-09 | Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn't sufficient for the job. From version 5.6.3 to before versi… |
CVE-2026-42567 | High | 7.5 | 2026-06-09 | Svelte is a performance oriented web framework. From version 5.51.5 to before version 5.55.7, an internal regex in the Svelte runtime can take exponential time… |
CVE-2026-41108 | High | 7.0 | 2026-06-09 | Heap-based buffer overflow in Microsoft Windows DNS allows an authorized attacker to elevate privileges locally. |
CVE-2026-41098 | High | 8.4 | 2026-06-09 | Improper neutralization of input during web page generation ('cross-site scripting') in Azure Stack Edge allows an authorized attacker to perform spoofing over… |
CVE-2026-41092 | High | 7.8 | 2026-06-09 | Improper access control in Microsoft Kinect allows an authorized attacker to elevate privileges locally. |
CVE-2026-40409 | High | 7.8 | 2026-06-09 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability |
CVE-2026-40404 | High | 7.8 | 2026-06-09 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability |
CVE-2026-40376 | High | 7.5 | 2026-06-09 | Improper input validation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network. |
CVE-2026-40371 | High | 8.8 | 2026-06-09 | Improper handling of insufficient permissions or privileges in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to elevate privileges over a… |
CVE-2026-3088 | Medium | 6.5 | 2026-06-09 | Unauthenticated users on the local network can cause the router to become unavailable by sending specially crafted requests. |
CVE-2026-38615 | Critical | 9.8 | 2026-06-09 | DedeCMS V5.7.118 is vulnerable to Command Execution in file_manage_control.php. |
CVE-2026-35188 | Medium | 5.0 | 2026-06-09 | Issue summary: A malicious server can exploit TLS OCSP stapling by delivering a crafted response through the status_request extension, triggering a double-free… |
CVE-2026-34692 | Medium | 5.4 | 2026-06-09 | Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could… |
CVE-2026-34335 | High | 7.0 | 2026-06-09 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
CVE-2026-34183 | High | 7.5 | 2026-06-09 | Issue summary: Remote peer may exhaust heap memory of the QUIC server or client by flooding it with packets containing PATH_CHALLENGE frames. Impact summary… |
CVE-2026-34182 | Critical | 9.1 | 2026-06-09 | Issue Summary: Cryptographic Message Services (CMS) processing fails to perform sufficient input validation on the cipher and tag length fields of AuthEnvelope… |
CVE-2026-34181 | High | 7.4 | 2026-06-09 | Issue Summary: The PKCS#12 file processing fails to perform sufficient input validation for files that use Password-Based Message Authentication Code 1 (PBMAC1… |
CVE-2026-34180 | High | 7.5 | 2026-06-09 | Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive element whose content exceeds 2 gigabytes in length may cause a heap buffer over-… |
CVE-2026-33828 | High | 7.8 | 2026-06-09 | Trust boundary violation in Windows Attestation allows an authorized attacker to elevate privileges locally. |
CVE-2026-33113 | Medium | 5.4 | 2026-06-09 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform… |
CVE-2026-32193 | High | 8.8 | 2026-06-09 | Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Azure Kubernetes Service allows an authorized attacker to execute c… |
CVE-2026-28301 | Medium | 4.8 | 2026-06-09 | A vulnerability in which an attacker can provide a crafted external URL that may redirect a user to an unintended website. |
CVE-2026-26142 | Critical | 9.8 | 2026-06-09 | Deserialization of untrusted data in Nuance PowerScribe allows an unauthorized attacker to execute code over a network. |
CVE-2026-24181 | High | 7.3 | 2026-06-09 | NVIDIA DALI contains a vulnerability in a component where an attacker could cause an improper index validation. A successful exploit of this vulnerability migh… |
