[Git][security-tracker-team/security-tracker][master] automatic NOT-FOR-US entries update
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Tue Aug 11 20:14:15 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
835068d9 by security tracker role at 2026-08-11T19:14:05+00:00
automatic NOT-FOR-US entries update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,5 +1,5 @@
CVE-2026-9214 (Insufficient input validation vulnerability in the NETGEAR R7000 model ...)
- TODO: check
+ NOT-FOR-US: Netgear
CVE-2026-73228 (Django REST framework is a toolkit for building Web APIs. Prior to 3.1 ...)
TODO: check
CVE-2026-73227 (electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VN ...)
@@ -103,7 +103,7 @@ CVE-2026-73067 (Tesseract is an open source OCR engine. Prior to 5.5.3, a crafte
CVE-2026-73066 (Tesseract is an open source OCR engine. Prior to 5.5.3, a crafted .tra ...)
TODO: check
CVE-2026-72971 (Improper link resolution before file access ('link following') in Wind ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-72925 (SWC is a TypeScript / JavaScript compiler written in Rust. Prior to @s ...)
TODO: check
CVE-2026-72922 (AutoGPT is a workflow automation platform for creating, deploying, and ...)
@@ -113,53 +113,53 @@ CVE-2026-72921 (SeaweedFS is a distributed storage system. Prior to 4.24, the we
CVE-2026-72920 (SeaweedFS is a distributed storage system. Prior to 4.24, the filer re ...)
TODO: check
CVE-2026-72785 (Craft CMS 5.0.0-RC1 through 5.10.5 contains an incorrect authorization ...)
- TODO: check
+ NOT-FOR-US: Craft CMS or plugin for Craft CMS
CVE-2026-72784 (Craft CMS versions >= 5.0.0-RC1 before 5.10.6 and >= 4.0.0-RC1 before ...)
- TODO: check
+ NOT-FOR-US: Craft CMS or plugin for Craft CMS
CVE-2026-72783 (Craft CMS versions >= 5.0.0-RC1 before 5.10.6 and >= 4.0.0-RC1 before ...)
- TODO: check
+ NOT-FOR-US: Craft CMS or plugin for Craft CMS
CVE-2026-72782 (Craft CMS versions >= 5.0.0-RC1 before 5.10.6 and >= 4.0.0-RC1 before ...)
- TODO: check
+ NOT-FOR-US: Craft CMS or plugin for Craft CMS
CVE-2026-72781 (Craft CMS versions >= 5.0.0-RC1 before 5.10.7 and >= 4.0.0-RC1 before ...)
- TODO: check
+ NOT-FOR-US: Craft CMS or plugin for Craft CMS
CVE-2026-72780 (Craft CMS before 5.10.5 fails to persist updated credential counters a ...)
- TODO: check
+ NOT-FOR-US: Craft CMS or plugin for Craft CMS
CVE-2026-72779 (Craft CMS 5.0.0-RC1 before 5.10.6 and 4.0.0-RC1 before 4.18.2 contain ...)
- TODO: check
+ NOT-FOR-US: Craft CMS or plugin for Craft CMS
CVE-2026-72778 (Craft CMS versions from 4.0.0-RC1 before 4.18.2 and from 5.0.0-RC1 bef ...)
- TODO: check
+ NOT-FOR-US: Craft CMS or plugin for Craft CMS
CVE-2026-72775 (n8n before 1.123.67, 2.31.5, and 2.32.1 contains a SQL injection vulne ...)
- TODO: check
+ NOT-FOR-US: n8n
CVE-2026-72774 (n8n before 1.123.67, 2.31.5, and 2.32.1 contains a credential authoriz ...)
- TODO: check
+ NOT-FOR-US: n8n
CVE-2026-72773 (n8n before 2.31.5 and 2.32.x before 2.32.1 contain a path-confinement ...)
- TODO: check
+ NOT-FOR-US: n8n
CVE-2026-72772 (n8n before 2.32.1 (and before 2.31.5) is vulnerable to account takeove ...)
- TODO: check
+ NOT-FOR-US: n8n
CVE-2026-72771 (n8n versions before 2.32.1 fail to enforce the Allowed HTTP Request Do ...)
- TODO: check
+ NOT-FOR-US: n8n
CVE-2026-72770 (n8n versions before 1.123.67 contain a path traversal vulnerability in ...)
- TODO: check
+ NOT-FOR-US: n8n
CVE-2026-72769 (n8n before 1.123.67, 2.31.5, and 2.32.1 contains a prototype pollution ...)
- TODO: check
+ NOT-FOR-US: n8n
CVE-2026-72768 (n8n versions before 2.32.1 contain a server-side request forgery prote ...)
- TODO: check
+ NOT-FOR-US: n8n
CVE-2026-72767 (n8n before 1.123.67, 2.x before 2.31.5, and 2.32.x before 2.32.1 conta ...)
- TODO: check
+ NOT-FOR-US: n8n
CVE-2026-72766 (n8n before 1.123.67, 2.x before 2.31.5, and 2.32.x before 2.32.1 conta ...)
- TODO: check
+ NOT-FOR-US: n8n
CVE-2026-72765 (n8n before 2.31.5 and before 2.32.1 contain a sandbox escape vulnerabi ...)
- TODO: check
+ NOT-FOR-US: n8n
CVE-2026-72764 (n8n's JavaScript task runner shared a single module cache across all u ...)
- TODO: check
+ NOT-FOR-US: n8n
CVE-2026-72763 (n8n before 1.123.67, 2.31.5, and 2.32.1 validates credential-access on ...)
- TODO: check
+ NOT-FOR-US: n8n
CVE-2026-72762 (n8n versions before 1.123.67, 2.31.5, and 2.32.1 contain an arbitrary ...)
- TODO: check
+ NOT-FOR-US: n8n
CVE-2026-72750 (n8n before 1.123.67, 2.31.5, and 2.32.1 contains a SQL injection vulne ...)
- TODO: check
+ NOT-FOR-US: n8n
CVE-2026-72749 (n8n before 1.123.67, 2.31.5, and 2.32.1 contains a prototype pollution ...)
- TODO: check
+ NOT-FOR-US: n8n
CVE-2026-72748 (AVideo contains an unauthenticated arbitrary file write vulnerability ...)
TODO: check
CVE-2026-72747 (AVideo fails to sanitize the phone field during user registration, all ...)
@@ -275,111 +275,111 @@ CVE-2026-72534 (A privilege escalation vulnerability in Authentik Security authe
CVE-2026-72533 (An authentication bypass vulnerability in Portainer CE through 2.44.0 ...)
TODO: check
CVE-2026-71398 (Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-71390 (CAI Content Credentials is affected by an Improper Input Validation vu ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-71389 (CAI Content Credentials is affected by an Integer Underflow (Wrap or W ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-71387 (ColdFusion is affected by an Incorrect Authorization vulnerability tha ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-71386 (is affected by a Cross-site Scripting (XSS) vulnerability that could r ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-71384 (is affected by an Incorrect Authorization vulnerability that could res ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-71383 (is affected by an Incorrect Authorization vulnerability that could res ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-71362 (Adobe Commerce is affected by an Incorrect Authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-71331 (Integer overflow or wraparound in Microsoft Azure Attestation service ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-71218 (A flaw was found in iperf3. A remote unauthenticated attacker can expl ...)
TODO: check
CVE-2026-71217 (A flaw was found in iperf3. A remote attacker can exploit this vulnera ...)
