Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
835068d9 by security tracker role at 2026-08-11T19:14:05+00:00
automatic NOT-FOR-US entries update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,5 +1,5 @@
CVE-2026-9214 (Insufficient input validation vulnerability in the NETGEAR
R7000 model ...)
- TODO: check
+ NOT-FOR-US: Netgear
CVE-2026-73228 (Django REST framework is a toolkit for building Web APIs.
Prior to 3.1 ...)
TODO: check
CVE-2026-73227 (electerm is an open-sourced
terminal/ssh/sftp/telnet/serialport/RDP/VN ...)
@@ -103,7 +103,7 @@ CVE-2026-73067 (Tesseract is an open source OCR engine.
Prior to 5.5.3, a crafte
CVE-2026-73066 (Tesseract is an open source OCR engine. Prior to 5.5.3, a
crafted .tra ...)
TODO: check
CVE-2026-72971 (Improper link resolution before file access ('link following')
in Wind ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-72925 (SWC is a TypeScript / JavaScript compiler written in Rust.
Prior to @s ...)
TODO: check
CVE-2026-72922 (AutoGPT is a workflow automation platform for creating,
deploying, and ...)
@@ -113,53 +113,53 @@ CVE-2026-72921 (SeaweedFS is a distributed storage
system. Prior to 4.24, the we
CVE-2026-72920 (SeaweedFS is a distributed storage system. Prior to 4.24, the
filer re ...)
TODO: check
CVE-2026-72785 (Craft CMS 5.0.0-RC1 through 5.10.5 contains an incorrect
authorization ...)
- TODO: check
+ NOT-FOR-US: Craft CMS or plugin for Craft CMS
CVE-2026-72784 (Craft CMS versions >= 5.0.0-RC1 before 5.10.6 and >= 4.0.0-RC1
before ...)
- TODO: check
+ NOT-FOR-US: Craft CMS or plugin for Craft CMS
CVE-2026-72783 (Craft CMS versions >= 5.0.0-RC1 before 5.10.6 and >= 4.0.0-RC1
before ...)
- TODO: check
+ NOT-FOR-US: Craft CMS or plugin for Craft CMS
CVE-2026-72782 (Craft CMS versions >= 5.0.0-RC1 before 5.10.6 and >= 4.0.0-RC1
before ...)
- TODO: check
+ NOT-FOR-US: Craft CMS or plugin for Craft CMS
CVE-2026-72781 (Craft CMS versions >= 5.0.0-RC1 before 5.10.7 and >= 4.0.0-RC1
before ...)
- TODO: check
+ NOT-FOR-US: Craft CMS or plugin for Craft CMS
CVE-2026-72780 (Craft CMS before 5.10.5 fails to persist updated credential
counters a ...)
- TODO: check
+ NOT-FOR-US: Craft CMS or plugin for Craft CMS
CVE-2026-72779 (Craft CMS 5.0.0-RC1 before 5.10.6 and 4.0.0-RC1 before 4.18.2
contain ...)
- TODO: check
+ NOT-FOR-US: Craft CMS or plugin for Craft CMS
CVE-2026-72778 (Craft CMS versions from 4.0.0-RC1 before 4.18.2 and from
5.0.0-RC1 bef ...)
- TODO: check
+ NOT-FOR-US: Craft CMS or plugin for Craft CMS
CVE-2026-72775 (n8n before 1.123.67, 2.31.5, and 2.32.1 contains a SQL
injection vulne ...)
- TODO: check
+ NOT-FOR-US: n8n
CVE-2026-72774 (n8n before 1.123.67, 2.31.5, and 2.32.1 contains a credential
authoriz ...)
- TODO: check
+ NOT-FOR-US: n8n
CVE-2026-72773 (n8n before 2.31.5 and 2.32.x before 2.32.1 contain a
path-confinement ...)
- TODO: check
+ NOT-FOR-US: n8n
CVE-2026-72772 (n8n before 2.32.1 (and before 2.31.5) is vulnerable to account
takeove ...)
- TODO: check
+ NOT-FOR-US: n8n
CVE-2026-72771 (n8n versions before 2.32.1 fail to enforce the Allowed HTTP
Request Do ...)
- TODO: check
+ NOT-FOR-US: n8n
CVE-2026-72770 (n8n versions before 1.123.67 contain a path traversal
vulnerability in ...)
- TODO: check
+ NOT-FOR-US: n8n
CVE-2026-72769 (n8n before 1.123.67, 2.31.5, and 2.32.1 contains a prototype
pollution ...)
- TODO: check
+ NOT-FOR-US: n8n
CVE-2026-72768 (n8n versions before 2.32.1 contain a server-side request
forgery prote ...)
- TODO: check
+ NOT-FOR-US: n8n
CVE-2026-72767 (n8n before 1.123.67, 2.x before 2.31.5, and 2.32.x before
2.32.1 conta ...)
- TODO: check
+ NOT-FOR-US: n8n
CVE-2026-72766 (n8n before 1.123.67, 2.x before 2.31.5, and 2.32.x before
2.32.1 conta ...)
- TODO: check
+ NOT-FOR-US: n8n
CVE-2026-72765 (n8n before 2.31.5 and before 2.32.1 contain a sandbox escape
vulnerabi ...)
- TODO: check
+ NOT-FOR-US: n8n
CVE-2026-72764 (n8n's JavaScript task runner shared a single module cache
across all u ...)
- TODO: check
+ NOT-FOR-US: n8n
CVE-2026-72763 (n8n before 1.123.67, 2.31.5, and 2.32.1 validates
credential-access on ...)
- TODO: check
+ NOT-FOR-US: n8n
CVE-2026-72762 (n8n versions before 1.123.67, 2.31.5, and 2.32.1 contain an
arbitrary ...)
- TODO: check
+ NOT-FOR-US: n8n
CVE-2026-72750 (n8n before 1.123.67, 2.31.5, and 2.32.1 contains a SQL
injection vulne ...)
- TODO: check
+ NOT-FOR-US: n8n
CVE-2026-72749 (n8n before 1.123.67, 2.31.5, and 2.32.1 contains a prototype
pollution ...)
- TODO: check
+ NOT-FOR-US: n8n
CVE-2026-72748 (AVideo contains an unauthenticated arbitrary file write
vulnerability ...)
TODO: check
CVE-2026-72747 (AVideo fails to sanitize the phone field during user
registration, all ...)
@@ -275,111 +275,111 @@ CVE-2026-72534 (A privilege escalation vulnerability in
Authentik Security authe
CVE-2026-72533 (An authentication bypass vulnerability in Portainer CE through
2.44.0 ...)
TODO: check
CVE-2026-71398 (Adobe Campaign Classic (ACC) is affected by an Incorrect
Authorization ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-71390 (CAI Content Credentials is affected by an Improper Input
Validation vu ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-71389 (CAI Content Credentials is affected by an Integer Underflow
(Wrap or W ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-71387 (ColdFusion is affected by an Incorrect Authorization
vulnerability tha ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-71386 (is affected by a Cross-site Scripting (XSS) vulnerability that
could r ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-71384 (is affected by an Incorrect Authorization vulnerability that
could res ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-71383 (is affected by an Incorrect Authorization vulnerability that
could res ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-71362 (Adobe Commerce is affected by an Incorrect Authorization
vulnerability ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-71331 (Integer overflow or wraparound in Microsoft Azure Attestation
service ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-71218 (A flaw was found in iperf3. A remote unauthenticated attacker
can expl ...)
TODO: check
CVE-2026-71217 (A flaw was found in iperf3. A remote attacker can exploit this
vulnera ...)
