Live · 98 sources · updated 3m ago

· 19:33 UTC

The Security Standard

A daily wire for defenders: vulnerabilities, advisories, research, standards.

Section

Advisories

Vendor PSIRT bulletins, CERT notes, CISA and partner-agency alerts, and distribution security notices.

516 matching records, 3 with confirmed exploitation.

  1. 67
    CISA alert CISA

    CISA Adds One Known Exploited Vulnerability to Catalog

    CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-19868 SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability This…

    Exploited CVE-2026-19868 SonicWall Edge / VPN / firewall
  2. 65
    CISA alert CISA

    CISA Adds Four Known Exploited Vulnerabilities to Catalog

    CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-102895 GPUStack Improper Authentication Vulnerability CVE-2026-116779 SignalWire…

    Exploited CVE-2026-102895CVE-2026-116779CVE-2026-123158+1 more OpenSSH IBM Remote access
  3. 53
    Ubuntu notice Ubuntu

    Unbound vulnerabilities

    USN-8946-1 fixed vulnerabilities in Unbound in Ubuntu 26.04 LTS, Ubuntu 24.04 LTS, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS, Ubuntu 18.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 14.04 LTS. This update provides the corresponding update for…

    CVE-2026-80225CVE-2026-81634CVE-2026-85501+5 more Canonical Operating system
  4. 46
    Ubuntu notice Ubuntu

    Linux kernel vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - USB Gadget drivers; - Memory management…

    CVE-2024-52560CVE-2024-53056CVE-2024-58094+57 more Canonical Linux kernel Operating system
  5. 46
    Ubuntu notice Ubuntu

    Linux kernel vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - USB Gadget drivers; - Memory management…

    CVE-2024-52560CVE-2024-53056CVE-2024-58094+57 more Canonical Linux kernel Operating system
  6. 46
    Ubuntu notice Ubuntu

    Apache HTTP Server vulnerabilities

    Zhang San, Ankit Prateek, Zhen Kong, SeungHyun Cho, Ryoma Nishioka, Keita Sode and Hyojae Lee discovered that Apache HTTP Server did not correctly handle certain memory operations. An attacker could possibly use this issue to…

    CVE-2026-46729CVE-2026-47360CVE-2026-48005+14 more Canonical Apache Software Foundation Operating system
  7. 43
    CISA alert CISA

    CISA Adds One Known Exploited Vulnerability to Catalog

    CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2024-27834 Apple Multiple Products Improper Authentication Vulnerability This type of…

    Exploited CVE-2024-27834 Apple
  8. 42
    MS-ISAC advisory MS-ISAC

    Multiple Vulnerabilities in SonicWall SonicOS Could Allow for Authentication Bypass

    Multiple vulnerabilities have been discovered in SonicWall SonicOS, the most severe of which could allow for Authentication Bypass. SonicOS is the operating system that powers SonicWall firewalls and network security appliances.…

    SonicWall Edge / VPN / firewall
  9. 41
    Red Hat advisory Red Hat

    Moderate: unbound security, bug fix, and enhancement update

    An update for unbound is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a…

    Red Hat Operating system
  10. 41
    Advisory MSRC

    Remote Desktop Client Remote Code Execution Vulnerability

    Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

    CVE-2026-95964 Microsoft Remote access
  11. 41
    Advisory MSRC

    Windows Remote Desktop Services Remote Code Execution Vulnerability

    Use after free in Remote Desktop Gateway Service allows an authorized attacker to execute code locally.

    CVE-2026-69565 Microsoft Operating system
  12. 41
    Advisory MSRC

    Windows Remote Desktop Client Information Disclosure Vulnerability

    Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.

    CVE-2026-108419 Microsoft Operating system
  13. 41
    Advisory MSRC

    Windows Remote Desktop Client Information Disclosure Vulnerability

    Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.

    CVE-2026-108418 Microsoft Operating system
  14. 41
    Advisory MSRC

    Windows Remote Desktop Client Information Disclosure Vulnerability

    Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.

    CVE-2026-108417 Microsoft Operating system
  15. 41
    Advisory MSRC

    Windows Kerberos Denial of Service Vulnerability

    Out-of-bounds read in Windows Kerberos allows an authorized attacker to deny service over a network.

    CVE-2026-96082 Microsoft Operating system
  16. 41
    Advisory MSRC

    Windows Remote Desktop Services Remote Code Execution Vulnerability

    Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code locally.