TODO: check
CVE-2026-70355 (Improper neutralization of input during web page generation ('cross-si ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70354 (Out-of-bounds write in .NET allows an unauthorized attacker to execute ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70348 (Improper link resolution before file access ('link following') in Wind ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70347 (Heap-based buffer overflow in Windows Installer allows an authorized a ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70346 (Stack-based buffer overflow in Windows Installer allows an authorized ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70345 (Heap-based buffer overflow in Windows Installer allows an authorized a ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70344 (Stack-based buffer overflow in Windows Installer allows an authorized ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70340 (Missing authorization in Azure CycleCloud allows an authorized attacke ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70338 (Improper control of generation of code ('code injection') in Microsoft ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70337 (Relative path traversal in Microsoft PowerShell Core allows an unautho ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70336 (Improper control of generation of code ('code injection') in Visual St ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70335 (Improper neutralization of special elements used in an os command ('os ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70330 (Heap-based buffer overflow in Windows DNS allows an authorized attacke ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70329 (Integer overflow or wraparound in Microsoft Office Outlook allows an u ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70328 (Out-of-bounds read in Microsoft Office Excel allows an unauthorized at ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70327 (Out-of-bounds read in Microsoft Office Excel allows an unauthorized at ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70326 (Server-side request forgery (ssrf) in Microsoft Office SharePoint allo ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70325 (Improper input validation in Microsoft Office PowerPoint allows an una ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70324 (Server-side request forgery (ssrf) in Microsoft Office SharePoint allo ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70323 (Improper input validation in Microsoft Office allows an unauthorized a ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70322 (Improper input validation in Microsoft Office PowerPoint allows an una ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70321 (Deserialization of untrusted data in Microsoft Office SharePoint allow ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70320 (Improper input validation in Microsoft Office PowerPoint allows an una ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70319 (Improper input validation in Microsoft Office Word allows an unauthori ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70318 (Improper input validation in Microsoft Office Excel allows an unauthor ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70317 (Use of uninitialized resource in Microsoft Office allows an unauthoriz ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70316 (Improper input validation in Microsoft Office PowerPoint allows an una ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70315 (Out-of-bounds read in Microsoft Office allows an unauthorized attacker ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70314 (Improper input validation in Microsoft Office allows an unauthorized a ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70313 (Improper input validation in Microsoft Office PowerPoint allows an una ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70312 (Improper input validation in Microsoft Office PowerPoint allows an una ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70311 (Use after free in Microsoft Office Word allows an unauthorized attacke ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70310 (Out-of-bounds read in Microsoft Office Word allows an unauthorized att ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70307 (Use after free in Windows Ancillary Function Driver for WinSock allows ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70306 (Improper neutralization of input during web page generation ('cross-si ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70304 (Heap-based buffer overflow in Windows DNS allows an authorized attacke ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-70130 (Heap-based buffer overflow in Microsoft Office allows an unauthorized ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-6727 (A timing side-channel vulnerability exists in the RSA OAEP decryption ...)
TODO: check
CVE-2026-6726 (An information leakage vulnerability was reported in the TCG TPM 2.0 r ...)
TODO: check
CVE-2026-69320 (Improper neutralization of special elements used in an os command ('os ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-69306 (Not failing securely ('failing open') in Visual Studio Code allows an ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-69278 (Incorrect authorization in Visual Studio Code allows an unauthorized a ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-69223 (Apache Allura's webhooks are vulnerable toServer-Side Request Forgery ...)
TODO: check
CVE-2026-69119 (Taubyte Tau v1.1.10 contains a missing authorization vulnerability in ...)
@@ -391,775 +391,775 @@ CVE-2026-69115 (OpenIM Server v3.8.3 contains a missing authorization vulnerabil
CVE-2026-69113 (Cap v0.3.1 contains a broken access control vulnerability in the POST ...)
TODO: check
CVE-2026-69109 (A vulnerability has been identified in Siemens License Server (SLS) (A ...)
- TODO: check
+ NOT-FOR-US: Siemens
CVE-2026-69108 (A vulnerability has been identified in Siemens License Server (SLS) (A ...)
- TODO: check
+ NOT-FOR-US: Siemens
CVE-2026-69102 (MaxKey contains an unauthorized access vulnerability due to a hard-cod ...)
TODO: check
CVE-2026-68821 (Improper privilege management in Windows Package Manager allows an aut ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-68820 (Use after free in Windows Ancillary Function Driver for WinSock allows ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-68819 (Buffer over-read in Windows Network File System allows an unauthorized ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-68817 (Stack-based buffer overflow in Microsoft Office Excel allows an unauth ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-68816 (Stack-based buffer overflow in Microsoft Office Excel allows an unauth ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-68815 (Heap-based buffer overflow in Microsoft Office Excel allows an unautho ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-68814 (Out-of-bounds read in Microsoft Office Excel allows an unauthorized at ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-68813 (Out-of-bounds read in Microsoft Office Excel allows an unauthorized at ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-68812 (Heap-based buffer overflow in Microsoft Office Excel allows an unautho ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-68811 (Access of resource using incompatible type ('type confusion') in Micro ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-68810 (Untrusted pointer dereference in Microsoft Office Excel allows an unau ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-68809 (Incomplete cleanup in Microsoft Office PowerPoint allows an unauthoriz ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-68808 (Out-of-bounds read in Microsoft Office Excel allows an unauthorized at ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-68807 (Heap-based buffer overflow in Microsoft Office Excel allows an unautho ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-68806 (Out-of-bounds write in Microsoft Office Excel allows an unauthorized a ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-68805 (Heap-based buffer overflow in Microsoft Office Excel allows an unautho ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-68804 (Numeric truncation error in Microsoft Office Excel allows an unauthori ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-68803 (Access of resource using incompatible type ('type confusion') in Micro ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-68802 (Out-of-bounds read in Microsoft Office Excel allows an unauthorized at ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-68801 (Heap-based buffer overflow in Microsoft Office Excel allows an unautho ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-68800 (Heap-based buffer overflow in Microsoft Office Excel allows an unautho ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-68799 (Use of uninitialized resource in Microsoft Office Excel allows an unau ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-68798 (Heap-based buffer overflow in Microsoft Office Excel allows an unautho ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-68797 (Out-of-bounds read in Microsoft Office Excel allows an unauthorized at ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-68796 (Heap-based buffer overflow in Microsoft Office Excel allows an unautho ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-68795 (Stack-based buffer overflow in Microsoft Office Excel allows an unauth ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-68794 (Heap-based buffer overflow in Microsoft Office Excel allows an unautho ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-68793 (Out-of-bounds read in Microsoft Office Excel allows an unauthorized at ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-68792 (Improper neutralization of special elements used in a command ('comman ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-67180 (Google Turbinia allows arbitrary command execution via worker tasks. A ...)
TODO: check
CVE-2026-67179 (Genkit does not properly validate host request headers. Any host on th ...)