TODO: check
CVE-2026-70355 (Improper neutralization of input during web page generation
('cross-si ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70354 (Out-of-bounds write in .NET allows an unauthorized attacker to
execute ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70348 (Improper link resolution before file access ('link following')
in Wind ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70347 (Heap-based buffer overflow in Windows Installer allows an
authorized a ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70346 (Stack-based buffer overflow in Windows Installer allows an
authorized ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70345 (Heap-based buffer overflow in Windows Installer allows an
authorized a ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70344 (Stack-based buffer overflow in Windows Installer allows an
authorized ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70340 (Missing authorization in Azure CycleCloud allows an authorized
attacke ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70338 (Improper control of generation of code ('code injection') in
Microsoft ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70337 (Relative path traversal in Microsoft PowerShell Core allows an
unautho ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70336 (Improper control of generation of code ('code injection') in
Visual St ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70335 (Improper neutralization of special elements used in an os
command ('os ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70330 (Heap-based buffer overflow in Windows DNS allows an authorized
attacke ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70329 (Integer overflow or wraparound in Microsoft Office Outlook
allows an u ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70328 (Out-of-bounds read in Microsoft Office Excel allows an
unauthorized at ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70327 (Out-of-bounds read in Microsoft Office Excel allows an
unauthorized at ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70326 (Server-side request forgery (ssrf) in Microsoft Office
SharePoint allo ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70325 (Improper input validation in Microsoft Office PowerPoint
allows an una ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70324 (Server-side request forgery (ssrf) in Microsoft Office
SharePoint allo ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70323 (Improper input validation in Microsoft Office allows an
unauthorized a ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70322 (Improper input validation in Microsoft Office PowerPoint
allows an una ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70321 (Deserialization of untrusted data in Microsoft Office
SharePoint allow ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70320 (Improper input validation in Microsoft Office PowerPoint
allows an una ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70319 (Improper input validation in Microsoft Office Word allows an
unauthori ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70318 (Improper input validation in Microsoft Office Excel allows an
unauthor ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70317 (Use of uninitialized resource in Microsoft Office allows an
unauthoriz ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70316 (Improper input validation in Microsoft Office PowerPoint
allows an una ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70315 (Out-of-bounds read in Microsoft Office allows an unauthorized
attacker ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70314 (Improper input validation in Microsoft Office allows an
unauthorized a ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70313 (Improper input validation in Microsoft Office PowerPoint
allows an una ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70312 (Improper input validation in Microsoft Office PowerPoint
allows an una ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70311 (Use after free in Microsoft Office Word allows an unauthorized
attacke ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70310 (Out-of-bounds read in Microsoft Office Word allows an
unauthorized att ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70307 (Use after free in Windows Ancillary Function Driver for
WinSock allows ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70306 (Improper neutralization of input during web page generation
('cross-si ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70304 (Heap-based buffer overflow in Windows DNS allows an authorized
attacke ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70130 (Heap-based buffer overflow in Microsoft Office allows an
unauthorized ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-6727 (A timing side-channel vulnerability exists in the RSA OAEP
decryption ...)
TODO: check
CVE-2026-6726 (An information leakage vulnerability was reported in the TCG
TPM 2.0 r ...)
TODO: check
CVE-2026-69320 (Improper neutralization of special elements used in an os
command ('os ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-69306 (Not failing securely ('failing open') in Visual Studio Code
allows an ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-69278 (Incorrect authorization in Visual Studio Code allows an
unauthorized a ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-69223 (Apache Allura's webhooks are vulnerable toServer-Side Request
Forgery ...)
TODO: check
CVE-2026-69119 (Taubyte Tau v1.1.10 contains a missing authorization
vulnerability in ...)
@@ -391,775 +391,775 @@ CVE-2026-69115 (OpenIM Server v3.8.3 contains a missing
authorization vulnerabil
CVE-2026-69113 (Cap v0.3.1 contains a broken access control vulnerability in
the POST ...)
TODO: check
CVE-2026-69109 (A vulnerability has been identified in Siemens License Server
(SLS) (A ...)
- TODO: check
+ NOT-FOR-US: Siemens
CVE-2026-69108 (A vulnerability has been identified in Siemens License Server
(SLS) (A ...)
- TODO: check
+ NOT-FOR-US: Siemens
CVE-2026-69102 (MaxKey contains an unauthorized access vulnerability due to a
hard-cod ...)
TODO: check
CVE-2026-68821 (Improper privilege management in Windows Package Manager
allows an aut ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-68820 (Use after free in Windows Ancillary Function Driver for
WinSock allows ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-68819 (Buffer over-read in Windows Network File System allows an
unauthorized ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-68817 (Stack-based buffer overflow in Microsoft Office Excel allows
an unauth ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-68816 (Stack-based buffer overflow in Microsoft Office Excel allows
an unauth ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-68815 (Heap-based buffer overflow in Microsoft Office Excel allows an
unautho ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-68814 (Out-of-bounds read in Microsoft Office Excel allows an
unauthorized at ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-68813 (Out-of-bounds read in Microsoft Office Excel allows an
unauthorized at ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-68812 (Heap-based buffer overflow in Microsoft Office Excel allows an
unautho ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-68811 (Access of resource using incompatible type ('type confusion')
in Micro ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-68810 (Untrusted pointer dereference in Microsoft Office Excel allows
an unau ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-68809 (Incomplete cleanup in Microsoft Office PowerPoint allows an
unauthoriz ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-68808 (Out-of-bounds read in Microsoft Office Excel allows an
unauthorized at ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-68807 (Heap-based buffer overflow in Microsoft Office Excel allows an
unautho ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-68806 (Out-of-bounds write in Microsoft Office Excel allows an
unauthorized a ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-68805 (Heap-based buffer overflow in Microsoft Office Excel allows an
unautho ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-68804 (Numeric truncation error in Microsoft Office Excel allows an
unauthori ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-68803 (Access of resource using incompatible type ('type confusion')
in Micro ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-68802 (Out-of-bounds read in Microsoft Office Excel allows an
unauthorized at ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-68801 (Heap-based buffer overflow in Microsoft Office Excel allows an
unautho ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-68800 (Heap-based buffer overflow in Microsoft Office Excel allows an
unautho ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-68799 (Use of uninitialized resource in Microsoft Office Excel allows
an unau ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-68798 (Heap-based buffer overflow in Microsoft Office Excel allows an
unautho ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-68797 (Out-of-bounds read in Microsoft Office Excel allows an
unauthorized at ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-68796 (Heap-based buffer overflow in Microsoft Office Excel allows an
unautho ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-68795 (Stack-based buffer overflow in Microsoft Office Excel allows
an unauth ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-68794 (Heap-based buffer overflow in Microsoft Office Excel allows an
unautho ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-68793 (Out-of-bounds read in Microsoft Office Excel allows an
unauthorized at ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-68792 (Improper neutralization of special elements used in a command
('comman ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-67180 (Google Turbinia allows arbitrary command execution via worker
tasks. A ...)
TODO: check
CVE-2026-67179 (Genkit does not properly validate host request headers. Any
host on th ...)