    CVE-2026-69327 Microsoft Operating system
  17. 41
    Advisory MSRC

    Windows Active Directory Certificate Services Information Disclosure Vulnerability

    Buffer over-read in Windows Active Directory Certificate Services allows an authorized attacker to disclose information over a network.

    CVE-2026-95884 Microsoft Identity
  18. 41
    Advisory MSRC

    Windows Hyper-V Denial of Service Vulnerability

    Use after free in Windows Hyper-V allows an unauthorized attacker to deny service over a network.

    CVE-2026-95913 Microsoft Operating system
  19. 41
    Advisory MSRC

    Windows Kerberos Denial of Service Vulnerability

    Missing release of memory after effective lifetime in Windows Kerberos allows an unauthorized attacker to deny service over a network.

    CVE-2026-70240 Microsoft Operating system
  20. 41
    Advisory MSRC

    Windows Hyper-V Denial of Service Vulnerability

    Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.

    CVE-2026-96965 Microsoft Operating system
  21. 41
    Advisory MSRC

    Windows Active Directory Certificate Services Security Feature Bypass

    Improper certificate validation in Windows Active Directory Certificate Services allows an authorized attacker to bypass a security feature over a network.

    CVE-2026-105590 Microsoft Identity
  22. 41
    Red Hat advisory Red Hat

    Moderate: unbound security, bug fix, and enhancement update

    An update for unbound is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives…

    Red Hat Operating system
  23. 40
    AWS bulletin AWS

    CVE-2026-125271 - AWS API MCP Server Security Policy Bypass via Incorrect Operation Name Normalization

    Bulletin ID: 2026-176-AWS Publication Date: 11/10/2026 08:30 AM PST Description: We identified CVE-2026-125271 of AWS API MCP Server. The server normalized operation names incorrectly before comparing them to the operator ' s…

    CVE-2026-125271 Amazon Web Services Anthropic AI infrastructure
  24. 40
    Ubuntu notice Ubuntu

    Linux kernel vulnerabilities

    It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an…

    CVE-2023-20585CVE-2024-52560CVE-2024-53056+57 more Canonical Linux kernel Operating system
  25. 40
    Ubuntu notice Ubuntu

    Linux kernel vulnerabilities

    It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an…

    CVE-2023-20585CVE-2024-52560CVE-2024-53056+57 more Canonical Linux kernel Operating system
  26. 40
    Ubuntu notice Ubuntu

    Linux kernel (Azure) vulnerabilities

    It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an…

    CVE-2023-20585CVE-2024-52560CVE-2024-53056+57 more Canonical Microsoft Cloud platform
  27. 40
    Ubuntu notice Ubuntu

    Linux kernel (Raspberry Pi) vulnerabilities

    Duoming Zhou discovered race conditions in the AX.25 amateur radio protocol implementation in the Linux kernel, leading to use-after-free vulnerabilities. A local attacker could possibly use this to cause a denial of service…

    CVE-2022-1205CVE-2022-3114CVE-2022-49234+57 more Canonical Linux kernel Operating system
  28. 40
    AWS bulletin AWS

    CVE-2026-124034, CVE-2026-124035: Issues with Amazon Braket SDK

    Bulletin ID: 2026-175-AWS Publication Date: 11/09/2026 14:15 PM PST Description: Amazon Braket SDK is an open source Python library that customers use to run quantum tasks and hybrid jobs on Amazon Braket. We identified…

    CVE-2026-124034CVE-2026-124035 Amazon Web Services Developer platform
  29. 39
    Cisco advisory Cisco PSIRT

    Cisco Identity Services Engine Authorization Bypass Vulnerability

    A vulnerability in the authorization mechanism of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an unauthenticated, remote attacker to obtain an endpoint identity certificate.…

    Fix available CVE-2026-20241 Cisco Identity
  30. 38
    Advisory MSRC

    Chromium CVE-2026-76028: Use after free

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-76028 Microsoft Google Browser
  31. 38
    Advisory MSRC

    Chromium CVE-2026-76029: Memory corruption

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-76029 Microsoft Google Browser
  32. 38
    Advisory MSRC

    Chromium CVE-2026-76024: Memory corruption

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-76024 Microsoft Google Browser
  33. 38
    Advisory MSRC

    Chromium CVE-2026-76025: Use after free

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-76025 Microsoft Google Browser
  34. 38
    Advisory MSRC