TODO: check
CVE-2026-66810 (Heap-based buffer overflow in Microsoft Office Word allows an unauthor ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-66809 (Out-of-bounds read in Microsoft Office allows an unauthorized attacker ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-66807 (Stack-based buffer overflow in Microsoft Office allows an unauthorized ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-66806 (Off-by-one error in Microsoft Office Word allows an unauthorized attac ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-66805 (Deserialization of untrusted data in Microsoft Office SharePoint allow ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-66804 (Improper access control in Windows Cross Device Service allows an auth ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-66802 (Concurrent execution using shared resource with improper synchronizati ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-66799 (Heap-based buffer overflow in Windows Key Guard allows an authorized a ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-66301 (Exposure of sensitive information to an unauthorized actor in Microsof ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65815 (Deserialization of untrusted data in Microsoft Dynamics 365 (on-premis ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65814 (Heap-based buffer overflow in Windows Storage Port Driver allows an au ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65813 (Server-side request forgery (ssrf) in Microsoft Exchange Server allows ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65811 (Improper input validation in Power BI allows an authorized attacker to ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65810 (Relative path traversal in .NET Framework allows an unauthorized attac ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65807 (Access of resource using incompatible type ('type confusion') in Micro ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65806 (Missing authorization in Azure CycleCloud allows an authorized attacke ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65799 (Integer overflow or wraparound in Windows DNS allows an authorized att ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65798 (Numeric truncation error in Windows DNS allows an authorized attacker ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65797 (Numeric truncation error in Windows DNS allows an authorized attacker ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65796 (Heap-based buffer overflow in Windows iSCSI Target Service allows an u ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65795 (No cwe for this issue in Windows DNS allows an authorized attacker to ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65794 (Buffer over-read in Windows SMB Client allows an unauthorized attacker ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65791 (Heap-based buffer overflow in Windows iSCSI Target Service allows an u ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65790 (Heap-based buffer overflow in Windows Message Queuing allows an author ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65789 (Use after free in Windows DNS allows an unauthorized attacker to execu ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65788 (Use after free in Desktop Window Manager allows an authorized attacker ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65787 (Heap-based buffer overflow in Desktop Window Manager allows an authori ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65786 (Heap-based buffer overflow in Desktop Window Manager allows an authori ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65785 (Uncontrolled resource consumption in Windows DHCP Client allows an una ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65784 (Out-of-bounds read in Windows NTFS allows an authorized attacker to di ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65783 (Use after free in Windows Autopilot allows an authorized attacker to e ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65782 (Use after free in Windows Autopilot allows an authorized attacker to e ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65781 (Use after free in Windows Autopilot allows an authorized attacker to e ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65780 (Double free in Windows Autopilot allows an authorized attacker to elev ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65779 (Use after free in Windows Autopilot allows an authorized attacker to e ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65778 (Use after free in Windows Autopilot allows an authorized attacker to e ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65777 (Inadequate encryption strength in Windows Active Directory allows an a ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65776 (Use after free in Windows Win32K allows an authorized attacker to elev ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65775 (Use after free in Windows Win32K allows an authorized attacker to elev ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65774 (Heap-based buffer overflow in Windows Installer allows an authorized a ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65773 (Improper access control in Windows Kernel allows an authorized attacke ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65769 (Exposure of sensitive information to an unauthorized actor in Microsof ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65768 (Improper limitation of a pathname to a restricted directory ('path tra ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65767 (Improper neutralization of input during web page generation ('cross-si ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65681 (Null pointer dereference in Windows iSCSI Target Service allows an una ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65680 (Improper link resolution before file access ('link following') in Micr ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65679 (Heap-based buffer overflow in Windows iSCSI Target Service allows an u ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65678 (Use after free in Windows Win32K allows an authorized attacker to elev ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65675 (No cwe for this issue in Visual Studio Code CoPilot Chat Extension all ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65673 (CVET-EOP)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65672 (Heap-based buffer overflow in Windows Remote Access API allows an auth ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65671 (Heap-based buffer overflow in Windows Remote Access API allows an auth ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65665 (Deserialization of untrusted data in Microsoft Office SharePoint allow ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65664 (Heap-based buffer overflow in Microsoft Office allows an unauthorized ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65663 (Deserialization of untrusted data in Microsoft Office SharePoint allow ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65662 (Out-of-bounds read in Windows GDI allows an authorized attacker to dis ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65661 (Heap-based buffer overflow in Microsoft Office allows an unauthorized ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65660 (Improper control of generation of code ('code injection') in Microsoft ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65658 (Deserialization of untrusted data in Microsoft Office SharePoint allow ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65657 (Use after free in Microsoft Office allows an unauthorized attacker to ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-65656 (Improper neutralization of special elements used in a command ('comman ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-64922 (Improper neutralization of input during web page generation ('cross-si ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-64921 (Missing authentication for critical function in Microsoft Office Share ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-64920 (Heap-based buffer overflow in Microsoft Office Access allows an unauth ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-64919 (Stack-based buffer overflow in Microsoft Office Access allows an unaut ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-64917 (Out-of-bounds read in Microsoft Office Word allows an unauthorized att ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-64916 (Improper neutralization of input during web page generation ('cross-si ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-64915 (Heap-based buffer overflow in Microsoft Office Word allows an unauthor ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-64914 (Heap-based buffer overflow in Microsoft Office Access allows an unauth ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-64912 (Stack-based buffer overflow in Microsoft Office Access allows an unaut ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-64911 (Integer overflow or wraparound in Microsoft Office allows an unauthori ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-64910 (Untrusted pointer dereference in Microsoft Office allows an unauthoriz ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-64909 (Integer underflow (wrap or wraparound) in Microsoft Office allows an u ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-64908 (Heap-based buffer overflow in Microsoft Office Access allows an unauth ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-64907 (Stack-based buffer overflow in Microsoft Office Word allows an unautho ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-64906 (Heap-based buffer overflow in Microsoft Office Access allows an unauth ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-64905 (Buffer over-read in Microsoft Office Word allows an unauthorized attac ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-64904 (Access of resource using incompatible type ('type confusion') in Micro ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-64903 (Integer overflow or wraparound in Microsoft Office allows an unauthori ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-64902 (Improper neutralization of input during web page generation ('cross-si ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-64901 (Deserialization of untrusted data in Microsoft Office SharePoint allow ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-64900 (Improper neutralization of input during web page generation ('cross-si ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-64899 (Out-of-bounds read in Microsoft Office allows an unauthorized attacker ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-64898 (Heap-based buffer overflow in Microsoft Office allows an unauthorized ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-64897 (Improper neutralization of input during web page generation ('cross-si ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-64629 (A vulnerability has been identified in Parasolid V38.0 (All versions < ...)