TODO: check
CVE-2026-66810 (Heap-based buffer overflow in Microsoft Office Word allows an
unauthor ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-66809 (Out-of-bounds read in Microsoft Office allows an unauthorized
attacker ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-66807 (Stack-based buffer overflow in Microsoft Office allows an
unauthorized ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-66806 (Off-by-one error in Microsoft Office Word allows an
unauthorized attac ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-66805 (Deserialization of untrusted data in Microsoft Office
SharePoint allow ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-66804 (Improper access control in Windows Cross Device Service allows
an auth ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-66802 (Concurrent execution using shared resource with improper
synchronizati ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-66799 (Heap-based buffer overflow in Windows Key Guard allows an
authorized a ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-66301 (Exposure of sensitive information to an unauthorized actor in
Microsof ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65815 (Deserialization of untrusted data in Microsoft Dynamics 365
(on-premis ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65814 (Heap-based buffer overflow in Windows Storage Port Driver
allows an au ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65813 (Server-side request forgery (ssrf) in Microsoft Exchange
Server allows ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65811 (Improper input validation in Power BI allows an authorized
attacker to ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65810 (Relative path traversal in .NET Framework allows an
unauthorized attac ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65807 (Access of resource using incompatible type ('type confusion')
in Micro ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65806 (Missing authorization in Azure CycleCloud allows an authorized
attacke ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65799 (Integer overflow or wraparound in Windows DNS allows an
authorized att ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65798 (Numeric truncation error in Windows DNS allows an authorized
attacker ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65797 (Numeric truncation error in Windows DNS allows an authorized
attacker ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65796 (Heap-based buffer overflow in Windows iSCSI Target Service
allows an u ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65795 (No cwe for this issue in Windows DNS allows an authorized
attacker to ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65794 (Buffer over-read in Windows SMB Client allows an unauthorized
attacker ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65791 (Heap-based buffer overflow in Windows iSCSI Target Service
allows an u ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65790 (Heap-based buffer overflow in Windows Message Queuing allows
an author ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65789 (Use after free in Windows DNS allows an unauthorized attacker
to execu ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65788 (Use after free in Desktop Window Manager allows an authorized
attacker ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65787 (Heap-based buffer overflow in Desktop Window Manager allows an
authori ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65786 (Heap-based buffer overflow in Desktop Window Manager allows an
authori ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65785 (Uncontrolled resource consumption in Windows DHCP Client
allows an una ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65784 (Out-of-bounds read in Windows NTFS allows an authorized
attacker to di ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65783 (Use after free in Windows Autopilot allows an authorized
attacker to e ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65782 (Use after free in Windows Autopilot allows an authorized
attacker to e ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65781 (Use after free in Windows Autopilot allows an authorized
attacker to e ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65780 (Double free in Windows Autopilot allows an authorized attacker
to elev ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65779 (Use after free in Windows Autopilot allows an authorized
attacker to e ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65778 (Use after free in Windows Autopilot allows an authorized
attacker to e ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65777 (Inadequate encryption strength in Windows Active Directory
allows an a ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65776 (Use after free in Windows Win32K allows an authorized attacker
to elev ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65775 (Use after free in Windows Win32K allows an authorized attacker
to elev ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65774 (Heap-based buffer overflow in Windows Installer allows an
authorized a ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65773 (Improper access control in Windows Kernel allows an authorized
attacke ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65769 (Exposure of sensitive information to an unauthorized actor in
Microsof ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65768 (Improper limitation of a pathname to a restricted directory
('path tra ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65767 (Improper neutralization of input during web page generation
('cross-si ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65681 (Null pointer dereference in Windows iSCSI Target Service
allows an una ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65680 (Improper link resolution before file access ('link following')
in Micr ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65679 (Heap-based buffer overflow in Windows iSCSI Target Service
allows an u ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65678 (Use after free in Windows Win32K allows an authorized attacker
to elev ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65675 (No cwe for this issue in Visual Studio Code CoPilot Chat
Extension all ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65673 (CVET-EOP)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65672 (Heap-based buffer overflow in Windows Remote Access API allows
an auth ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65671 (Heap-based buffer overflow in Windows Remote Access API allows
an auth ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65665 (Deserialization of untrusted data in Microsoft Office
SharePoint allow ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65664 (Heap-based buffer overflow in Microsoft Office allows an
unauthorized ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65663 (Deserialization of untrusted data in Microsoft Office
SharePoint allow ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65662 (Out-of-bounds read in Windows GDI allows an authorized
attacker to dis ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65661 (Heap-based buffer overflow in Microsoft Office allows an
unauthorized ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65660 (Improper control of generation of code ('code injection') in
Microsoft ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65658 (Deserialization of untrusted data in Microsoft Office
SharePoint allow ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65657 (Use after free in Microsoft Office allows an unauthorized
attacker to ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65656 (Improper neutralization of special elements used in a command
('comman ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-64922 (Improper neutralization of input during web page generation
('cross-si ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-64921 (Missing authentication for critical function in Microsoft
Office Share ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-64920 (Heap-based buffer overflow in Microsoft Office Access allows
an unauth ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-64919 (Stack-based buffer overflow in Microsoft Office Access allows
an unaut ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-64917 (Out-of-bounds read in Microsoft Office Word allows an
unauthorized att ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-64916 (Improper neutralization of input during web page generation
('cross-si ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-64915 (Heap-based buffer overflow in Microsoft Office Word allows an
unauthor ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-64914 (Heap-based buffer overflow in Microsoft Office Access allows
an unauth ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-64912 (Stack-based buffer overflow in Microsoft Office Access allows
an unaut ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-64911 (Integer overflow or wraparound in Microsoft Office allows an
unauthori ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-64910 (Untrusted pointer dereference in Microsoft Office allows an
unauthoriz ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-64909 (Integer underflow (wrap or wraparound) in Microsoft Office
allows an u ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-64908 (Heap-based buffer overflow in Microsoft Office Access allows
an unauth ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-64907 (Stack-based buffer overflow in Microsoft Office Word allows an
unautho ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-64906 (Heap-based buffer overflow in Microsoft Office Access allows
an unauth ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-64905 (Buffer over-read in Microsoft Office Word allows an
unauthorized attac ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-64904 (Access of resource using incompatible type ('type confusion')
in Micro ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-64903 (Integer overflow or wraparound in Microsoft Office allows an
unauthori ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-64902 (Improper neutralization of input during web page generation
('cross-si ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-64901 (Deserialization of untrusted data in Microsoft Office
SharePoint allow ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-64900 (Improper neutralization of input during web page generation
('cross-si ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-64899 (Out-of-bounds read in Microsoft Office allows an unauthorized
attacker ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-64898 (Heap-based buffer overflow in Microsoft Office allows an
unauthorized ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-64897 (Improper neutralization of input during web page generation
('cross-si ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-64629 (A vulnerability has been identified in Parasolid V38.0 (All
versions < ...)
