2026 CVEs (page 29)
Page 29 of 445 — CVEs published in 2026, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-59119 | High | 7.3 | 2026-08-11 | Incorrect default permissions in Microsoft PowerShell allows an authorized attacker to elevate privileges locally. |
CVE-2026-59113 | High | 8.8 | 2026-08-11 | Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network. |
CVE-2026-58651 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-58650 | High | 7.8 | 2026-08-11 | Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. |
CVE-2026-58641 | High | 7.8 | 2026-08-11 | Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally. |
CVE-2026-58639 | Medium | 6.5 | 2026-08-11 | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. |
CVE-2026-58612 | High | 7.4 | 2026-08-11 | Server-side request forgery (ssrf) in Microsoft PowerShell Core allows an unauthorized attacker to disclose information over a network. |
CVE-2026-57105 | High | 8.0 | 2026-08-11 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform sp… |
CVE-2026-57104 | High | 8.8 | 2026-08-11 | Improper neutralization of input during web page generation ('cross-site scripting') in Azure Storage Explorer allows an unauthorized attacker to elevate privi… |
CVE-2026-56179 | High | 8.3 | 2026-08-11 | Origin validation error in Windows Network Address Translation (NAT) allows an unauthorized attacker to perform spoofing over an adjacent network. |
CVE-2026-56174 | High | 7.8 | 2026-08-11 | Untrusted search path in Windows Narrator Braille allows an authorized attacker to elevate privileges locally. |
CVE-2026-54984 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code locally. |
CVE-2026-54981 | High | 7.8 | 2026-08-11 | Inclusion of functionality from untrusted control sphere in Visual Studio Code - Python extension allows an unauthorized attacker to bypass a security feature… |
CVE-2026-54123 | Medium | 5.5 | 2026-08-11 | Exposure of sensitive information to an unauthorized actor in Microsoft Defender for Endpoint allows an authorized attacker to disclose information locally. |
CVE-2026-54113 | High | 7.5 | 2026-08-11 | Allocation of resources without limits or throttling in Windows Kernel allows an unauthorized attacker to deny service over a network. |
CVE-2026-50516 | Critical | 9.4 | 2026-08-11 | Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network. |
CVE-2026-50472 | High | 7.0 | 2026-08-11 | Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally. |
CVE-2026-49179 | High | 8.8 | 2026-08-11 | Improper neutralization of special elements used in a command ('command injection') in Windows Active Directory allows an unauthorized attacker to execute code… |
CVE-2026-48483 | Medium | 5.4 | 2026-08-11 | TypeBot is a chatbot builder tool. Prior to version 3.17.0, Typebot's WhatsApp status forwarding feature stores a workspace-configured webhook forwarding URL a… |
CVE-2026-48446 | Medium | 5.5 | 2026-08-11 | CAI Content Credentials is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbit… |
CVE-2026-48445 | Medium | 6.2 | 2026-08-11 | CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could… |
CVE-2026-48444 | Medium | 6.2 | 2026-08-11 | CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could… |
CVE-2026-48443 | Medium | 6.2 | 2026-08-11 | CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could e… |
CVE-2026-48442 | High | 7.1 | 2026-08-11 | CAI Content Credentials is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in a A… |
CVE-2026-48440 | High | 8.1 | 2026-08-11 | ColdFusion is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploit… |
CVE-2026-48439 | High | 7.5 | 2026-08-11 | CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could e… |
CVE-2026-48438 | High | 7.5 | 2026-08-11 | CAI Content Credentials is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploi… |
CVE-2026-48437 | Medium | 5.5 | 2026-08-11 | CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could lever… |
CVE-2026-48436 | Medium | 6.5 | 2026-08-11 | CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage th… |
CVE-2026-48435 | Medium | 6.2 | 2026-08-11 | CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an application denial-of-service. An attack… |
CVE-2026-48434 | Medium | 6.2 | 2026-08-11 | CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could e… |
CVE-2026-48387 | Medium | 6.2 | 2026-08-11 | CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could… |
CVE-2026-48386 | High | 7.5 | 2026-08-11 | ColdFusion is affected by a Use of a Broken or Risky Cryptographic Algorithm vulnerability that could lead to disclosure of sensitive memory. An attacker could… |
CVE-2026-48385 | High | 7.7 | 2026-08-11 | ColdFusion is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result in a Se… |
CVE-2026-48384 | Medium | 4.9 | 2026-08-11 | ColdFusion is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker with high privileges co… |
CVE-2026-48376 | Medium | 5.4 | 2026-08-11 | is affected by an Improper Encoding or Escaping of Output vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverag… |
CVE-2026-48375 | Medium | 6.5 | 2026-08-11 | ColdFusion is affected by an Incorrect Authorization vulnerability that could result in an application denial-of-service. A low-privileged attacker could explo… |
CVE-2026-48362 | Critical | 10.0 | 2026-08-11 | ColdFusion is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result in arbi… |