CVE-2026-24180 | High | 7.3 | 2026-06-09 | NVIDIA DALI contains a vulnerability in a component where an attacker could cause a heap-based buffer overflow. A successful exploit of this vulnerability migh… |
CVE-2026-22926 | High | 7.8 | 2026-06-09 | Omnissa Workspace ONE® Assist for macOS contains a Local Privilege Escalation Vulnerability. |
CVE-2026-0420 | Medium | 5.9 | 2026-06-09 | An improper implementation of TLS certificate validation vulnerability found in NETGEAR's ReadyCloud client app which could allow an attacker to perform attack… |
CVE-2026-0419 | High | 8.0 | 2026-06-09 | Insufficient input validation in NETGEAR JR6150 (AC750 WiFi Router 802.11ac Dual Band Gigabit released in 2014) allows users connected to the local WiFi Networ… |
CVE-2026-0418 | Medium | 4.5 | 2026-06-09 | Insufficient configuration management in the listed devices allows authenticated administrators connected to the local network to tamper with the system. |
CVE-2026-0417 | Medium | 4.5 | 2026-06-09 | Insufficient input validation vulnerability in the listed NETGEAR devices allows authenticated administrators connected to the local network to tamper with the… |
CVE-2026-0416 | Medium | 4.5 | 2026-06-09 | An insufficient input validation vulnerability in certain NETGEAR router models as listed allows an authenticated administrator with local network access to su… |
CVE-2026-0415 | Medium | 4.5 | 2026-06-09 | Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorize… |
CVE-2026-0414 | Medium | 4.5 | 2026-06-09 | Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorize… |
CVE-2026-0413 | Medium | 4.5 | 2026-06-09 | A buffer overflow vulnerability due to insufficient input validation in the listed NETGEAR models allows authenticated administrators connected to the local ne… |
CVE-2026-0412 | Medium | 4.5 | 2026-06-09 | Insufficient input validation vulnerability in NETGEAR JR6150 (AC750 WiFi Router 802.11ac Dual Band Gigabit released in 2014) allows administrators connected t… |
CVE-2026-0411 | High | 8.0 | 2026-06-09 | An information disclosure vulnerability in the NETGEAR Orbi satellites (RBR/RBE/RBS Series) could allow a user connected to your network to gain administrator… |
CVE-2026-0410 | Medium | 4.5 | 2026-06-09 | Authenticated administrators connected to the local network can gain elevated access to the router and make unauthorized changes to router software and funct… |
CVE-2026-0409 | Medium | 6.4 | 2026-06-09 | A NETGEAR security issue that could allow an attacker with ability to intercept and tamper with traffic between the router and the Internet to run commands on… |
CVE-2026-8045 | Medium | 6.5 | 2026-06-09 | CWE-611 Improper Restriction of XML External Entity Reference vulnerability exists that could cause information disclosure of server-side file contents when an… |
CVE-2026-8025 | Critical | 9.8 | 2026-06-09 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in MOSK Information Technologies Ltd. CBS Platform allows SQ… |
CVE-2026-49948 | High | 8.1 | 2026-06-09 | Mem0 versions through 0.2.8, fixed in commit ae7f406, contain a missing authorization vulnerability in the self-hosted server component where the POST /configu… |
CVE-2026-49938 | Medium | 6.5 | 2026-06-09 | A improper access control vulnerability in Fortinet FortiPortal 7.4.0 through 7.4.7, FortiPortal 7.2.0 through 7.2.8, FortiPortal 7.0 all versions may allow at… |
CVE-2026-25089 | Critical | 9.8 | 2026-06-09 | A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiS… |
CVE-2026-24065 | High | 8.1 | 2026-06-09 | Waves Central for macOS versions 13.0.9 through 16.5.5 contain a local privilege escalation vulnerability in the privileged helper service. The helper validate… |
CVE-2026-24064 | High | 7.8 | 2026-06-09 | Waves Central for macOS versions 13.0.9 through 16.5.5 contain a local privilege escalation vulnerability. A trusted XPC client component included with the pro… |