- TODO: check
+ NOT-FOR-US: Siemens
CVE-2026-63533 (Heap-based buffer overflow in Microsoft Office allows an unauthorized ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-63532 (Integer overflow or wraparound in Microsoft Office allows an unauthori ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-63531 (Out-of-bounds read in Microsoft Office Word allows an unauthorized att ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-63530 (Out-of-bounds read in Microsoft Office Word allows an unauthorized att ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-63529 (Out-of-bounds read in Microsoft Office allows an unauthorized attacker ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-63528 (Out-of-bounds read in Microsoft Office Word allows an unauthorized att ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-63527 (Stack-based buffer overflow in Microsoft Office Word allows an unautho ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-63526 (Stack-based buffer overflow in Microsoft Office allows an unauthorized ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-63525 (Numeric truncation error in Microsoft Office Word allows an unauthoriz ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-63524 (Out-of-bounds read in Microsoft Office allows an unauthorized attacker ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-63522 (Incorrect permission assignment for critical resource in Azure SQL Dat ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-63521 (Out-of-bounds read in Microsoft Office Word allows an unauthorized att ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-63520 (Improper input validation in Microsoft Office SharePoint allows an una ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-63519 (Heap-based buffer overflow in Microsoft Office allows an unauthorized ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-63518 (Heap-based buffer overflow in Microsoft Office Word allows an unauthor ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-63517 (Out-of-bounds read in Microsoft Office allows an unauthorized attacker ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-63516 (Deserialization of untrusted data in Microsoft Office SharePoint allow ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-63515 (Out-of-bounds read in Microsoft Office allows an unauthorized attacker ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-63514 (Deserialization of untrusted data in Microsoft Office SharePoint allow ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-63513 (Heap-based buffer overflow in Microsoft Office allows an unauthorized ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-63512 (Incorrect authorization in Microsoft Office SharePoint allows an autho ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62917 (Improper input validation in Microsoft Office SharePoint allows an aut ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62915 (Missing authorization in Microsoft Exchange Server allows an authorize ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62914 (Improper neutralization of input during web page generation ('cross-si ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62913 (Heap-based buffer overflow in Microsoft Exchange Server allows an auth ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62912 (Deserialization of untrusted data in Microsoft Exchange Server allows ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62911 (Authentication bypass by capture-replay in Microsoft Exchange Server a ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62910 (Improper control of resource identifiers ('resource injection') in Mic ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62909 (Uncaught exception in .NET allows an authorized attacker to elevate pr ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62908 (Concurrent execution using shared resource with improper synchronizati ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62902 (Inclusion of functionality from untrusted control sphere in .NET allow ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62901 (Unchecked input for loop condition in .NET allows an unauthorized atta ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62900 (Improper removal of sensitive information before storage or transfer i ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62899 (Inconsistent interpretation of http requests ('http request/response s ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62898 (Use after free in Microsoft QUIC allows an unauthorized attacker to di ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62897 (Integer overflow or wraparound in .NET Framework allows an unauthorize ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62894 (Heap-based buffer overflow in Windows DWM Core Library allows an autho ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62893 (Use after free in Windows Deployment Services allows an unauthorized a ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62892 (Use after free in Capability Access Management Service (camsvc) allows ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62890 (Heap-based buffer overflow in Windows GDI+ allows an authorized attack ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62889 (Double free in Windows Secure Socket Tunneling Protocol (SSTP) allows ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62888 (Use after free in Windows DWM Core Library allows an authorized attack ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62887 (Out-of-bounds read in Windows NTFS allows an authorized attacker to di ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62886 (Integer overflow or wraparound in .NET allows an unauthorized attacker ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62885 (Heap-based buffer overflow in Windows Win32K allows an authorized atta ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62883 (Numeric truncation error in Windows DNS allows an authorized attacker ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62882 (Insufficiently protected credentials in Microsoft Office Outlook allow ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62881 (Numeric truncation error in Windows DNS allows an authorized attacker ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62880 (Out-of-bounds read in Windows NTFS allows an authorized attacker to el ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62878 (Stack-based buffer overflow in Windows DNS allows an unauthorized atta ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62877 (Stack-based buffer overflow in Windows Win32K allows an authorized att ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62876 (Out-of-bounds read in Windows Win32K allows an authorized attacker to ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62872 (Incorrect authorization in .NET Framework allows an authorized attacke ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62871 (Out-of-bounds write in .NET allows an unauthorized attacker to execute ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62869 (Insufficient verification of data authenticity in Azure Entra ID allow ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62842 (Out-of-bounds read in Microsoft Office allows an unauthorized attacker ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62839 (Insufficiently protected credentials in Microsoft Office SharePoint al ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62837 (Relative path traversal in Microsoft Office SharePoint allows an autho ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62832 (Improper link resolution before file access ('link following') in Wind ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62829 (Improper neutralization of input during web page generation ('cross-si ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62827 (Improper authentication in Microsoft Office SharePoint allows an autho ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62824 (Stack-based buffer overflow in Remote Desktop Client allows an unautho ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62823 (Heap-based buffer overflow in Windows DHCP Server allows an unauthoriz ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62822 (Integer overflow or wraparound in Windows GDI+ allows an unauthorized ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62820 (Concurrent execution using shared resource with improper synchronizati ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62819 (Remote Code Execution in Windows Routing and Remote Access Service (RR ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62818 (Use after free in Active Directory Certificate Services (AD CS) allows ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62817 (Out-of-bounds write in Windows DNS allows an unauthorized attacker to ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62816 (Heap-based buffer overflow in Reliable Multicast Transport Driver (RMC ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62815 (Use after free in Microsoft QUIC allows an unauthorized attacker to ex ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62814 (Integer underflow (wrap or wraparound) in Windows DHCP Server allows a ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62812 (Improper link resolution before file access ('link following') in Wind ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62811 (Heap-based buffer overflow in Windows HTTP.sys allows an authorized at ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62807 (Improper link resolution before file access ('link following') in Wind ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62803 (Improper link resolution before file access ('link following') in Wind ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62800 (Heap-based buffer overflow in Windows SMB Server allows an authorized ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62799 (Heap-based buffer overflow in Windows SMB Client allows an authorized ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62798 (Untrusted pointer dereference in Windows Win32K allows an authorized a ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62797 (Heap-based buffer overflow in Windows NTFS allows an authorized attack ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62796 (Out-of-bounds read in Windows NTFS allows an authorized attacker to di ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62795 (Use after free in Windows LDAP - Lightweight Directory Access Protocol ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62793 (Buffer over-read in Windows NTFS allows an authorized attacker to disc ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62792 (Stack-based buffer overflow in Windows TCP/IP allows an unauthorized a ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62790 (Heap-based buffer overflow in Windows SMB Server allows an authorized ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62788 (Use after free in Windows Kernel allows an authorized attacker to elev ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62787 (Use after free in Windows DNS allows an authorized attacker to execute ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62786 (Out-of-bounds read in Windows Win32K allows an authorized attacker to ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62785 (Heap-based buffer overflow in Windows LDAP - Lightweight Directory Acc ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62784 (Heap-based buffer overflow in Microsoft Local Security Authority Serve ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62783 (Heap-based buffer overflow in Windows Remote Access Connection Manager ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62782 (Out-of-bounds read in Windows SMB Client allows an unauthorized attack ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62781 (Heap-based buffer overflow in RPC Runtime allows an unauthorized attac ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62780 (Use after free in Windows Kernel allows an authorized attacker to elev ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62779 (Use after free in Windows Schannel allows an authorized attacker to el ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62778 (Use after free in Windows DNS allows an unauthorized attacker to eleva ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62777 (Missing authentication for critical function in Windows License Manage ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62776 (Improper link resolution before file access ('link following') in Wind ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62775 (Incorrect authorization in Windows Container Isolation FS Filter Drive ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62774 (Use after free in Windows Graphics Kernel allows an authorized attacke ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62773 (Use after free in Windows Kerberos allows an authorized attacker to el ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62772 (Heap-based buffer overflow in Windows Container Isolation FS Filter Dr ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62771 (Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver a ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62770 (Heap-based buffer overflow in Windows Shell allows an authorized attac ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62769 (Numeric truncation error in Windows DNS allows an authorized attacker ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62768 (Stack-based buffer overflow in Windows Installer allows an authorized ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62766 (Double free in Windows Kerberos allows an authorized attacker to eleva ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62761 (Improper link resolution before file access ('link following') in Wind ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62758 (Heap-based buffer overflow in Windows Remote Access Connection Manager ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62757 (Improper verification of cryptographic signature in Windows Schannel a ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62755 (Stack-based buffer overflow in Windows DHCP Client allows an authorize ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62754 (Heap-based buffer overflow in Windows Kerberos allows an authorized at ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62753 (Heap-based buffer overflow in Windows HTTP.sys allows an authorized at ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62752 (Heap-based buffer overflow in Windows Kerberos allows an authorized at ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62751 (Integer overflow or wraparound in Windows Projected File System allows ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62750 (Partial string comparison in Windows HTTP Protocol Stack allows an una ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62749 (Use after free in Windows Kernel allows an authorized attacker to elev ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62748 (Concurrent execution using shared resource with improper synchronizati ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62747 (Heap-based buffer overflow in Windows Device Association Service allow ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62746 (Buffer over-read in Windows Win32K allows an authorized attacker to di ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62745 (Integer underflow (wrap or wraparound) in Windows DHCP Server allows a ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62743 (Out-of-bounds read in Windows Win32K allows an authorized attacker to ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62742 (Integer underflow (wrap or wraparound) in Windows DHCP Server allows a ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62741 (Integer underflow (wrap or wraparound) in Windows HTTP.sys allows an a ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62740 (Use of uninitialized resource in Windows Imaging Component allows an a ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62739 (Heap-based buffer overflow in Windows HTTP.sys allows an authorized at ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62738 (Out-of-bounds read in Windows Management Instrumentation allows an aut ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62737 (Untrusted pointer dereference in Windows Kernel allows an authorized a ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62736 (Heap-based buffer overflow in Windows DHCP Client allows an authorized ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62735 (Heap-based buffer overflow in Windows HTTP.sys allows an authorized at ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62734 (Concurrent execution using shared resource with improper synchronizati ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62733 (Out-of-bounds read in Windows Win32K allows an authorized attacker to ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62732 (Heap-based buffer overflow in Windows Telephony Service allows an auth ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62730 (Buffer over-read in Windows Wired AutoConfig Service allows an authori ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62729 (Concurrent execution using shared resource with improper synchronizati ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62728 (Time-of-check time-of-use (toctou) race condition in Windows Common Lo ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62726 (Use after free in Windows Telephony Service allows an authorized attac ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62725 (Use after free in Windows Telephony Service allows an authorized attac ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62724 (Use after free in Windows Telephony Service allows an authorized attac ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62723 (Use after free in Windows Telephony Service allows an authorized attac ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62722 (Heap-based buffer overflow in Windows Bind Filter Driver allows an aut ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62721 (Insufficient granularity of access control in User-Mode Power Service ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62720 (Integer underflow (wrap or wraparound) in Windows DHCP Server allows a ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62719 (Heap-based buffer overflow in Windows Message Queuing allows an author ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62718 (Integer underflow (wrap or wraparound) in Windows DHCP Server allows a ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62717 (Heap-based buffer overflow in Windows Message Queuing allows an author ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62716 (Integer underflow (wrap or wraparound) in Windows DHCP Server allows a ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62715 (Integer underflow (wrap or wraparound) in Windows DHCP Server allows a ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62714 (Integer underflow (wrap or wraparound) in Windows DHCP Server allows a ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62713 (Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver a ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62712 (Heap-based buffer overflow in Windows Win32K allows an authorized atta ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62711 (Use after free in Windows Win32K allows an authorized attacker to elev ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62710 (Heap-based buffer overflow in Windows Device Association Service allow ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62709 (Use of uninitialized resource in Windows GDI+ allows an authorized att ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62708 (Use after free in Windows Kernel allows an unauthorized attacker to el ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62707 (Use after free in Windows Modern Device Management (MDM) allows an aut ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62705 (Concurrent execution using shared resource with improper synchronizati ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62703 (Out-of-bounds read in Windows DWM Core Library allows an authorized at ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62702 (Null pointer dereference in Windows Graphics Kernel allows an unauthor ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62701 (Use after free in Windows Telephony Service allows an authorized attac ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62700 (Heap-based buffer overflow in Windows NTFS allows an authorized attack ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62699 (Heap-based buffer overflow in Windows Universal Disk Format File Syste ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62698 (Numeric truncation error in Microsoft Digest Authentication allows an ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62696 (Integer underflow (wrap or wraparound) in Windows Program Compatibilit ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62695 (Heap-based buffer overflow in Windows Storage allows an authorized att ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62693 (Concurrent execution using shared resource with improper synchronizati ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62692 (Heap-based buffer overflow in Windows Remote Desktop Services allows a ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62690 (Concurrent execution using shared resource with improper synchronizati ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-62688 (Heap-based buffer overflow in Windows MIDI Service Module allows an au ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61939 (Use after free in Winlogon allows an authorized attacker to elevate pr ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61938 (Use after free in Windows Installer allows an authorized attacker to e ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61937 (Integer overflow or wraparound in Windows HTTP.sys allows an authorize ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61936 (Missing authorization in Windows Defender Firewall Service allows an a ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61934 (Use after free in Windows Bind Filter Driver allows an authorized atta ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61933 (Out-of-bounds read in Windows DWM Core Library allows an authorized at ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61932 (Access of resource using incompatible type ('type confusion') in Windo ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61930 (Heap-based buffer overflow in Windows Kernel allows an authorized atta ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61929 (Use after free in Windows Kernel allows an authorized attacker to elev ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61928 (Cleartext storage of sensitive information in Windows Hello allows an ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61927 (Use after free in Windows Bind Filter Driver allows an authorized atta ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61926 (Heap-based buffer overflow in Windows USB Driver allows an authorized ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61925 (Incorrect authorization in Windows Installer allows an authorized atta ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61924 (Out-of-bounds read in Remote Desktop Client allows an unauthorized att ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61923 (Heap-based buffer overflow in Windows Display Enhancement Service allo ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61921 (Out-of-bounds read in Remote Desktop Client allows an unauthorized att ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61920 (Concurrent execution using shared resource with improper synchronizati ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61918 (Out-of-bounds read in Remote Desktop Client allows an unauthorized att ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61368 (Heap-based buffer overflow in Windows Hyper-V allows an authorized att ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61367 (Missing authentication for critical function in Windows Remote Desktop ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61366 (Double free in Windows Network Connection Broker allows an authorized ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61365 (Missing authentication for critical function in Windows Remote Desktop ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61364 (Missing authentication for critical function in Windows Remote Desktop ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61363 (Heap-based buffer overflow in Remote Desktop Client allows an unauthor ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61361 (Use after free in Windows DHCP Client allows an authorized attacker to ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61360 (Untrusted pointer dereference in Windows GDI allows an authorized atta ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61359 (Heap-based buffer overflow in Windows Storage allows an authorized att ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61358 (Improper link resolution before file access ('link following') in Wind ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61357 (Use after free in Application Information Services allows an authorize ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61356 (Missing authentication for critical function in Windows Remote Desktop ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61355 (Heap-based buffer overflow in Windows Sensor Data Service allows an au ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61353 (Heap-based buffer overflow in Windows Telephony Service allows an auth ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61352 (Concurrent execution using shared resource with improper synchronizati ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61350 (Buffer over-read in Windows NTFS allows an unauthorized attacker to di ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61349 (Use after free in Windows Work Folder Service allows an authorized att ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61348 (Use after free in Windows Ancillary Function Driver for WinSock allows ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61347 (Buffer over-read in Windows Event Logging Service allows an authorized ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61346 (Use after free in Windows Graphics Kernel allows an authorized attacke ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-61345 (Null pointer dereference in Microsoft Remote Registry Service allows a ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-59701 (A vulnerability has been identified in Simcenter Femap (All versions < ...)
- TODO: check
+ NOT-FOR-US: Siemens
CVE-2026-59700 (A vulnerability has been identified in Simcenter Femap (All versions < ...)
- TODO: check
+ NOT-FOR-US: Siemens
CVE-2026-59693 (A vulnerability has been identified in Desigo DXR2 (All versions < V01 ...)