- TODO: check
+ NOT-FOR-US: Siemens
CVE-2026-63533 (Heap-based buffer overflow in Microsoft Office allows an
unauthorized ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-63532 (Integer overflow or wraparound in Microsoft Office allows an
unauthori ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-63531 (Out-of-bounds read in Microsoft Office Word allows an
unauthorized att ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-63530 (Out-of-bounds read in Microsoft Office Word allows an
unauthorized att ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-63529 (Out-of-bounds read in Microsoft Office allows an unauthorized
attacker ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-63528 (Out-of-bounds read in Microsoft Office Word allows an
unauthorized att ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-63527 (Stack-based buffer overflow in Microsoft Office Word allows an
unautho ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-63526 (Stack-based buffer overflow in Microsoft Office allows an
unauthorized ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-63525 (Numeric truncation error in Microsoft Office Word allows an
unauthoriz ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-63524 (Out-of-bounds read in Microsoft Office allows an unauthorized
attacker ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-63522 (Incorrect permission assignment for critical resource in Azure
SQL Dat ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-63521 (Out-of-bounds read in Microsoft Office Word allows an
unauthorized att ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-63520 (Improper input validation in Microsoft Office SharePoint
allows an una ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-63519 (Heap-based buffer overflow in Microsoft Office allows an
unauthorized ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-63518 (Heap-based buffer overflow in Microsoft Office Word allows an
unauthor ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-63517 (Out-of-bounds read in Microsoft Office allows an unauthorized
attacker ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-63516 (Deserialization of untrusted data in Microsoft Office
SharePoint allow ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-63515 (Out-of-bounds read in Microsoft Office allows an unauthorized
attacker ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-63514 (Deserialization of untrusted data in Microsoft Office
SharePoint allow ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-63513 (Heap-based buffer overflow in Microsoft Office allows an
unauthorized ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-63512 (Incorrect authorization in Microsoft Office SharePoint allows
an autho ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62917 (Improper input validation in Microsoft Office SharePoint
allows an aut ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62915 (Missing authorization in Microsoft Exchange Server allows an
authorize ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62914 (Improper neutralization of input during web page generation
('cross-si ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62913 (Heap-based buffer overflow in Microsoft Exchange Server allows
an auth ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62912 (Deserialization of untrusted data in Microsoft Exchange Server
allows ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62911 (Authentication bypass by capture-replay in Microsoft Exchange
Server a ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62910 (Improper control of resource identifiers ('resource
injection') in Mic ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62909 (Uncaught exception in .NET allows an authorized attacker to
elevate pr ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62908 (Concurrent execution using shared resource with improper
synchronizati ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62902 (Inclusion of functionality from untrusted control sphere in
.NET allow ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62901 (Unchecked input for loop condition in .NET allows an
unauthorized atta ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62900 (Improper removal of sensitive information before storage or
transfer i ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62899 (Inconsistent interpretation of http requests ('http
request/response s ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62898 (Use after free in Microsoft QUIC allows an unauthorized
attacker to di ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62897 (Integer overflow or wraparound in .NET Framework allows an
unauthorize ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62894 (Heap-based buffer overflow in Windows DWM Core Library allows
an autho ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62893 (Use after free in Windows Deployment Services allows an
unauthorized a ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62892 (Use after free in Capability Access Management Service
(camsvc) allows ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62890 (Heap-based buffer overflow in Windows GDI+ allows an
authorized attack ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62889 (Double free in Windows Secure Socket Tunneling Protocol (SSTP)
allows ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62888 (Use after free in Windows DWM Core Library allows an
authorized attack ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62887 (Out-of-bounds read in Windows NTFS allows an authorized
attacker to di ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62886 (Integer overflow or wraparound in .NET allows an unauthorized
attacker ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62885 (Heap-based buffer overflow in Windows Win32K allows an
authorized atta ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62883 (Numeric truncation error in Windows DNS allows an authorized
attacker ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62882 (Insufficiently protected credentials in Microsoft Office
Outlook allow ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62881 (Numeric truncation error in Windows DNS allows an authorized
attacker ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62880 (Out-of-bounds read in Windows NTFS allows an authorized
attacker to el ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62878 (Stack-based buffer overflow in Windows DNS allows an
unauthorized atta ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62877 (Stack-based buffer overflow in Windows Win32K allows an
authorized att ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62876 (Out-of-bounds read in Windows Win32K allows an authorized
attacker to ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62872 (Incorrect authorization in .NET Framework allows an authorized
attacke ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62871 (Out-of-bounds write in .NET allows an unauthorized attacker to
execute ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62869 (Insufficient verification of data authenticity in Azure Entra
ID allow ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62842 (Out-of-bounds read in Microsoft Office allows an unauthorized
attacker ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62839 (Insufficiently protected credentials in Microsoft Office
SharePoint al ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62837 (Relative path traversal in Microsoft Office SharePoint allows
an autho ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62832 (Improper link resolution before file access ('link following')
in Wind ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62829 (Improper neutralization of input during web page generation
('cross-si ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62827 (Improper authentication in Microsoft Office SharePoint allows
an autho ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62824 (Stack-based buffer overflow in Remote Desktop Client allows an
unautho ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62823 (Heap-based buffer overflow in Windows DHCP Server allows an
unauthoriz ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62822 (Integer overflow or wraparound in Windows GDI+ allows an
unauthorized ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62820 (Concurrent execution using shared resource with improper
synchronizati ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62819 (Remote Code Execution in Windows Routing and Remote Access
Service (RR ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62818 (Use after free in Active Directory Certificate Services (AD
CS) allows ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62817 (Out-of-bounds write in Windows DNS allows an unauthorized
attacker to ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62816 (Heap-based buffer overflow in Reliable Multicast Transport
Driver (RMC ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62815 (Use after free in Microsoft QUIC allows an unauthorized
attacker to ex ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62814 (Integer underflow (wrap or wraparound) in Windows DHCP Server
allows a ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62812 (Improper link resolution before file access ('link following')
in Wind ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62811 (Heap-based buffer overflow in Windows HTTP.sys allows an
authorized at ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62807 (Improper link resolution before file access ('link following')
in Wind ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62803 (Improper link resolution before file access ('link following')
in Wind ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62800 (Heap-based buffer overflow in Windows SMB Server allows an
authorized ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62799 (Heap-based buffer overflow in Windows SMB Client allows an
authorized ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62798 (Untrusted pointer dereference in Windows Win32K allows an
authorized a ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62797 (Heap-based buffer overflow in Windows NTFS allows an
authorized attack ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62796 (Out-of-bounds read in Windows NTFS allows an authorized
attacker to di ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62795 (Use after free in Windows LDAP - Lightweight Directory Access
Protocol ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62793 (Buffer over-read in Windows NTFS allows an authorized attacker
to disc ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62792 (Stack-based buffer overflow in Windows TCP/IP allows an
unauthorized a ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62790 (Heap-based buffer overflow in Windows SMB Server allows an
authorized ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62788 (Use after free in Windows Kernel allows an authorized attacker
to elev ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62787 (Use after free in Windows DNS allows an authorized attacker to
execute ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62786 (Out-of-bounds read in Windows Win32K allows an authorized
attacker to ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62785 (Heap-based buffer overflow in Windows LDAP - Lightweight
Directory Acc ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62784 (Heap-based buffer overflow in Microsoft Local Security
Authority Serve ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62783 (Heap-based buffer overflow in Windows Remote Access Connection
Manager ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62782 (Out-of-bounds read in Windows SMB Client allows an
unauthorized attack ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62781 (Heap-based buffer overflow in RPC Runtime allows an
unauthorized attac ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62780 (Use after free in Windows Kernel allows an authorized attacker
to elev ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62779 (Use after free in Windows Schannel allows an authorized
attacker to el ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62778 (Use after free in Windows DNS allows an unauthorized attacker
to eleva ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62777 (Missing authentication for critical function in Windows
License Manage ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62776 (Improper link resolution before file access ('link following')
in Wind ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62775 (Incorrect authorization in Windows Container Isolation FS
Filter Drive ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62774 (Use after free in Windows Graphics Kernel allows an authorized
attacke ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62773 (Use after free in Windows Kerberos allows an authorized
attacker to el ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62772 (Heap-based buffer overflow in Windows Container Isolation FS
Filter Dr ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62771 (Heap-based buffer overflow in Windows Cloud Files Mini Filter
Driver a ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62770 (Heap-based buffer overflow in Windows Shell allows an
authorized attac ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62769 (Numeric truncation error in Windows DNS allows an authorized
attacker ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62768 (Stack-based buffer overflow in Windows Installer allows an