CVE-2026-10727 | High | 7.2 | 2026-06-09 | An OS command injection vulnerability in Ivanti EPMM before 12.9.0.1, 12.8.0.3 and 12.7.0.2 versions allows a remote authenticated attacker to execute arbitrar… |
CVE-2026-10523 | Critical | 9.9 | 2026-06-09 | An Authentication Bypass vulnerability (CWE-288) in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated attacker to… |
CVE-2026-10520 | Critical | 10.0 | 2026-06-09 | An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated user to achieve root-le… |
CVE-2026-9279 | | 2026-06-09 | Logseq exposes an IPC handler that allows the renderer process to execute shell commands. While an allowlist restricts the command name (e.g. `git`, `pandoc`… | |
CVE-2026-7486 | Critical | 9.8 | 2026-06-09 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Netcad Software Inc. E-İmar allows SQL Injection. This i… |
CVE-2026-52907 | High | 7.8 | 2026-06-09 | In the Linux kernel, the following vulnerability has been resolved: media: rockchip: rkcif: fix off by one bugs Change these comparisons from > vs >= to avoi… |
CVE-2026-52906 | High | 7.7 | 2026-06-09 | In the Linux kernel, the following vulnerability has been resolved: 9p: fix access mode flags being ORed instead of replaced Since commit 1f3e4142c0eb ("9p… |
CVE-2026-52905 | Medium | 5.5 | 2026-06-09 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: disallow non-power of two min_region_sz on damon_start() Commit d8f867fa08… |
CVE-2026-52904 | Medium | 5.5 | 2026-06-09 | In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: fix nvkm_device leak on aperture removal failure When aperture_remove_confli… |
CVE-2026-49762 | | 2026-06-09 | Uncontrolled Resource Consumption vulnerability in the Elixir standard library's Version module allows an attacker who controls a version string to cause a den… | |
CVE-2026-47901 | | 2026-06-09 | Logseq is vulnerable to a sandbox escape flaw where plugins running in sandboxed iframes can inject arbitrary HTML attributes, such as event handlers, into the… | |
CVE-2026-47900 | | 2026-06-09 | Logseq is vulnerable to a stored cross-site scripting (XSS). A malicious plugin can include a JavaScript payload in the "name" field of its "package.json" file… | |
CVE-2026-47899 | | 2026-06-09 | The Electron preload script in Logseq exposes an API method that allows the renderer process to invoke IPC handlers without proper path validation. An attacker… | |
CVE-2026-46332 | High | 8.0 | 2026-06-09 | In the Linux kernel, the following vulnerability has been resolved: greybus: gb-beagleplay: bound bootloader receive buffering cc1352_bootloader_rx() appends… |
CVE-2026-46330 | High | 7.8 | 2026-06-09 | In the Linux kernel, the following vulnerability has been resolved: Revert "net/smc: Introduce TCP ULP support" This reverts commit d7cd421da9da2cc7b4d25b853… |
CVE-2026-46329 | Medium | 5.5 | 2026-06-09 | In the Linux kernel, the following vulnerability has been resolved: erofs: handle end of filesystem properly for file-backed mounts I/O requests beyond the e… |
CVE-2026-46328 | High | 7.3 | 2026-06-09 | In the Linux kernel, the following vulnerability has been resolved: apparmor: fix rlimit for posix cpu timers Posix cpu timers requires an additional step be… |
CVE-2026-46327 | High | 7.8 | 2026-06-09 | In the Linux kernel, the following vulnerability has been resolved: dm: fix unlocked test for dm_suspended_md The function dm_blk_report_zones tests if the d… |
CVE-2026-46326 | High | 8.4 | 2026-06-09 | In the Linux kernel, the following vulnerability has been resolved: iio: pressure: mprls0025pa: fix spi_transfer struct initialisation Make sure that the spi… |
CVE-2026-46325 | Critical | 9.8 | 2026-06-09 | In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE The current implementa… |