    Chromium CVE-2026-76031: Use after free

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-76031 Microsoft Google Browser
  35. 38
    Advisory MSRC

    Chromium CVE-2026-76026: Memory corruption

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-76026 Microsoft Google Browser
  36. 38
    Advisory MSRC

    Chromium CVE-2026-76030: Memory corruption

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-76030 Microsoft Google Browser
  37. 38
    Advisory MSRC

    Chromium CVE-2026-76027: Memory corruption

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-76027 Microsoft Google Browser
  38. 38
    Advisory MSRC

    Chromium CVE-2026-118321: Use after free

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-118321 Microsoft Google Browser
  39. 38
    Advisory MSRC

    Chromium CVE-2026-119268: Integer overflow

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119268 Microsoft Google Browser
  40. 38
    Advisory MSRC

    Chromium CVE-2026-119269: Use after free

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119269 Microsoft Google Browser
  41. 38
    Advisory MSRC

    Chromium CVE-2026-119264: Memory corruption

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119264 Microsoft Google Browser
  42. 38
    Advisory MSRC

    Chromium CVE-2026-119265: Memory corruption

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119265 Microsoft Google Browser
  43. 38
    Advisory MSRC

    Chromium CVE-2026-119266: Use after free

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119266 Microsoft Google Browser
  44. 38
    Advisory MSRC

    Chromium CVE-2026-119267: Memory corruption

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119267 Microsoft Google Browser
  45. 38
    Advisory MSRC

    Chromium CVE-2026-119260: Use after free

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119260 Microsoft Google Browser
  46. 38
    Advisory MSRC

    Chromium CVE-2026-119261: Improper input validation

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119261 Microsoft Google Browser
  47. 38
    Advisory MSRC

    Chromium CVE-2026-119262: Improper input validation

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119262 Microsoft Google Browser
  48. 38
    Advisory MSRC

    Chromium CVE-2026-119263: Memory corruption

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119263 Microsoft Google Browser
  49. 38
    Advisory MSRC

    Chromium CVE-2026-119272: Out of bounds read

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119272 Microsoft Google Browser
  50. 38
    Advisory MSRC

    Chromium CVE-2026-119271: Use after free

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119271 Microsoft Google Browser
  51. 38
    Advisory MSRC

    Chromium CVE-2026-119270: Improper input validation

    This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

    Fix available CVE-2026-119270 Microsoft Google Browser
  52. 37
    Ubuntu notice Ubuntu

    OpenJDK 21 vulnerabilities

    It was discovered that the Security component of OpenJDK 21 did not correctly authenticate users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-83374) It was discovered that the JSSE…

    CVE-2026-83374CVE-2026-83376CVE-2026-83378+37 more Canonical Oracle Developer platform
  53. 37
    Ubuntu notice Ubuntu

    OpenJDK 17 vulnerabilities

    It was discovered that the Security component of OpenJDK 17 did not correctly authenticate users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-83374) It was discovered that the JSSE…

    CVE-2026-83374CVE-2026-83376CVE-2026-83380+35 more Canonical Oracle Developer platform
  54. 37
    Ubuntu notice Ubuntu

    OpenJDK 8 vulnerabilities

    It was discovered that the Security component of OpenJDK 8 did not correctly authenticate users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-83374) It was discovered that the JSSE component…

    CVE-2026-83374CVE-2026-83376CVE-2026-91461+35 more Canonical Oracle Developer platform
  55. 37
    Ubuntu notice Ubuntu

    OpenJDK 11 vulnerabilities

    It was discovered that the Security component of OpenJDK 11 did not correctly authenticate users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-83374) It was discovered that the JSSE…

    CVE-2026-83374CVE-2026-83376CVE-2026-91461+37 more Canonical Oracle Developer platform
  56. 36
    Ubuntu notice Ubuntu

    pyasn1 vulnerabilities

    It was discovered that pyasn1 did not properly bound the size of long-form tag identifiers when parsing BER, CER, or DER encoded data. An attacker could possibly use this issue to cause applications decoding untrusted ASN.1 data…

    Fix available CVE-2026-59884CVE-2026-59885CVE-2026-59886+4 more Canonical Operating system
  57. 35
    MS-ISAC advisory MS-ISAC

    Multiple Vulnerabilities in SAP Products Could Allow for Arbitrary Code Execution

    Multiple vulnerabilities have been discovered in SAP Products, the most severe of which could allow for arbitrary code execution. SAP NetWeaver is SAP’s technology platform and application server stack (ABAP and Java) that…

