Critical vulnerability archive — page 133

Microsoft33 vulnerabilities on this pageMax CVSS 9.9Priority 99KEV 4

CVE-2026-58644 · Microsoft Microsoft SharePoint Enterprise Server 2016

Microsoft SharePoint Remote Code Execution Vulnerability

KEV · due 19 Jul EPSS 16%public exploit SSVC act CVSS 9.8

CVE-2026-50522 · Microsoft Microsoft SharePoint Enterprise Server 2016

Microsoft SharePoint Remote Code Execution Vulnerability

KEV · due 25 Jul EPSS 3%public exploit SSVC act CVSS 9.8

CVE-2026-55040 · Microsoft Microsoft SharePoint Enterprise Server 2016

Microsoft SharePoint Server Security Feature Bypass Vulnerability

KEV · due 21 Aug EPSS 70%public exploit SSVC act CVSS 9.1

CVE-2026-56164 · Microsoft Microsoft SharePoint Enterprise Server 2016

Microsoft SharePoint Server Elevation of Privilege Vulnerability

KEV · due 17 Jul EPSS 1%public exploit SSVC act CVSS 9.8

CVE-2026-54117 · Microsoft Microsoft SQL Server 2025 (CU 6)

Microsoft SQL Server Remote Code Execution Vulnerability

EPSS 2%CVSS 9.8

CVE-2026-54118 · Microsoft Microsoft SQL Server 2016 Service Pack 3 (GDR)