- TODO: check
+ NOT-FOR-US: Siemens
CVE-2026-59138 (Null pointer dereference in Microsoft Remote Registry Service allows a ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-59137 (Use of uninitialized resource in Windows Event Logging Service allows ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-59136 (Use of uninitialized resource in Microsoft COM for Windows allows an a ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-59135 (Weak authentication in Microsoft Windows Search Component allows an au ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-59134 (Heap-based buffer overflow in Remote Desktop Client allows an unauthor ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-59133 (Execution with unnecessary privileges in Microsoft High Performance Co ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-59132 (Null pointer dereference in Windows TCP/IP allows an unauthorized atta ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-59131 (No cwe for this issue in AMD Zen allows an authorized attacker to disc ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-59130 (No cwe for this issue in AMD Zen allows an authorized attacker to disc ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-59128 (Out-of-bounds read in Windows Encrypting File System (EFS) allows an a ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-59127 (Integer overflow or wraparound in Windows Installer allows an authoriz ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-59126 (Concurrent execution using shared resource with improper synchronizati ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-59125 (Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an au ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-59124 (Deserialization of untrusted data in Microsoft High Performance Comput ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-59122 (Concurrent execution using shared resource with improper synchronizati ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-59119 (Incorrect default permissions in Microsoft PowerShell allows an author ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-59113 (Missing authorization in Visual Studio Code allows an unauthorized att ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-59086 (A vulnerability has been identified in Simcenter Nastran (All versions ...)
- TODO: check
+ NOT-FOR-US: Siemens
CVE-2026-58651 (Heap-based buffer overflow in Microsoft Office Word allows an unauthor ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-58650 (Authorization bypass through user-controlled key in Visual Studio Code ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-58641 (Integer overflow or wraparound in .NET allows an unauthorized attacker ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-58639 (Server-side request forgery (ssrf) in Microsoft Office SharePoint allo ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-58612 (Server-side request forgery (ssrf) in Microsoft PowerShell Core allows ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-58231 (SAP Commerce Cloud allows an unauthenticated attacker to abuse a defau ...)
- TODO: check
+ NOT-FOR-US: SAP
CVE-2026-58115 (A vulnerability has been identified in SIMATIC IoT2050 Advanced (6ES76 ...)
- TODO: check
+ NOT-FOR-US: Siemens
CVE-2026-57263 (A vulnerability has been identified in LOGO! Soft Comfort (All version ...)
- TODO: check
+ NOT-FOR-US: Siemens
CVE-2026-57262 (A vulnerability has been identified in LOGO! Soft Comfort (All version ...)
- TODO: check
+ NOT-FOR-US: Siemens
CVE-2026-57105 (Improper neutralization of input during web page generation ('cross-si ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-57104 (Improper neutralization of input during web page generation ('cross-si ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-56721 (CamaleonCMS version 2.9.2 and earlier contains a privilege escalation ...)
TODO: check
CVE-2026-56720 (CamaleonCMS version 2.9.2 and earlier contains a missing authorization ...)
TODO: check
CVE-2026-56179 (Origin validation error in Windows Network Address Translation (NAT) a ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-56174 (Untrusted search path in Windows Narrator Braille allows an authorized ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-54984 (Heap-based buffer overflow in Windows Imaging Component allows an unau ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-54981 (Inclusion of functionality from untrusted control sphere in Visual Stu ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-54123 (Exposure of sensitive information to an unauthorized actor in Microsof ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-54113 (Allocation of resources without limits or throttling in Windows Kernel ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-53416 (Path traversal in Zoom VDI Client and Plugins may allow an authenticat ...)
- TODO: check
+ NOT-FOR-US: Zoom
CVE-2026-53415 (Use after Free in the annotator function of Zoom Clients may allow a m ...)
- TODO: check
+ NOT-FOR-US: Zoom
CVE-2026-53414 (Missing bounds check in the annotator function of Zoom Clients allows ...)
- TODO: check
+ NOT-FOR-US: Zoom
CVE-2026-53413 (Missing bounds check in the annotator function of Zoom Clients allows ...)
- TODO: check
+ NOT-FOR-US: Zoom
CVE-2026-51584 (An issue in usememos v0.27.1 allows a remote attacker to achieve accou ...)
TODO: check
CVE-2026-51583 (An issue in usememos through v0.30.0 allows a remote authenticated att ...)
TODO: check
CVE-2026-50516 (Missing authentication for critical function in Microsoft Azure Kubern ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-50472 (Heap-based buffer overflow in Windows LUAFV allows an authorized attac ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-50237 (A Server-Side Request Forgery and supply chain flaw was found in the O ...)
TODO: check
CVE-2026-50236 (An authenticated SSRF flaw was found in the OpenShift Console Dev Cons ...)
TODO: check
CVE-2026-50064 (A vulnerability has been identified in Solid Edge SE2025 (All versions ...)
- TODO: check
+ NOT-FOR-US: Siemens
CVE-2026-50063 (A vulnerability has been identified in Solid Edge SE2025 (All versions ...)
- TODO: check
+ NOT-FOR-US: Siemens
CVE-2026-50062 (A vulnerability has been identified in Solid Edge SE2025 (All versions ...)
- TODO: check
+ NOT-FOR-US: Siemens
CVE-2026-50061 (A vulnerability has been identified in Solid Edge SE2025 (All versions ...)
- TODO: check
+ NOT-FOR-US: Siemens
CVE-2026-50060 (A vulnerability has been identified in Solid Edge SE2025 (All versions ...)
- TODO: check
+ NOT-FOR-US: Siemens
CVE-2026-50059 (A vulnerability has been identified in Solid Edge SE2025 (All versions ...)
- TODO: check
+ NOT-FOR-US: Siemens
CVE-2026-50058 (A vulnerability has been identified in Solid Edge SE2025 (All versions ...)
- TODO: check
+ NOT-FOR-US: Siemens
CVE-2026-49179 (Improper neutralization of special elements used in a command ('comman ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-48809 (python-engineio is a Python implementation of the Engine.IO realtime c ...)
TODO: check
CVE-2026-48802 (python-engineio is a Python implementation of the Engine.IO realtime c ...)
@@ -1179,85 +1179,85 @@ CVE-2026-48494 (TypeBot is a chatbot builder tool. In version 3.16.1, an authent
CVE-2026-48483 (TypeBot is a chatbot builder tool. Prior to version 3.17.0, Typebot's ...)
TODO: check
CVE-2026-48447 (Lightroom Classic is affected by an Incorrect Authorization vulnerabil ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48446 (CAI Content Credentials is affected by an Improper Limitation of a Pat ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48445 (CAI Content Credentials is affected by an Integer Overflow or Wraparou ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48444 (CAI Content Credentials is affected by an Integer Overflow or Wraparou ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48443 (CAI Content Credentials is affected by an Uncontrolled Resource Consum ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48442 (CAI Content Credentials is affected by an Improper Limitation of a Pat ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48441 (Lightroom Classic is affected by an Improper Limitation of a Pathname ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48440 (ColdFusion is affected by a Heap-based Buffer Overflow vulnerability t ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48439 (CAI Content Credentials is affected by an Uncontrolled Resource Consum ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48438 (CAI Content Credentials is affected by a NULL Pointer Dereference vuln ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48437 (CAI Content Credentials is affected by an Improper Certificate Validat ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48436 (CAI Content Credentials is affected by an Improper Input Validation vu ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48435 (CAI Content Credentials is affected by an Integer Underflow (Wrap or W ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48434 (CAI Content Credentials is affected by an Uncontrolled Resource Consum ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48416 (Adobe Commerce is affected by an Incorrect Authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48415 (Adobe Commerce is affected by an Incorrect Authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48414 (Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vuln ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48413 (Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vuln ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48412 (Adobe Commerce is affected by an Incorrect Authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48411 (Adobe Commerce is affected by an Incorrect Authorization vulnerability ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48410 (Lightroom Classic is affected by an out-of-bounds write vulnerability ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48409 (Lightroom Classic is affected by an out-of-bounds write vulnerability ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48408 (Lightroom Classic is affected by an out-of-bounds write vulnerability ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48407 (Lightroom Classic is affected by an out-of-bounds write vulnerability ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48406 (Lightroom Classic is affected by an out-of-bounds write vulnerability ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48405 (Lightroom Classic is affected by an out-of-bounds write vulnerability ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48404 (Lightroom Classic is affected by an out-of-bounds write vulnerability ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48397 (Lightroom Classic is affected by a Deserialization of Untrusted Data v ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48387 (CAI Content Credentials is affected by an Integer Overflow or Wraparou ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48386 (ColdFusion is affected by a Use of a Broken or Risky Cryptographic Alg ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48385 (ColdFusion is affected by an Improper Neutralization of Special Elemen ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48384 (ColdFusion is affected by an Improper Input Validation vulnerability t ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48381 (Adobe Campaign Classic (ACC) is affected by an Improper Neutralization ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48376 (is affected by an Improper Encoding or Escaping of Output vulnerabilit ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48375 (ColdFusion is affected by an Incorrect Authorization vulnerability tha ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48362 (ColdFusion is affected by an Improper Neutralization of Special Elemen ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-48056 (Streambert is a cross-platform Electron Desktop App to stream and down ...)