CVE-2026-47922 | Medium | 4.7 | 2026-08-11 | CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue… |
CVE-2026-47704 | | 2026-08-11 | TypeBot is a chatbot builder tool. Prior to version 3.17.0, an authenticated user who has read access to any typebot can resume a waiting webhook session that… | |
CVE-2026-47299 | High | 7.2 | 2026-08-11 | Improper neutralization of special elements used in a command ('command injection') in Azure Monitor Agent allows an authorized attacker to elevate privileges… |
CVE-2026-47285 | Medium | 6.5 | 2026-08-11 | Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to disclose informati… |
CVE-2026-43606 | | 2026-08-11 | Observable Timing Discrepancy in the AMD Vitis Libraries ECDSA secp256k1 component could allow attackers with local access to potentially perform timing analys… | |
CVE-2026-42976 | High | 7.8 | 2026-08-11 | Missing authentication for critical function in Windows RPC API allows an authorized attacker to elevate privileges locally. |
CVE-2026-40375 | Medium | 6.5 | 2026-08-11 | Missing authorization in Dynamics Business Central allows an authorized attacker to disclose information over a network. |
CVE-2026-39452 | | 2026-08-11 | Protection mechanism failure for some Intel(R) Transfer Learning Tool before version v0.7 within Ring 3: User Applications may allow an escalation of privilege… | |
CVE-2026-35502 | | 2026-08-11 | Deserialization of untrusted data for some Intel(R) Extension for PyTorch before version 2.8.0 within Ring 3: User Applications may allow an escalation of priv… | |
CVE-2026-34635 | High | 8.4 | 2026-08-11 | is affected by a Use of Hard-coded Cryptographic Key vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage thi… |
CVE-2026-34175 | | 2026-08-11 | Uncontrolled search path for some Hardware-Aware-Automated-MachineLearning NA before version 45cd723 within Ring 3: User Applications may allow an escalation o… | |
CVE-2026-32791 | | 2026-08-11 | Untrusted search path for some Intel(R) Performance Counter Monitor (Intel(R) PCM) before version tag 202604 within Ring 3: User Applications may allow an esca… | |
CVE-2026-32788 | | 2026-08-11 | Uncontrolled search path for some Approximate Bayesian Inference Framework before version on commit #484c949 within Ring 3: User Applications may allow an esca… | |
CVE-2026-32677 | | 2026-08-11 | Path traversal for some gaudi-container-runtime before version 1.24.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged softw… | |
CVE-2026-28757 | | 2026-08-11 | Protection mechanism failure for some Intel(R) Workload Services Framework software within Ring 3: User Applications may allow an escalation of privilege. Unpr… | |
CVE-2026-28729 | | 2026-08-11 | Integer overflow in the UEFI firmware for the Intel(R) Slim Bootloader may allow an information disclosure. System software adversary with an authenticated use… | |
CVE-2026-28707 | | 2026-08-11 | Protection mechanism failure for some LLM-on-Ray before version 1.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged softwar… | |
CVE-2026-28700 | | 2026-08-11 | Uncontrolled search path for some EquiTriton before version f5ddbb5 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged softwar… | |
CVE-2026-27765 | | 2026-08-11 | Improper input validation for some vLLM Hardware Plugin for Intel(R) Gaudi(R) software before version 0.16.0 within Ring 3: User Applications may allow a denia… | |
CVE-2026-25652 | High | 7.8 | 2026-08-11 | is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability t… |
CVE-2026-25194 | | 2026-08-11 | Out-of-bounds write in the firmware for the Intel(R) Slim Bootloader may allow a denial of service. System software adversary with a privileged user combined w… | |
CVE-2026-24911 | | 2026-08-11 | Stack-based buffer overflow for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service. Unprivileged softw… | |
CVE-2026-24693 | | 2026-08-11 | Protection mechanism failure for some Intel(R) oneCCL Bindings for PyTorch before version v2.8.0 within Ring 3: User Applications may allow an escalation of pr… | |
CVE-2026-24099 | | 2026-08-11 | Use after free for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service. System software adversary with… | |
CVE-2026-22887 | | 2026-08-11 | Improper buffer restrictions for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service. Unprivileged soft… | |
CVE-2026-21400 | | 2026-08-11 | Protection mechanism failure for some Intel(R) AI Reference Models before version v3.4.1 within Ring 3: User Applications may allow an escalation of privilege… | |
CVE-2026-21399 | | 2026-08-11 | Heap-based buffer overflow for the Intel(R) Open Volume Kernel Library (Intel(R) Open VKL) library maintained by intel(R) before version 2.0.2 within Ring 3: U… | |
CVE-2026-21387 | | 2026-08-11 | Protection mechanism failure for some Intel(R) LLM Library for PyTorch within Ring 3: User Applications may allow an escalation of privilege. Unprivileged soft… | |
CVE-2026-21279 | High | 8.2 | 2026-08-11 | is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypa… |
CVE-2026-21273 | High | 8.7 | 2026-08-11 | is affected by an Improper Input Validation vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability… |
CVE-2026-21269 | Medium | 4.6 | 2026-08-11 | is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable… |