authorized ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62766 (Double free in Windows Kerberos allows an authorized attacker
to eleva ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62761 (Improper link resolution before file access ('link following')
in Wind ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62758 (Heap-based buffer overflow in Windows Remote Access Connection
Manager ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62757 (Improper verification of cryptographic signature in Windows
Schannel a ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62755 (Stack-based buffer overflow in Windows DHCP Client allows an
authorize ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62754 (Heap-based buffer overflow in Windows Kerberos allows an
authorized at ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62753 (Heap-based buffer overflow in Windows HTTP.sys allows an
authorized at ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62752 (Heap-based buffer overflow in Windows Kerberos allows an
authorized at ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62751 (Integer overflow or wraparound in Windows Projected File
System allows ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62750 (Partial string comparison in Windows HTTP Protocol Stack
allows an una ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62749 (Use after free in Windows Kernel allows an authorized attacker
to elev ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62748 (Concurrent execution using shared resource with improper
synchronizati ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62747 (Heap-based buffer overflow in Windows Device Association
Service allow ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62746 (Buffer over-read in Windows Win32K allows an authorized
attacker to di ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62745 (Integer underflow (wrap or wraparound) in Windows DHCP Server
allows a ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62743 (Out-of-bounds read in Windows Win32K allows an authorized
attacker to ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62742 (Integer underflow (wrap or wraparound) in Windows DHCP Server
allows a ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62741 (Integer underflow (wrap or wraparound) in Windows HTTP.sys
allows an a ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62740 (Use of uninitialized resource in Windows Imaging Component
allows an a ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62739 (Heap-based buffer overflow in Windows HTTP.sys allows an
authorized at ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62738 (Out-of-bounds read in Windows Management Instrumentation
allows an aut ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62737 (Untrusted pointer dereference in Windows Kernel allows an
authorized a ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62736 (Heap-based buffer overflow in Windows DHCP Client allows an
authorized ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62735 (Heap-based buffer overflow in Windows HTTP.sys allows an
authorized at ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62734 (Concurrent execution using shared resource with improper
synchronizati ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62733 (Out-of-bounds read in Windows Win32K allows an authorized
attacker to ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62732 (Heap-based buffer overflow in Windows Telephony Service allows
an auth ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62730 (Buffer over-read in Windows Wired AutoConfig Service allows an
authori ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62729 (Concurrent execution using shared resource with improper
synchronizati ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62728 (Time-of-check time-of-use (toctou) race condition in Windows
Common Lo ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62726 (Use after free in Windows Telephony Service allows an
authorized attac ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62725 (Use after free in Windows Telephony Service allows an
authorized attac ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62724 (Use after free in Windows Telephony Service allows an
authorized attac ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62723 (Use after free in Windows Telephony Service allows an
authorized attac ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62722 (Heap-based buffer overflow in Windows Bind Filter Driver
allows an aut ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62721 (Insufficient granularity of access control in User-Mode Power
Service ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62720 (Integer underflow (wrap or wraparound) in Windows DHCP Server
allows a ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62719 (Heap-based buffer overflow in Windows Message Queuing allows
an author ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62718 (Integer underflow (wrap or wraparound) in Windows DHCP Server
allows a ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62717 (Heap-based buffer overflow in Windows Message Queuing allows
an author ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62716 (Integer underflow (wrap or wraparound) in Windows DHCP Server
allows a ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62715 (Integer underflow (wrap or wraparound) in Windows DHCP Server
allows a ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62714 (Integer underflow (wrap or wraparound) in Windows DHCP Server
allows a ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62713 (Heap-based buffer overflow in Windows Cloud Files Mini Filter
Driver a ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62712 (Heap-based buffer overflow in Windows Win32K allows an
authorized atta ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62711 (Use after free in Windows Win32K allows an authorized attacker
to elev ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62710 (Heap-based buffer overflow in Windows Device Association
Service allow ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62709 (Use of uninitialized resource in Windows GDI+ allows an
authorized att ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62708 (Use after free in Windows Kernel allows an unauthorized
attacker to el ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62707 (Use after free in Windows Modern Device Management (MDM)
allows an aut ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62705 (Concurrent execution using shared resource with improper
synchronizati ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62703 (Out-of-bounds read in Windows DWM Core Library allows an
authorized at ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62702 (Null pointer dereference in Windows Graphics Kernel allows an
unauthor ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62701 (Use after free in Windows Telephony Service allows an
authorized attac ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62700 (Heap-based buffer overflow in Windows NTFS allows an
authorized attack ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62699 (Heap-based buffer overflow in Windows Universal Disk Format
File Syste ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62698 (Numeric truncation error in Microsoft Digest Authentication
allows an ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62696 (Integer underflow (wrap or wraparound) in Windows Program
Compatibilit ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62695 (Heap-based buffer overflow in Windows Storage allows an
authorized att ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62693 (Concurrent execution using shared resource with improper
synchronizati ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62692 (Heap-based buffer overflow in Windows Remote Desktop Services
allows a ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62690 (Concurrent execution using shared resource with improper
synchronizati ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62688 (Heap-based buffer overflow in Windows MIDI Service Module
allows an au ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61939 (Use after free in Winlogon allows an authorized attacker to
elevate pr ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61938 (Use after free in Windows Installer allows an authorized
attacker to e ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61937 (Integer overflow or wraparound in Windows HTTP.sys allows an
authorize ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61936 (Missing authorization in Windows Defender Firewall Service
allows an a ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61934 (Use after free in Windows Bind Filter Driver allows an
authorized atta ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61933 (Out-of-bounds read in Windows DWM Core Library allows an
authorized at ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61932 (Access of resource using incompatible type ('type confusion')
in Windo ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61930 (Heap-based buffer overflow in Windows Kernel allows an
authorized atta ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61929 (Use after free in Windows Kernel allows an authorized attacker
to elev ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61928 (Cleartext storage of sensitive information in Windows Hello
allows an ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61927 (Use after free in Windows Bind Filter Driver allows an
authorized atta ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61926 (Heap-based buffer overflow in Windows USB Driver allows an
authorized ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61925 (Incorrect authorization in Windows Installer allows an
authorized atta ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61924 (Out-of-bounds read in Remote Desktop Client allows an
unauthorized att ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61923 (Heap-based buffer overflow in Windows Display Enhancement
Service allo ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61921 (Out-of-bounds read in Remote Desktop Client allows an
unauthorized att ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61920 (Concurrent execution using shared resource with improper
synchronizati ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61918 (Out-of-bounds read in Remote Desktop Client allows an
unauthorized att ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61368 (Heap-based buffer overflow in Windows Hyper-V allows an
authorized att ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61367 (Missing authentication for critical function in Windows Remote
Desktop ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61366 (Double free in Windows Network Connection Broker allows an
authorized ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61365 (Missing authentication for critical function in Windows Remote
Desktop ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61364 (Missing authentication for critical function in Windows Remote
Desktop ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61363 (Heap-based buffer overflow in Remote Desktop Client allows an
unauthor ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61361 (Use after free in Windows DHCP Client allows an authorized
attacker to ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61360 (Untrusted pointer dereference in Windows GDI allows an
authorized atta ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61359 (Heap-based buffer overflow in Windows Storage allows an
authorized att ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61358 (Improper link resolution before file access ('link following')
in Wind ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61357 (Use after free in Application Information Services allows an
authorize ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61356 (Missing authentication for critical function in Windows Remote
Desktop ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61355 (Heap-based buffer overflow in Windows Sensor Data Service
allows an au ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61353 (Heap-based buffer overflow in Windows Telephony Service allows
an auth ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61352 (Concurrent execution using shared resource with improper
synchronizati ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61350 (Buffer over-read in Windows NTFS allows an unauthorized
attacker to di ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61349 (Use after free in Windows Work Folder Service allows an
authorized att ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61348 (Use after free in Windows Ancillary Function Driver for
WinSock allows ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61347 (Buffer over-read in Windows Event Logging Service allows an
authorized ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61346 (Use after free in Windows Graphics Kernel allows an authorized
attacke ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61345 (Null pointer dereference in Microsoft Remote Registry Service
allows a ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-59701 (A vulnerability has been identified in Simcenter Femap (All
versions < ...)
- TODO: check
+ NOT-FOR-US: Siemens
CVE-2026-59700 (A vulnerability has been identified in Simcenter Femap (All
versions < ...)
- TODO: check
+ NOT-FOR-US: Siemens
CVE-2026-59693 (A vulnerability has been identified in Desigo DXR2 (All
versions < V01 ...)