    SAP Web platform
  58. 35
    MS-ISAC advisory MS-ISAC

    Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution

    Multiple vulnerabilities have been discovered in Google Chrome, the most severe of which could allow for arbitrary code execution. Successful exploitation of the most severe of these vulnerabilities could allow for arbitrary code…

    Google Browser
  59. 35
    Chrome release Chrome Releases

    Stable Channel Update for Desktop

    The Stable channel has been updated to 157.0.8103.50/.51 for Windows and Mac and 157.0.8103.50 to Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log . Security Fixes…

    CVE-2026-125345CVE-2026-125347CVE-2026-125343+6 more Google
  60. 35
    Chrome release Chrome Releases

    Extended Stable Update for Desktop

    The Extended Stable channel has been updated to 156.0.8078.96 for Windows and Mac which will roll out over the coming days/weeks. Security Fixes Note: Access to bug details and links may be kept restricted until a majority of…

    CVE-2026-121068CVE-2026-121076CVE-2026-121095+8 more Google
  61. 34
    Mozilla security Mozilla

    Open research, stronger privacy: Making Firefox users harder to fingerprint

    Firefox is strengthening protection against trackers that recognize you across websites, even when they don’t use cookies. The latest fingerprinting protections shipped in Firefox reduce the extractable distinguishing details…

    Mozilla Browser
  62. 34
    Red Hat advisory Red Hat

    Important: grafana security, bug fix, and enhancement update

    An update for grafana is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives…

    Red Hat Grafana Labs Operating system
  63. 34
    Red Hat advisory Red Hat

    Low: edk2 security, bug fix, and enhancement update

    An update for edk2 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a…

    Red Hat Operating system
  64. 34
    Red Hat advisory Red Hat

    Moderate: sssd security, bug fix, and enhancement update

    An update for sssd is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a…

    Red Hat Operating system
  65. 34
    Red Hat advisory Red Hat

    Important: go-fdo-client security update

    An update for go-fdo-client is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which…

    Red Hat Operating system
  66. 34
    Red Hat advisory Red Hat

    Important: microcode_ctl security, bug fix, and enhancement update

    An update for microcode_ctl is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which…

    Red Hat Operating system
  67. 34
    Red Hat advisory Red Hat

    Important: cockpit-podman security update

    An update for cockpit-podman is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score…

    Red Hat Operating system
  68. 34
    Red Hat advisory Red Hat

    Moderate: krb5 security update

    An update for krb5 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a…

    Red Hat Operating system
  69. 34
    Red Hat advisory Red Hat

    Important: yggdrasil security, bug fix, and enhancement update

    An update for yggdrasil is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which…

    Red Hat Operating system
  70. 34
    Red Hat advisory Red Hat

    Important: oci-seccomp-bpf-hook security, bug fix, and enhancement update

    An update for oci-seccomp-bpf-hook is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base…

    Red Hat Operating system
  71. 34
    Red Hat advisory Red Hat

    Moderate: freerdp security, bug fix, and enhancement update

    An update for freerdp is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives…

    Red Hat Operating system
  72. 34
    Red Hat advisory Red Hat

    Important: grafana-pcp security, bug fix, and enhancement update

    An update for grafana-pcp is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which…

    Red Hat Operating system
  73. 34
    Red Hat advisory Red Hat

    Important: cockpit-podman security update

    An update for cockpit-podman is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which…

    Red Hat Operating system
  74. 34
    Red Hat advisory Red Hat

    Important: podman security, bug fix, and enhancement update

    An update for podman is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a…

    Red Hat Operating system
  75. 34
    Advisory MSRC

    Windows Graphics Kernel Information Disclosure Vulnerability

    Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to disclose information locally.

    CVE-2026-95946 Microsoft Operating system
  76. 34
    Advisory MSRC

    Windows Graphics Kernel Elevation of Privilege Vulnerability

    Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

    CVE-2026-95942 Microsoft Operating system
  77. 34
    Advisory MSRC

    Windows Graphics Kernel Elevation of Privilege Vulnerability

    Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

    CVE-2026-95953 Microsoft Operating system
  78. 34
    Advisory MSRC

    GitHub Copilot for Jetbrains Information Disclosure Vulnerability

    Improper neutralization of special elements used in a command ('command injection') in Github Copilot allows an authorized attacker to disclose information locally.

