by Kastro CVE-2026-66012 · siyuan-note siyuan
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
38,897 matching vulnerabilities · Page 119 of 778
siyuan-note
Eclipse Foundation
CVE-2026-15704 · Eclipse Foundation Eclipse BaSyx Go Components
CWE-863: ABAC authorization bypass via trailing slash route normalization in Eclipse BaSyx Go Components
RRWO
Microsoft
CVE-2026-50517 · Microsoft Microsoft 365 Copilot
Microsoft M365 Copilot Remote Code Execution Vulnerability
CVE-2026-54120 · Microsoft Surface Management Services
Microsoft Surface Remote Code Execution Vulnerability
CVE-2026-56163 · Microsoft Azure Kubernetes Service
Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability
CVE-2026-56165 · Microsoft Microsoft Account
Microsoft Account Remote Code Execution Vulnerability
CVE-2026-56191 · Microsoft Microsoft Exchange Online
Microsoft Exchange Online Tampering Vulnerability
CVE-2026-57106 · Microsoft Microsoft Purview Data Governance
Data Quality Elevation of Privilege Vulnerability
CVE-2026-58275 · Microsoft Azure DNS
Azure DNS Elevation of Privilege Vulnerability
CVE-2026-58630 · Microsoft Azure App Service for Linux
Azure App Service on Azure Stack Hub Elevation of Privilege Vulnerability
CVE-2026-62825 · Microsoft Azure Key Vault
Azure Key Vault Elevation of Privilege Vulnerability
CVE-2026-56160 · Microsoft Azure Red Hat OpenShift (ARO)
Azure Red Hat OpenShift (ARO) Elevation of Privilege Vulnerability
CVE-2026-62835 · Microsoft Azure Portal
Azure Portal Information Disclosure Vulnerability
Unknown
CVE-2026-12877 · Unknown Project Management, Bug and Issue Tracking Plugin
Software Issue Manager < 5.1.0 - Unauthenticated SQL Injection via Search Parameter
FELIPE
Linux
CVE-2026-64268 · Linux Linux
RDMA/siw: bound Read Response placement to the RREAD length
CVE-2026-64303 · Linux Linux
spi: fsl-lpspi: terminate the RX channel on TX prepare failure path
CVE-2026-64459 · Linux Linux
tcp: restore RCU grace period in tcp_ao_destroy_sock
CVE-2026-64530 · Linux Linux
net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle
CVE-2026-64320 · Linux Linux
nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page
CVE-2026-64410 · Linux Linux
netfilter: flowtable: IPIP tunnel hardware offload is not yet support
CVE-2026-64257 · Linux Linux
smb: client: reject overlapping data areas in SMB2 responses
CVE-2026-64269 · Linux Linux
RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sg
CVE-2026-64355 · Linux Linux
bpf: Reject fragmented frames in devmap
CVE-2026-64391 · Linux Linux
ksmbd: use opener credentials for ADS I/O
CVE-2026-64397 · Linux Linux
ksmbd: serialize QUERY_DIRECTORY requests per file
CVE-2026-64399 · Linux Linux
ksmbd: add permission checks for FSCTL_DUPLICATE_EXTENTS_TO_FILE
CVE-2026-64216 · Linux Linux
netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages()
CVE-2026-64232 · Linux Linux
block: recompute nr_integrity_segments in blk_insert_cloned_request
CVE-2026-64319 · Linux Linux
nvmet-auth: validate reply message payload bounds against transfer length
CVE-2026-64383 · Linux Linux
smb: client: fix double-free in SMB2_flush() replay
CVE-2026-64384 · Linux Linux
smb: client: fix change notify replay double-free
CVE-2026-64385 · Linux Linux
smb: client: fix double-free in SMB2_ioctl() replay
CVE-2026-64386 · Linux Linux
smb: client: fix query_info() replay double-free
CVE-2026-64387 · Linux Linux
smb: client: fix query directory replay double-free
CVE-2026-64439 · Linux Linux
crypto: krb5 - filter out async aead implementations at alloc
CVE-2026-64523 · Linux Linux
net/handshake: Take a long-lived file reference at submit
CVE-2026-64392 · Linux Linux
ksmbd: use opener credentials for delete-on-close
CVE-2026-64393 · Linux Linux
ksmbd: run set info with opener credentials
CVE-2026-64450 · Linux Linux
tipc: fix out-of-bounds read in broadcast Gap ACK blocks
ZAPAD
mitre
Tycon Systems
CVE-2026-61884 · Tycon Systems TPDIN-Monitor-WEB2
Tycon Systems TPDIN-Monitor-WEB2 Missing Authentication for Critical Function
Imagination Technologies
CVE-2026-16280 · Imagination Technologies Graphics DDK
GPU DDK - Integer overflow in _PMRLogicalOffsetToPhysicalOffset
openremote
SUNNET Technology Co., Ltd.
CVE-2026-24727 · SUNNET Technology Co., Ltd. Corporate Training Management System