- TODO: check
+ NOT-FOR-US: Siemens
CVE-2026-59138 (Null pointer dereference in Microsoft Remote Registry Service
allows a ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-59137 (Use of uninitialized resource in Windows Event Logging Service
allows ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-59136 (Use of uninitialized resource in Microsoft COM for Windows
allows an a ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-59135 (Weak authentication in Microsoft Windows Search Component
allows an au ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-59134 (Heap-based buffer overflow in Remote Desktop Client allows an
unauthor ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-59133 (Execution with unnecessary privileges in Microsoft High
Performance Co ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-59132 (Null pointer dereference in Windows TCP/IP allows an
unauthorized atta ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-59131 (No cwe for this issue in AMD Zen allows an authorized attacker
to disc ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-59130 (No cwe for this issue in AMD Zen allows an authorized attacker
to disc ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-59128 (Out-of-bounds read in Windows Encrypting File System (EFS)
allows an a ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-59127 (Integer overflow or wraparound in Windows Installer allows an
authoriz ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-59126 (Concurrent execution using shared resource with improper
synchronizati ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-59125 (Use after free in Virtual Hard Disk (VHD) Miniport Driver
allows an au ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-59124 (Deserialization of untrusted data in Microsoft High
Performance Comput ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-59122 (Concurrent execution using shared resource with improper
synchronizati ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-59119 (Incorrect default permissions in Microsoft PowerShell allows
an author ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-59113 (Missing authorization in Visual Studio Code allows an
unauthorized att ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-59086 (A vulnerability has been identified in Simcenter Nastran (All
versions ...)
- TODO: check
+ NOT-FOR-US: Siemens
CVE-2026-58651 (Heap-based buffer overflow in Microsoft Office Word allows an
unauthor ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-58650 (Authorization bypass through user-controlled key in Visual
Studio Code ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-58641 (Integer overflow or wraparound in .NET allows an unauthorized
attacker ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-58639 (Server-side request forgery (ssrf) in Microsoft Office
SharePoint allo ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-58612 (Server-side request forgery (ssrf) in Microsoft PowerShell
Core allows ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-58231 (SAP Commerce Cloud allows an unauthenticated attacker to abuse
a defau ...)
- TODO: check
+ NOT-FOR-US: SAP
CVE-2026-58115 (A vulnerability has been identified in SIMATIC IoT2050
Advanced (6ES76 ...)
- TODO: check
+ NOT-FOR-US: Siemens
CVE-2026-57263 (A vulnerability has been identified in LOGO! Soft Comfort (All
version ...)
- TODO: check
+ NOT-FOR-US: Siemens
CVE-2026-57262 (A vulnerability has been identified in LOGO! Soft Comfort (All
version ...)
- TODO: check
+ NOT-FOR-US: Siemens
CVE-2026-57105 (Improper neutralization of input during web page generation
('cross-si ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-57104 (Improper neutralization of input during web page generation
('cross-si ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-56721 (CamaleonCMS version 2.9.2 and earlier contains a privilege
escalation ...)
TODO: check
CVE-2026-56720 (CamaleonCMS version 2.9.2 and earlier contains a missing
authorization ...)
TODO: check
CVE-2026-56179 (Origin validation error in Windows Network Address Translation
(NAT) a ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-56174 (Untrusted search path in Windows Narrator Braille allows an
authorized ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-54984 (Heap-based buffer overflow in Windows Imaging Component allows
an unau ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-54981 (Inclusion of functionality from untrusted control sphere in
Visual Stu ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-54123 (Exposure of sensitive information to an unauthorized actor in
Microsof ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-54113 (Allocation of resources without limits or throttling in
Windows Kernel ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-53416 (Path traversal in Zoom VDI Client and Plugins may allow an
authenticat ...)
- TODO: check
+ NOT-FOR-US: Zoom
CVE-2026-53415 (Use after Free in the annotator function of Zoom Clients may
allow a m ...)
- TODO: check
+ NOT-FOR-US: Zoom
CVE-2026-53414 (Missing bounds check in the annotator function of Zoom Clients
allows ...)
- TODO: check
+ NOT-FOR-US: Zoom
CVE-2026-53413 (Missing bounds check in the annotator function of Zoom Clients
allows ...)
- TODO: check
+ NOT-FOR-US: Zoom
CVE-2026-51584 (An issue in usememos v0.27.1 allows a remote attacker to
achieve accou ...)
TODO: check
CVE-2026-51583 (An issue in usememos through v0.30.0 allows a remote
authenticated att ...)
TODO: check
CVE-2026-50516 (Missing authentication for critical function in Microsoft
Azure Kubern ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-50472 (Heap-based buffer overflow in Windows LUAFV allows an
authorized attac ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-50237 (A Server-Side Request Forgery and supply chain flaw was found
in the O ...)
TODO: check
CVE-2026-50236 (An authenticated SSRF flaw was found in the OpenShift Console
Dev Cons ...)
TODO: check
CVE-2026-50064 (A vulnerability has been identified in Solid Edge SE2025 (All
versions ...)
- TODO: check
+ NOT-FOR-US: Siemens
CVE-2026-50063 (A vulnerability has been identified in Solid Edge SE2025 (All
versions ...)
- TODO: check
+ NOT-FOR-US: Siemens
CVE-2026-50062 (A vulnerability has been identified in Solid Edge SE2025 (All
versions ...)
- TODO: check
+ NOT-FOR-US: Siemens
CVE-2026-50061 (A vulnerability has been identified in Solid Edge SE2025 (All
versions ...)
- TODO: check
+ NOT-FOR-US: Siemens
CVE-2026-50060 (A vulnerability has been identified in Solid Edge SE2025 (All
versions ...)
- TODO: check
+ NOT-FOR-US: Siemens
CVE-2026-50059 (A vulnerability has been identified in Solid Edge SE2025 (All
versions ...)
- TODO: check
+ NOT-FOR-US: Siemens
CVE-2026-50058 (A vulnerability has been identified in Solid Edge SE2025 (All
versions ...)
- TODO: check
+ NOT-FOR-US: Siemens
CVE-2026-49179 (Improper neutralization of special elements used in a command
('comman ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-48809 (python-engineio is a Python implementation of the Engine.IO
realtime c ...)
TODO: check
CVE-2026-48802 (python-engineio is a Python implementation of the Engine.IO
realtime c ...)
@@ -1179,85 +1179,85 @@ CVE-2026-48494 (TypeBot is a chatbot builder tool. In
version 3.16.1, an authent
CVE-2026-48483 (TypeBot is a chatbot builder tool. Prior to version 3.17.0,
Typebot's ...)