CVE-2026-20913 | | 2026-08-11 | Improper input validation for some Intel(R) Neural Compressor software before version v3.7 within Ring 3: User Applications may allow an escalation of privileg… | |
CVE-2026-20908 | | 2026-08-11 | Time-of-check time-of-use race condition for the Intel(R) NPU Driver for Windows for all versions within Ring 1: Device Drivers may allow a denial of service… | |
CVE-2026-20906 | | 2026-08-11 | Protection mechanism failure for some Intel(R) Neural Compressor software before version v3.6 within Ring 3: User Applications may allow an escalation of privi… | |
CVE-2026-20903 | | 2026-08-11 | Protection mechanism failure for some Intel(R) AI Containers before version v0.4.0 within Ring 3: User Applications may allow an escalation of privilege. Syste… | |
CVE-2026-20898 | | 2026-08-11 | Improper access control in the firmware for some in Alias Checking Trusted Module for some Intel(R) Xeon(R) processors may allow an escalation of privilege. St… | |
CVE-2026-20891 | | 2026-08-11 | Improper authentication for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow an escalation of privilege. Unprivi… | |
CVE-2026-20890 | | 2026-08-11 | Improper privilege management for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Privileged Process may allow an escalation of privileg… | |
CVE-2026-20886 | | 2026-08-11 | Out-of-bounds write for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary… | |
CVE-2026-20885 | | 2026-08-11 | Improper authentication in the Intel(R) TDX module for some Intel(R) platforms within Ring 0: Trust Domain may allow an information disclosure and escalation o… | |
CVE-2026-20878 | | 2026-08-11 | Null pointer dereference for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adver… | |
CVE-2026-20799 | | 2026-08-11 | Untrusted search path for some Battery Life Diagnostic Tool software before version 2.9.0 within Ring 3: User Applications may allow an escalation of privilege… | |
CVE-2026-20795 | | 2026-08-11 | Improper buffer restrictions for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network a… | |
CVE-2026-20789 | | 2026-08-11 | Improper access control for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow an escalation of privilege. Unprivi… | |
CVE-2026-20787 | | 2026-08-11 | Null pointer dereference for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adver… | |
CVE-2026-20786 | | 2026-08-11 | Out-of-bounds read for the Intel(R) NPU Driver for all versions within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary… | |
CVE-2026-20783 | | 2026-08-11 | Improper conditions check in the firmware for the Intel(R) NPU Driver for all versions within Ring 1: Device Drivers may allow a denial of service. Unprivilege… | |
CVE-2026-20780 | | 2026-08-11 | Uncontrolled resource consumption for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Unpr… | |
CVE-2026-20778 | | 2026-08-11 | Out-of-bounds read for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service. Unprivileged software adver… | |
CVE-2026-20776 | | 2026-08-11 | Improper conditions check for some Intel(R) PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow a denial of service. Network adversary with a… | |
CVE-2026-20775 | | 2026-08-11 | Uncaught exception for some Intel(R) TDX modules within Ring 0: Trust Domain may allow a denial of service. System software adversary with a privileged user co… | |
CVE-2026-20770 | | 2026-08-11 | Protection mechanism failure for some Cluster Management Toolkit for Kubernetes software before version v0.8.5 within Ring 3: User Applications may allow an es… | |
CVE-2026-20769 | | 2026-08-11 | Improper conditions check for the Intel(R) NPU Driver for all versions within Ring 3: User Applications may allow a denial of service. Unprivileged software ad… | |
CVE-2026-20765 | | 2026-08-11 | Incorrect comparison for some Intel(R) TDX Guest software before version 0.3.1 within Ring 3: User Applications may allow an escalation of privilege. System so… | |
CVE-2026-20763 | | 2026-08-11 | Incorrect calculation for some Intel(R) TDX Guest software before version 0.3.1 within Ring 3: User Applications may allow an escalation of privilege. System s… | |
CVE-2026-20760 | | 2026-08-11 | Improper handling of overlap between protected memory ranges in some microcode for some Intel(R) Processors within Ring 0: Hypervisor may allow an escalation o… | |
CVE-2026-20755 | | 2026-08-11 | Protection mechanism failure for some LLM Scaler software within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversar… | |
CVE-2026-20752 | | 2026-08-11 | Improper authentication for some Intel(R) PROSet/Wireless WiFi Software within Ring 0: Kernel may allow an information disclosure. System software adversary wi… | |
CVE-2026-20749 | | 2026-08-11 | Out-of-bounds read for some Intel(R) PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow an escalation of privilege. Network adversary with a… | |
CVE-2026-20747 | | 2026-08-11 | Improper conditions check for some Intel(R) PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow a denial of service. Network adversary with a… | |
CVE-2026-20745 | | 2026-08-11 | Out-of-bounds write for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary… | |
CVE-2026-20741 | | 2026-08-11 | Improper access control for some Intel(R) PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow a denial of service. Unprivileged software adve… |