Microsoft SQL Server Remote Code Execution Vulnerability

EPSS 2%CVSS 9.8

CVE-2026-55944 · Microsoft Microsoft Dynamics NAV 2018

Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability

EPSS 2%CVSS 9.8

CVE-2026-49181 · Microsoft Windows 10 Version 1607

Windows DHCP Client Elevation of Privilege Vulnerability

EPSS 1%CVSS 9.8

CVE-2026-50330 · Microsoft Windows 10 Version 1607

Windows Remote Desktop Client Elevation of Privilege Vulnerability

EPSS 1%CVSS 9.8

CVE-2026-42990 · Microsoft Windows 10 Version 1607

SQL Server ODBC driver Elevation of Privilege Vulnerability

EPSS 1.0%CVSS 9.8

CVE-2026-49172 · Microsoft Windows 10 Version 1607

Windows FTP Service Remote Code Execution Vulnerability

EPSS 1.0%CVSS 9.8

CVE-2026-50447 · Microsoft Windows 10 Version 1607

Windows Message Queuing Service (MSMQ) Remote Code Execution Vulnerability

EPSS 1.0%CVSS 9.8

CVE-2026-50518 · Microsoft Windows 10 Version 1607

Windows DHCP Server Remote Code Execution Vulnerability

EPSS 1.0%CVSS 9.8

CVE-2026-55010 · Microsoft Minecraft Bedrock Dedicated Server

Minecraft Bedrock Dedicated Server Remote Code Execution Vulnerability

EPSS 1.0%CVSS 9.8

CVE-2026-56159 · Microsoft Windows 10 Version 1607

DHCP Server Service Remote Code Execution Vulnerability

EPSS 1.0%CVSS 9.8

CVE-2026-56190 · Microsoft Windows 10 Version 1607

Remote Desktop Protocol Remote Code Execution Vulnerability

EPSS 1.0%CVSS 9.8

CVE-2026-57092 · Microsoft Windows 10 Version 1607

Microsoft Windows VMSwitch Elevation of Privilege Vulnerability

EPSS 0.9%CVSS 9.9

CVE-2026-48561 · Microsoft Microsoft Edge Copilot for Android

Microsoft Edge Copilot Remote Code Execution Vulnerability

EPSS 0.9%CVSS 9.6

CVE-2026-49164 · Microsoft Windows 10 Version 1607

Windows Active Directory Domain Services Remote Code Execution Vulnerability

EPSS 0.8%CVSS 9.8

CVE-2026-50439 · Microsoft Windows 10 Version 1607

Microsoft Message Queuing Queue Manager Remote Code Execution Vulnerability

EPSS 0.8%CVSS 9.8

CVE-2026-50487 · Microsoft Windows 11 Version 24H2

Windows DNS Client Elevation of Privilege Vulnerability

EPSS 0.8%CVSS 9.8

CVE-2026-50694 · Microsoft Windows 10 Version 1607

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

EPSS 0.8%CVSS 9.8

CVE-2026-54990 · Microsoft Windows 11 Version 24H2

Remote Desktop Client Remote Code Execution Vulnerability

EPSS 0.8%CVSS 9.8

CVE-2026-54995 · Microsoft Windows 10 Version 1607

Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

EPSS 0.8%CVSS 9.8

CVE-2026-55008 · Microsoft Microsoft Exchange Server 2016 Cumulative Update 23

Microsoft Exchange Server Spoofing Vulnerability

EPSS 0.9%CVSS 9.6

CVE-2026-57090 · Microsoft Windows 10 Version 1607

Microsoft Windows Media Foundation Remote Code Execution Vulnerability

EPSS 0.8%CVSS 9.8

CVE-2026-58594 · Microsoft Windows 10 Version 1607

Remote Desktop Client Remote Code Execution Vulnerability

EPSS 0.8%CVSS 9.8

CVE-2026-58617 · Microsoft Microsoft 365 Copilot for iOS

M365 Copilot for iOS Elevation of Privilege Vulnerability

EPSS 0.8%CVSS 9.8

CVE-2026-50380 · Microsoft Windows 10 Version 1607

Windows GDI+ Remote Code Execution Vulnerability

EPSS 0.8%CVSS 9.6

CVE-2026-57089 · Microsoft Windows 10 Version 1607

Windows SMB Server Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability

EPSS 0.7%CVSS 9.8

CVE-2026-56188 · Microsoft Windows 10 Version 1607

Windows Server Network driver Remote Code Execution Vulnerability

EPSS 0.6%CVSS 9.8

CVE-2026-47304 · Microsoft .NET 10.0 runtime

.NET Security Feature Bypass Vulnerability

EPSS 0.3%CVSS 9.8

CVE-2026-49798 · Microsoft Windows 10 Version 1607

Windows Kernel Elevation of Privilege Vulnerability

EPSS 0.4%CVSS 9.3

Totolink1 vulnerability on this pageMax CVSS 9.8Priority 53KEV 0

CVE-2026-15701 · Totolink NR1800X

Totolink NR1800X lighttpd formLogout.htm Form_Logout stack-based overflow

EPSS 1%public exploit CVSS 9.8

vitest-dev2 vulnerabilities on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2026-47429 · vitest-dev vitest

Vitest: Arbitrary file can be read and executed when Vitest UI server is listening

EPSS 1%public exploit CVSS 9.8

CVE-2026-47428 · vitest-dev vitest

Vitest browser mode serves unsanitized otelCarrier query parameter as inline script

EPSS 0.6%public exploit CVSS 9.6

eteubert1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2026-13001 · eteubert Podlove Podcast Publisher

Podlove Podcast Publisher <= 4.5.1 - Unauthenticated Arbitrary File Upload via podlove_image_cache_url Parameter

EPSS 4%CVSS 9.8

python-pillow1 vulnerability on this pageMax CVSS 9.1Priority 46KEV 0

CVE-2026-54058 · python-pillow Pillow

Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)

EPSS 0.5%public exploit CVSS 9.1

Adobe2 vulnerabilities on this pageMax CVSS 9.6Priority 41KEV 0

CVE-2026-48259 · Adobe Adobe Experience Manager as a Cloud Service

Adobe Experience Manager | Server-Side Request Forgery (SSRF) (CWE-918)

EPSS 0.9%CVSS 9.6

CVE-2026-48359 · Adobe Adobe Experience Manager as a Cloud Service

Adobe Experience Manager | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)

EPSS 1%CVSS 9.6

symfony3 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-47767 · symfony symfony

Symfony: SymfonyRuntime CVE-2024-50340 Patch Bypass: Web Requests Can Still Set APP_ENV/APP_DEBUG via parse_str/SAPI Argv Mismatch

EPSS 0.7%CVSS 9.8

CVE-2026-45063 · symfony symfony

Symfony: Identity Spoofing via Unanchored DN Regex in X509Authenticator

EPSS 0.3%CVSS 9.1

CVE-2026-45069 · symfony symfony

Symfony: OidcTokenHandler Accepts JWTs Missing aud/iss/exp Claims

EPSS 0.3%CVSS 9.1

HMBRAND1 vulnerability on this pageMax CVSS 9.1Priority 38KEV 0

CVE-2026-60082 · HMBRAND DBI

DBI versions before 1.651 for Perl do not enforce statement handle consistency with the row

EPSS 0.7%CVSS 9.1

sigstore1 vulnerability on this pageMax CVSS 9.6Priority 37KEV 0

CVE-2026-59891 · sigstore sigstore-js

Credential confusion in @sigstore/oci can leak registry credentials to an attacker-controlled registry

EPSS 0.5%CVSS 9.6

Roundcube3 vulnerabilities on this pageMax CVSS 10.0Priority 36KEV 0

CVE-2026-54433 · Roundcube Webmail

In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, there is Stored Cross-Site Scripting (XSS) via a crafted plain-text email mess…

EPSS 0.4%CVSS 10.0

CVE-2026-62643 · Roundcube Webmail

In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, insufficient Cascading Style Sheets (CSS) sanitization in HTML e-mail messages…

EPSS 0.3%CVSS 10.0

CVE-2026-62644 · Roundcube Webmail

In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, the password plugin of the Roundcube Webmail was subject to username spoofing…

EPSS 0.3%CVSS 9.8

Fortinet1 vulnerability on this pageMax CVSS 9.8Priority 32KEV 0

CVE-2026-59836 · Fortinet FortiClientEMS

A improper certificate validation vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.5, FortiClientEMS 7.4.0 through 7.4.1, Forti…

EPSS 0.2%CVSS 9.8

SRI1 vulnerability on this pageMax CVSS 9.1Priority 31KEV 0

CVE-2026-15747 · SRI Mojolicious

Mojolicious versions from 4.59 before 9.48 for Perl expose a stable representation of the session CSRF token to a BREACH compression oracle

EPSS 0.3%CVSS 9.1

The archive.