TODO: check
CVE-2026-48447 (Lightroom Classic is affected by an Incorrect Authorization
vulnerabil ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48446 (CAI Content Credentials is affected by an Improper Limitation
of a Pat ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48445 (CAI Content Credentials is affected by an Integer Overflow or
Wraparou ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48444 (CAI Content Credentials is affected by an Integer Overflow or
Wraparou ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48443 (CAI Content Credentials is affected by an Uncontrolled
Resource Consum ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48442 (CAI Content Credentials is affected by an Improper Limitation
of a Pat ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48441 (Lightroom Classic is affected by an Improper Limitation of a
Pathname ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48440 (ColdFusion is affected by a Heap-based Buffer Overflow
vulnerability t ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48439 (CAI Content Credentials is affected by an Uncontrolled
Resource Consum ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48438 (CAI Content Credentials is affected by a NULL Pointer
Dereference vuln ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48437 (CAI Content Credentials is affected by an Improper Certificate
Validat ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48436 (CAI Content Credentials is affected by an Improper Input
Validation vu ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48435 (CAI Content Credentials is affected by an Integer Underflow
(Wrap or W ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48434 (CAI Content Credentials is affected by an Uncontrolled
Resource Consum ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48416 (Adobe Commerce is affected by an Incorrect Authorization
vulnerability ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48415 (Adobe Commerce is affected by an Incorrect Authorization
vulnerability ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48414 (Adobe Commerce is affected by a stored Cross-Site Scripting
(XSS) vuln ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48413 (Adobe Commerce is affected by a stored Cross-Site Scripting
(XSS) vuln ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48412 (Adobe Commerce is affected by an Incorrect Authorization
vulnerability ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48411 (Adobe Commerce is affected by an Incorrect Authorization
vulnerability ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48410 (Lightroom Classic is affected by an out-of-bounds write
vulnerability ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48409 (Lightroom Classic is affected by an out-of-bounds write
vulnerability ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48408 (Lightroom Classic is affected by an out-of-bounds write
vulnerability ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48407 (Lightroom Classic is affected by an out-of-bounds write
vulnerability ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48406 (Lightroom Classic is affected by an out-of-bounds write
vulnerability ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48405 (Lightroom Classic is affected by an out-of-bounds write
vulnerability ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48404 (Lightroom Classic is affected by an out-of-bounds write
vulnerability ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48397 (Lightroom Classic is affected by a Deserialization of
Untrusted Data v ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48387 (CAI Content Credentials is affected by an Integer Overflow or
Wraparou ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48386 (ColdFusion is affected by a Use of a Broken or Risky
Cryptographic Alg ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48385 (ColdFusion is affected by an Improper Neutralization of
Special Elemen ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48384 (ColdFusion is affected by an Improper Input Validation
vulnerability t ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48381 (Adobe Campaign Classic (ACC) is affected by an Improper
Neutralization ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48376 (is affected by an Improper Encoding or Escaping of Output
vulnerabilit ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48375 (ColdFusion is affected by an Incorrect Authorization
vulnerability tha ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48362 (ColdFusion is affected by an Improper Neutralization of
Special Elemen ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48056 (Streambert is a cross-platform Electron Desktop App to stream
and down ...)
TODO: check
CVE-2026-48046 (Streambert is a cross-platform Electron Desktop App to stream
and down ...)
TODO: check
CVE-2026-47940 (Lightroom Classic is affected by an Integer Overflow or
Wraparound vul ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-47922 (CAI Content Credentials is affected by a Server-Side Request
Forgery ( ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-47705 (TypeBot is a chatbot builder tool. Version 3.16.1 has a CSV
injection ...)
TODO: check
CVE-2026-47704 (TypeBot is a chatbot builder tool. Prior to version 3.17.0, an
authent ...)
@@ -1265,25 +1265,25 @@ CVE-2026-47704 (TypeBot is a chatbot builder tool.
Prior to version 3.17.0, an a
CVE-2026-47702 (TypeBot is a chatbot builder tool. In version 3.16.1, API
tokens (bear ...)
TODO: check
CVE-2026-47299 (Improper neutralization of special elements used in a command
('comman ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-47285 (Improper neutralization of special elements used in a command
('comman ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-46670 (YesWiki is a wiki system written in PHP. Prior to version
4.6.4, an u ...)
TODO: check
CVE-2026-43606 (Observable Timing Discrepancy in the AMD Vitis Libraries ECDSA
secp256 ...)
TODO: check
CVE-2026-42976 (Missing authentication for critical function in Windows RPC
API allows ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-42142 (TypeBot is a chatbot builder tool. Prior to version 3.17.0,
the `handl ...)
TODO: check
CVE-2026-40375 (Missing authorization in Dynamics Business Central allows an
authorize ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-39452 (Protection mechanism failure for some Intel(R) Transfer
Learning Tool ...)
TODO: check
CVE-2026-35502 (Deserialization of untrusted data for some Intel(R) Extension
for PyTo ...)
TODO: check
CVE-2026-34635 (is affected by a Use of Hard-coded Cryptographic Key
vulnerability tha ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-34175 (Uncontrolled search path for some
Hardware-Aware-Automated-MachineLear ...)
TODO: check
CVE-2026-33922 (A path traversal vulnerability was discovered in the Offline
archives ...)
@@ -1307,19 +1307,19 @@ CVE-2026-28700 (Uncontrolled search path for some
EquiTriton before version f5dd
CVE-2026-27765 (Improper input validation for some vLLM Hardware Plugin for
Intel(R) G ...)
TODO: check
CVE-2026-27302 (Adobe Campaign Classic (ACC) is affected by an Incorrect
Authorization ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-25652 (is affected by an Incorrect Authorization vulnerability that
could res ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-25194 (Out-of-bounds write in the firmware for the Intel(R) Slim
Bootloader m ...)
TODO: check
CVE-2026-24911 (Stack-based buffer overflow for some Intel(R) PROSet/Wireless
WiFi Sof ...)
- TODO: check
+ NOT-FOR-US: Intel
CVE-2026-24693 (Protection mechanism failure for some Intel(R) oneCCL Bindings
for PyT ...)
TODO: check
CVE-2026-24099 (Use after free for some Intel(R) PROSet/Wireless WiFi Software
for Win ...)
- TODO: check
+ NOT-FOR-US: Intel
CVE-2026-22887 (Improper buffer restrictions for some Intel(R) PROSet/Wireless
WiFi So ...)
- TODO: check
+ NOT-FOR-US: Intel
CVE-2026-21400 (Protection mechanism failure for some Intel(R) AI Reference
Models bef ...)
TODO: check
CVE-2026-21399 (Heap-based buffer overflow for the Intel(R) Open Volume Kernel
Library ...)
@@ -1327,47 +1327,47 @@ CVE-2026-21399 (Heap-based buffer overflow for the
Intel(R) Open Volume Kernel L
CVE-2026-21387 (Protection mechanism failure for some Intel(R) LLM Library for
PyTorch ...)
TODO: check
CVE-2026-21279 (is affected by an Improper Input Validation vulnerability that
could r ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-21273 (is affected by an Improper Input Validation vulnerability that
could r ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-21269 (is affected by a stored Cross-Site Scripting (XSS)
vulnerability that ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-20913 (Improper input validation for some Intel(R) Neural Compressor
software ...)
- TODO: check
+ NOT-FOR-US: Intel
CVE-2026-20908 (Time-of-check time-of-use race condition for the Intel(R) NPU
Driver f ...)
TODO: check
CVE-2026-20906 (Protection mechanism failure for some Intel(R) Neural
Compressor softw ...)
- TODO: check
+ NOT-FOR-US: Intel
CVE-2026-20903 (Protection mechanism failure for some Intel(R) AI Containers
before ve ...)
TODO: check
CVE-2026-20898 (Improper access control in the firmware for some in Alias
Checking Tru ...)
TODO: check
CVE-2026-20891 (Improper authentication for some Intel(R) PROSet/Wireless WiFi
Softwar ...)
- TODO: check
+ NOT-FOR-US: Intel
CVE-2026-20890 (Improper privilege management for some Intel(R)
PROSet/Wireless WiFi S ...)
- TODO: check
+ NOT-FOR-US: Intel
CVE-2026-20886 (Out-of-bounds write for some Intel(R) PROSet/Wireless WiFi
Software fo ...)
- TODO: check
+ NOT-FOR-US: Intel
CVE-2026-20885 (Improper authentication in the Intel(R) TDX module for some
Intel(R) p ...)
TODO: check
CVE-2026-20878 (Null pointer dereference for some Intel(R) PROSet/Wireless
WiFi Softwa ...)
- TODO: check
+ NOT-FOR-US: Intel
CVE-2026-20799 (Untrusted search path for some Battery Life Diagnostic Tool
software b ...)
TODO: check
CVE-2026-20795 (Improper buffer restrictions for some Intel(R) PROSet/Wireless
WiFi So ...)
- TODO: check
+ NOT-FOR-US: Intel
CVE-2026-20789 (Improper access control for some Intel(R) PROSet/Wireless WiFi
Softwar ...)
- TODO: check
+ NOT-FOR-US: Intel
CVE-2026-20787 (Null pointer dereference for some Intel(R) PROSet/Wireless
WiFi Softwa ...)