TODO: check
CVE-2026-48046 (Streambert is a cross-platform Electron Desktop App to stream and down ...)
TODO: check
CVE-2026-47940 (Lightroom Classic is affected by an Integer Overflow or Wraparound vul ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-47922 (CAI Content Credentials is affected by a Server-Side Request Forgery ( ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-47705 (TypeBot is a chatbot builder tool. Version 3.16.1 has a CSV injection ...)
TODO: check
CVE-2026-47704 (TypeBot is a chatbot builder tool. Prior to version 3.17.0, an authent ...)
@@ -1265,25 +1265,25 @@ CVE-2026-47704 (TypeBot is a chatbot builder tool. Prior to version 3.17.0, an a
CVE-2026-47702 (TypeBot is a chatbot builder tool. In version 3.16.1, API tokens (bear ...)
TODO: check
CVE-2026-47299 (Improper neutralization of special elements used in a command ('comman ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-47285 (Improper neutralization of special elements used in a command ('comman ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-46670 (YesWiki is a wiki system written in PHP. Prior to version 4.6.4, an u ...)
TODO: check
CVE-2026-43606 (Observable Timing Discrepancy in the AMD Vitis Libraries ECDSA secp256 ...)
TODO: check
CVE-2026-42976 (Missing authentication for critical function in Windows RPC API allows ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-42142 (TypeBot is a chatbot builder tool. Prior to version 3.17.0, the `handl ...)
TODO: check
CVE-2026-40375 (Missing authorization in Dynamics Business Central allows an authorize ...)
- TODO: check
+ NOT-FOR-US: Microsoft
CVE-2026-39452 (Protection mechanism failure for some Intel(R) Transfer Learning Tool ...)
TODO: check
CVE-2026-35502 (Deserialization of untrusted data for some Intel(R) Extension for PyTo ...)
TODO: check
CVE-2026-34635 (is affected by a Use of Hard-coded Cryptographic Key vulnerability tha ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-34175 (Uncontrolled search path for some Hardware-Aware-Automated-MachineLear ...)
TODO: check
CVE-2026-33922 (A path traversal vulnerability was discovered in the Offline archives ...)
@@ -1307,19 +1307,19 @@ CVE-2026-28700 (Uncontrolled search path for some EquiTriton before version f5dd
CVE-2026-27765 (Improper input validation for some vLLM Hardware Plugin for Intel(R) G ...)
TODO: check
CVE-2026-27302 (Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-25652 (is affected by an Incorrect Authorization vulnerability that could res ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-25194 (Out-of-bounds write in the firmware for the Intel(R) Slim Bootloader m ...)
TODO: check
CVE-2026-24911 (Stack-based buffer overflow for some Intel(R) PROSet/Wireless WiFi Sof ...)
- TODO: check
+ NOT-FOR-US: Intel
CVE-2026-24693 (Protection mechanism failure for some Intel(R) oneCCL Bindings for PyT ...)
TODO: check
CVE-2026-24099 (Use after free for some Intel(R) PROSet/Wireless WiFi Software for Win ...)
- TODO: check
+ NOT-FOR-US: Intel
CVE-2026-22887 (Improper buffer restrictions for some Intel(R) PROSet/Wireless WiFi So ...)
- TODO: check
+ NOT-FOR-US: Intel
CVE-2026-21400 (Protection mechanism failure for some Intel(R) AI Reference Models bef ...)
TODO: check
CVE-2026-21399 (Heap-based buffer overflow for the Intel(R) Open Volume Kernel Library ...)
@@ -1327,47 +1327,47 @@ CVE-2026-21399 (Heap-based buffer overflow for the Intel(R) Open Volume Kernel L
CVE-2026-21387 (Protection mechanism failure for some Intel(R) LLM Library for PyTorch ...)
TODO: check
CVE-2026-21279 (is affected by an Improper Input Validation vulnerability that could r ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-21273 (is affected by an Improper Input Validation vulnerability that could r ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-21269 (is affected by a stored Cross-Site Scripting (XSS) vulnerability that ...)
- TODO: check
+ NOT-FOR-US: Adobe
CVE-2026-20913 (Improper input validation for some Intel(R) Neural Compressor software ...)
- TODO: check
+ NOT-FOR-US: Intel
CVE-2026-20908 (Time-of-check time-of-use race condition for the Intel(R) NPU Driver f ...)
TODO: check
CVE-2026-20906 (Protection mechanism failure for some Intel(R) Neural Compressor softw ...)
- TODO: check
+ NOT-FOR-US: Intel
CVE-2026-20903 (Protection mechanism failure for some Intel(R) AI Containers before ve ...)
TODO: check
CVE-2026-20898 (Improper access control in the firmware for some in Alias Checking Tru ...)
TODO: check
CVE-2026-20891 (Improper authentication for some Intel(R) PROSet/Wireless WiFi Softwar ...)
- TODO: check
+ NOT-FOR-US: Intel
CVE-2026-20890 (Improper privilege management for some Intel(R) PROSet/Wireless WiFi S ...)
- TODO: check
+ NOT-FOR-US: Intel
CVE-2026-20886 (Out-of-bounds write for some Intel(R) PROSet/Wireless WiFi Software fo ...)
- TODO: check
+ NOT-FOR-US: Intel
CVE-2026-20885 (Improper authentication in the Intel(R) TDX module for some Intel(R) p ...)
TODO: check
CVE-2026-20878 (Null pointer dereference for some Intel(R) PROSet/Wireless WiFi Softwa ...)
- TODO: check
+ NOT-FOR-US: Intel
CVE-2026-20799 (Untrusted search path for some Battery Life Diagnostic Tool software b ...)
TODO: check
CVE-2026-20795 (Improper buffer restrictions for some Intel(R) PROSet/Wireless WiFi So ...)
- TODO: check
+ NOT-FOR-US: Intel
CVE-2026-20789 (Improper access control for some Intel(R) PROSet/Wireless WiFi Softwar ...)
- TODO: check
+ NOT-FOR-US: Intel
CVE-2026-20787 (Null pointer dereference for some Intel(R) PROSet/Wireless WiFi Softwa ...)