    CVE-2026-83953 Microsoft GitHub AI infrastructure
  79. 34
    Advisory MSRC

    Windows Graphics Kernel Elevation of Privilege Vulnerability

    Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

    CVE-2026-95950 Microsoft Operating system
  80. 34
    Advisory MSRC

    Microsoft.Data.SqlClient Information Disclosure Vulnerability

    Authentication bypass by capture-replay in SQL Server allows an unauthorized attacker to disclose information over a network.

    CVE-2026-62903 Microsoft Database
  81. 34
    Advisory MSRC

    Windows DHCP Server Remote Code Execution Vulnerability

    Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

    CVE-2026-72998 Microsoft Operating system
  82. 34
    Advisory MSRC

    Windows Kernel Elevation of Privilege Vulnerability

    Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.

    CVE-2026-95905 Microsoft Operating system
  83. 34
    Advisory MSRC

    Windows Graphics Kernel Elevation of Privilege Vulnerability

    Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

    CVE-2026-95906 Microsoft Operating system
  84. 34
    Advisory MSRC

    Microsoft Office SharePoint Spoofing Vulnerability

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

    CVE-2026-109456 Microsoft Collaboration
  85. 34
    Advisory MSRC

    Azure CLI Remote Code Execution Vulnerability

    Improper neutralization of special elements used in an os command ('os command injection') in Azure CLI allows an authorized attacker to execute code over a network.

    CVE-2026-109457 Microsoft Cloud platform
  86. 34
    Advisory MSRC

    Microsoft Office SharePoint Spoofing Vulnerability

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

    CVE-2026-109454 Microsoft Collaboration
  87. 34
    Advisory MSRC

    Windows Graphics Kernel Elevation of Privilege Vulnerability

    Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

    CVE-2026-95971 Microsoft Operating system
  88. 34
    Advisory MSRC

    Microsoft Office SharePoint Information Disclosure Vulnerability

    Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

    CVE-2026-109455 Microsoft Collaboration
  89. 34
    Advisory MSRC

    Windows Graphics Kernel Elevation of Privilege Vulnerability

    Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

    CVE-2026-95973 Microsoft Operating system
  90. 34
    Advisory MSRC

    Windows Kernel Elevation of Privilege Vulnerability

    Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

    CVE-2026-108403 Microsoft Operating system
  91. 34
    Advisory MSRC

    HEVC Video Extensions Remote Code Execution Vulnerability

    Integer underflow (wrap or wraparound) in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network.

    CVE-2026-114164 Microsoft Operating system
  92. 34
    Advisory MSRC

    HEVC Video Extensions Remote Code Execution Vulnerability

    Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally.

    CVE-2026-114165 Microsoft Operating system
  93. 34
    Advisory MSRC

    HEVC Video Extensions Remote Code Execution Vulnerability

    Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally.

    CVE-2026-114167 Microsoft Operating system
  94. 34
    Advisory MSRC

    Microsoft SQL Server Remote Code Execution Vulnerability

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

    CVE-2026-67632 Microsoft Database
  95. 34
    Advisory MSRC

    Microsoft SQL Server Remote Code Execution Vulnerability

    Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

    CVE-2026-67637 Microsoft Database
  96. 34
    Advisory MSRC

    Windows DNS Server Remote Code Execution Vulnerability

    Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network.

    CVE-2026-81384 Microsoft Operating system
  97. 34
    Advisory MSRC

    Windows TCP/IP Elevation of Privilege Vulnerability

    Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

    CVE-2026-96102 Microsoft Operating system
  98. 34
    Advisory MSRC

    Windows Graphics Kernel Elevation of Privilege Vulnerability

    Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

    CVE-2026-96171 Microsoft Operating system
  99. 34
    Advisory MSRC

    Azure Local Elevation of Privilege Vulnerability

    Incorrect permission assignment for critical resource in Azure Local allows an authorized attacker to elevate privileges locally.

    CVE-2026-105734 Microsoft Cloud platform
  100. 34
    Advisory MSRC

    Windows Installer Elevation of Privilege Vulnerability

    Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

    CVE-2026-96152 Microsoft Operating system

Reuse this view

Same filters as JSON: /api/items?category=advisory&window=7d&limit=100. RSS for this section: feed.xml.

Keyboard

j / k
Next / previous item
o or Enter
Open the original source
i
Open the item page
s
Save or unsave for later
/
Focus search
g then f v a r n s
Go to front, vulnerabilities, advisories, research, news, standards
t
Toggle theme
?
This help