- TODO: check
+ NOT-FOR-US: Intel
CVE-2026-20786 (Out-of-bounds read for the Intel(R) NPU Driver for all
versions within ...)
TODO: check
CVE-2026-20783 (Improper conditions check in the firmware for the Intel(R) NPU
Driver ...)
TODO: check
CVE-2026-20780 (Uncontrolled resource consumption for some Intel(R)
PROSet/Wireless Wi ...)
- TODO: check
+ NOT-FOR-US: Intel
CVE-2026-20778 (Out-of-bounds read for some Intel(R) PROSet/Wireless WiFi
Software for ...)
- TODO: check
+ NOT-FOR-US: Intel
CVE-2026-20776 (Improper conditions check for some Intel(R) PROSet/Wireless
WiFi Softw ...)
TODO: check
CVE-2026-20775 (Uncaught exception for some Intel(R) TDX modules within Ring
0: Trust ...)
@@ -1389,13 +1389,13 @@ CVE-2026-20749 (Out-of-bounds read for some Intel(R)
PROSet/Wireless WiFi Softwa
CVE-2026-20747 (Improper conditions check for some Intel(R) PROSet/Wireless
WiFi Softw ...)
TODO: check
CVE-2026-20745 (Out-of-bounds write for some Intel(R) PROSet/Wireless WiFi
Software fo ...)
- TODO: check
+ NOT-FOR-US: Intel
CVE-2026-20741 (Improper access control for some Intel(R) PROSet/Wireless WiFi
Softwar ...)
TODO: check
CVE-2026-20739 (Improper conditions check for some Intel(R) PROSet/Wireless
WiFi Softw ...)
- TODO: check
+ NOT-FOR-US: Intel
CVE-2026-20737 (Exposure of sensitive information to an unauthorized actor for
some In ...)
- TODO: check
+ NOT-FOR-US: Intel
CVE-2026-20734 (Improper initialization in some firmware for some Intel(R)
Active Mana ...)
TODO: check
CVE-2026-20731 (Improper buffer restrictions for the Intel(R) NPU Driver for
all versi ...)
@@ -1403,7 +1403,7 @@ CVE-2026-20731 (Improper buffer restrictions for the
Intel(R) NPU Driver for all
CVE-2026-20728 (Protection mechanism failure for some Intel Extension for
TensorFlow s ...)
TODO: check
CVE-2026-20727 (Null pointer dereference for some Intel(R) PROSet/Wireless
WiFi Softwa ...)
- TODO: check
+ NOT-FOR-US: Intel
CVE-2026-20715 (Improper input validation in some firmware for some Intel(R)
Active Ma ...)
TODO: check
CVE-2026-20712 (Incomplete cleanup in some UEFI firmware for some Intel(R)
reference p ...)
@@ -1425,7 +1425,7 @@ CVE-2026-19519 (A flaw was found in claircore's RPM
package scanner. Crafted RPM
CVE-2026-19434 (Cross-site Scripting in the finding renderer in maalfer
Pentestify bef ...)
TODO: check
CVE-2026-19418 (The referrer enforcement introduced with
TYPO3-CORE-SA-2020-006 (CVE-2 ...)
- TODO: check
+ NOT-FOR-US: TYPO3 (core or extensions)
CVE-2026-19078 (A flaw was found in the oauth-server component. This open
redirect vul ...)
TODO: check
CVE-2026-18972 (An authenticated attacker can spoof another GUI user's
identity by sen ...)
@@ -1491,17 +1491,17 @@ CVE-2026-18636 (The Velociraptor gRPC API has a
VFSGetBuffer endpoint which allo
CVE-2026-18635 (Velociraptor's VQL has a query() plugin which allows running a
VQL que ...)
TODO: check
CVE-2026-18247 (A Cross Site Scripting (XSS) vulnerability in the Web Portals
of AtHoc ...)
- TODO: check
+ NOT-FOR-US: Blackberry
CVE-2026-18129 (Cleartext transmission of sensitive information in the Core of
Ivanti ...)
- TODO: check
+ NOT-FOR-US: Ivanti
CVE-2026-18127 (External control of a filename in the Core of Ivanti Endpoint
Manager ...)
- TODO: check
+ NOT-FOR-US: Ivanti
CVE-2026-18125 (An out-of-boundsread intheAgent ofIvanti Endpoint
Managerbeforeversion ...)
- TODO: check
+ NOT-FOR-US: Ivanti
CVE-2026-17535 (Velociraptor's NTFS parsing library mishandles several out of
bound an ...)
TODO: check
CVE-2026-17061 (A Deserialization of Untrusted Data vulnerability affecting
SIMULIA Ex ...)
- TODO: check
+ NOT-FOR-US: Dassault Systemes
CVE-2026-15567 (A flaw was found in Wildfly. A remote unauthenticated attacker
can tri ...)
TODO: check
CVE-2026-15565 (A flaw was found in Undertow. A remote attacker can cause Out
of Memor ...)
@@ -1521,33 +1521,33 @@ CVE-2026-15555 (A flaw was found in JBoss marshalling.
The Infinispan session re
CVE-2026-15554 (the Undertow AJP listener honours forged ssl_cert and is_ssl
AJP attri ...)
TODO: check
CVE-2026-15426 (The AcyMailing \u2013 An Ultimate Newsletter Plugin and
Marketing Auto ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-14180 (A flaw was found in the ChunkReader component of the Undertow
HTTP ser ...)
TODO: check
CVE-2026-13739 (A legacy endpoint in Command Center contained an
unauthenticated serve ...)
- TODO: check
+ NOT-FOR-US: Commvault
CVE-2026-13738 (CommServe contained an authorization bypass vulnerability
affecting a ...)
- TODO: check
+ NOT-FOR-US: Commvault
CVE-2026-13737 (CommServe contained an allowlist bypass vulnerability
affecting comman ...)
- TODO: check
+ NOT-FOR-US: Commvault
CVE-2026-12571 (An authentication bypass in ManageEngine DDI Central's
password-reset ...)
- TODO: check
+ NOT-FOR-US: Zoho
CVE-2026-11814 (A command injection vulnerability in the listed NETGEAR models
allows ...)
- TODO: check
+ NOT-FOR-US: Netgear
CVE-2026-11739 (A command injection vulnerability in certain affected NETGEAR
Nighthaw ...)
- TODO: check
+ NOT-FOR-US: Netgear
CVE-2026-11738 (Insufficient input validation vulnerability in thelisted
NETGEAR model ...)
- TODO: check
+ NOT-FOR-US: Netgear
CVE-2026-11737 (Insufficient input validation vulnerability in thelisted
NETGEAR mode ...)
- TODO: check
+ NOT-FOR-US: Netgear
CVE-2026-11736 (A stack-based buffer overflow vulnerability affects certain
NETGEAR mo ...)
- TODO: check
+ NOT-FOR-US: Netgear
CVE-2026-11735 (A stack-based buffer overflow vulnerability affects the listed
NETGEAR ...)
- TODO: check
+ NOT-FOR-US: Netgear
CVE-2026-11734 (A buffer overflow vulnerability in the listed NETGEAR models
allows an ...)
- TODO: check
+ NOT-FOR-US: Netgear
CVE-2026-11733 (A buffer overflow vulnerability in the listed NETGEAR models
allows a ...)
- TODO: check
+ NOT-FOR-US: Netgear
CVE-2026-10579 (A flaw was found in Picketlink Federation SAML; the unsolcited
respons ...)
TODO: check
CVE-2026-0465 (A Use\u2011After\u2011Free (UAF) vulnerability in the AMD
Ryzen\u2122 ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/835068d938acd92060f89e04e4b2ff24c2dd592e
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/835068d938acd92060f89e04e4b2ff24c2dd592e
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