- TODO: check
+ NOT-FOR-US: Intel
CVE-2026-20786 (Out-of-bounds read for the Intel(R) NPU Driver for all versions within ...)
TODO: check
CVE-2026-20783 (Improper conditions check in the firmware for the Intel(R) NPU Driver ...)
TODO: check
CVE-2026-20780 (Uncontrolled resource consumption for some Intel(R) PROSet/Wireless Wi ...)
- TODO: check
+ NOT-FOR-US: Intel
CVE-2026-20778 (Out-of-bounds read for some Intel(R) PROSet/Wireless WiFi Software for ...)
- TODO: check
+ NOT-FOR-US: Intel
CVE-2026-20776 (Improper conditions check for some Intel(R) PROSet/Wireless WiFi Softw ...)
TODO: check
CVE-2026-20775 (Uncaught exception for some Intel(R) TDX modules within Ring 0: Trust ...)
@@ -1389,13 +1389,13 @@ CVE-2026-20749 (Out-of-bounds read for some Intel(R) PROSet/Wireless WiFi Softwa
CVE-2026-20747 (Improper conditions check for some Intel(R) PROSet/Wireless WiFi Softw ...)
TODO: check
CVE-2026-20745 (Out-of-bounds write for some Intel(R) PROSet/Wireless WiFi Software fo ...)
- TODO: check
+ NOT-FOR-US: Intel
CVE-2026-20741 (Improper access control for some Intel(R) PROSet/Wireless WiFi Softwar ...)
TODO: check
CVE-2026-20739 (Improper conditions check for some Intel(R) PROSet/Wireless WiFi Softw ...)
- TODO: check
+ NOT-FOR-US: Intel
CVE-2026-20737 (Exposure of sensitive information to an unauthorized actor for some In ...)
- TODO: check
+ NOT-FOR-US: Intel
CVE-2026-20734 (Improper initialization in some firmware for some Intel(R) Active Mana ...)
TODO: check
CVE-2026-20731 (Improper buffer restrictions for the Intel(R) NPU Driver for all versi ...)
@@ -1403,7 +1403,7 @@ CVE-2026-20731 (Improper buffer restrictions for the Intel(R) NPU Driver for all
CVE-2026-20728 (Protection mechanism failure for some Intel Extension for TensorFlow s ...)
TODO: check
CVE-2026-20727 (Null pointer dereference for some Intel(R) PROSet/Wireless WiFi Softwa ...)
- TODO: check
+ NOT-FOR-US: Intel
CVE-2026-20715 (Improper input validation in some firmware for some Intel(R) Active Ma ...)
TODO: check
CVE-2026-20712 (Incomplete cleanup in some UEFI firmware for some Intel(R) reference p ...)
@@ -1425,7 +1425,7 @@ CVE-2026-19519 (A flaw was found in claircore's RPM package scanner. Crafted RPM
CVE-2026-19434 (Cross-site Scripting in the finding renderer in maalfer Pentestify bef ...)
TODO: check
CVE-2026-19418 (The referrer enforcement introduced with TYPO3-CORE-SA-2020-006 (CVE-2 ...)
- TODO: check
+ NOT-FOR-US: TYPO3 (core or extensions)
CVE-2026-19078 (A flaw was found in the oauth-server component. This open redirect vul ...)
TODO: check
CVE-2026-18972 (An authenticated attacker can spoof another GUI user's identity by sen ...)
@@ -1491,17 +1491,17 @@ CVE-2026-18636 (The Velociraptor gRPC API has a VFSGetBuffer endpoint which allo
CVE-2026-18635 (Velociraptor's VQL has a query() plugin which allows running a VQL que ...)
TODO: check
CVE-2026-18247 (A Cross Site Scripting (XSS) vulnerability in the Web Portals of AtHoc ...)
- TODO: check
+ NOT-FOR-US: Blackberry
CVE-2026-18129 (Cleartext transmission of sensitive information in the Core of Ivanti ...)
- TODO: check
+ NOT-FOR-US: Ivanti
CVE-2026-18127 (External control of a filename in the Core of Ivanti Endpoint Manager ...)
- TODO: check
+ NOT-FOR-US: Ivanti
CVE-2026-18125 (An out-of-boundsread intheAgent ofIvanti Endpoint Managerbeforeversion ...)
- TODO: check
+ NOT-FOR-US: Ivanti
CVE-2026-17535 (Velociraptor's NTFS parsing library mishandles several out of bound an ...)
TODO: check
CVE-2026-17061 (A Deserialization of Untrusted Data vulnerability affecting SIMULIA Ex ...)
- TODO: check
+ NOT-FOR-US: Dassault Systemes
CVE-2026-15567 (A flaw was found in Wildfly. A remote unauthenticated attacker can tri ...)
TODO: check
CVE-2026-15565 (A flaw was found in Undertow. A remote attacker can cause Out of Memor ...)
@@ -1521,33 +1521,33 @@ CVE-2026-15555 (A flaw was found in JBoss marshalling. The Infinispan session re
CVE-2026-15554 (the Undertow AJP listener honours forged ssl_cert and is_ssl AJP attri ...)
TODO: check
CVE-2026-15426 (The AcyMailing \u2013 An Ultimate Newsletter Plugin and Marketing Auto ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-14180 (A flaw was found in the ChunkReader component of the Undertow HTTP ser ...)
TODO: check
CVE-2026-13739 (A legacy endpoint in Command Center contained an unauthenticated serve ...)
- TODO: check
+ NOT-FOR-US: Commvault
CVE-2026-13738 (CommServe contained an authorization bypass vulnerability affecting a ...)
- TODO: check
+ NOT-FOR-US: Commvault
CVE-2026-13737 (CommServe contained an allowlist bypass vulnerability affecting comman ...)
- TODO: check
+ NOT-FOR-US: Commvault
CVE-2026-12571 (An authentication bypass in ManageEngine DDI Central's password-reset ...)
- TODO: check
+ NOT-FOR-US: Zoho
CVE-2026-11814 (A command injection vulnerability in the listed NETGEAR models allows ...)
- TODO: check
+ NOT-FOR-US: Netgear
CVE-2026-11739 (A command injection vulnerability in certain affected NETGEAR Nighthaw ...)
- TODO: check
+ NOT-FOR-US: Netgear
CVE-2026-11738 (Insufficient input validation vulnerability in thelisted NETGEAR model ...)
- TODO: check
+ NOT-FOR-US: Netgear
CVE-2026-11737 (Insufficient input validation vulnerability in thelisted NETGEAR mode ...)
- TODO: check
+ NOT-FOR-US: Netgear
CVE-2026-11736 (A stack-based buffer overflow vulnerability affects certain NETGEAR mo ...)
- TODO: check
+ NOT-FOR-US: Netgear
CVE-2026-11735 (A stack-based buffer overflow vulnerability affects the listed NETGEAR ...)
- TODO: check
+ NOT-FOR-US: Netgear
CVE-2026-11734 (A buffer overflow vulnerability in the listed NETGEAR models allows an ...)
- TODO: check
+ NOT-FOR-US: Netgear
CVE-2026-11733 (A buffer overflow vulnerability in the listed NETGEAR models allows a ...)
- TODO: check
+ NOT-FOR-US: Netgear
CVE-2026-10579 (A flaw was found in Picketlink Federation SAML; the unsolcited respons ...)
TODO: check
CVE-2026-0465 (A Use\u2011After\u2011Free (UAF) vulnerability in the AMD Ryzen\u2122 ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/835068d938acd92060f89e04e4b2ff24c2dd592e
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/835068d938acd92060f89e04e4b2ff24c2dd592e
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260811/12a2eefd/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list