2026

Improper input validation in the SMM handler could allow an attacker with Ring0 access to write to SMRAM and modify exec

A Time-of-check time-of-use (TOCTOU) race condition in the SMM communications buffer could allow a privileged attacker t

Improper input validation in the SMM communications buffer could allow a privileged attacker to perform an out of bounds

Improper input validation in IOMMU could allow a malicious hypervisor to reconfigure IOMMU registers resulting in loss o

Improper syscall input validation in ASP (AMD Secure Processor) may force the kernel into reading syscall parameter valu

Improper system call parameter validation in the Trusted OS may allow a malicious driver to perform mapping or unmapping

Under specific conditions when processing a maliciously crafted value of type Hash r, Mongoid::Criteria.from_hash may al

Catalyst is a platform built for enterprise game server hosts, game communities, and billing panel integrations. Install

An authorized user may disable the MongoDB server by issuing a query against a collection that contains an invalid compo

An authorized user may trigger a server crash by running a $geoNear pipeline with certain invalid index hints.

Incorrect validation of the profile command may result in the determination that a request altering the 'filter' is read

MUNGE is an authentication service for creating and validating user credentials. From 0.5 to 0.5.17, local attacker can

DNG SDK versions 1.7.1 2410 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory ex

DNG SDK versions 1.7.1 2410 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could lead

DNG SDK versions 1.7.1 2410 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could resul

DNG SDK versions 1.7.1 2410 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitr

Bridge versions 15.1.3, 16.0.1 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could re

Bridge versions 15.1.3, 16.0.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arb

Substance3D - Stager versions 3.1.6 and earlier are affected by an out-of-bounds read vulnerability when parsing a craft

Substance3D - Stager versions 3.1.6 and earlier are affected by an out-of-bounds read vulnerability when parsing a craft

Substance3D - Stager versions 3.1.6 and earlier are affected by an out-of-bounds read vulnerability when parsing a craft

Substance3D - Stager versions 3.1.6 and earlier are affected by an out-of-bounds write vulnerability that could result i

Substance3D - Stager versions 3.1.6 and earlier are affected by an out-of-bounds write vulnerability that could result i

Complex queries can cause excessive memory usage in MongoDB Query Planner resulting in an Out-Of-Memory Crash.

MongoDB Server may experience an out-of-memory failure while evaluating expressions that produce deeply nested documents

Connections received from the proxy port may not count towards total accepted connections, resulting in server crashes i

Inserting certain large documents into a replica set could lead to replica set secondaries not being able to fetch the o

FastGPT is an AI Agent building platform. From 4.14.0 to 4.14.5, attackers can directly access the plugin system through

EverShop is a TypeScript-first eCommerce platform. During category update and deletion event handling, the application e

SiYuan is a personal knowledge management system. Prior to 3.5.5, the /api/file/getFile endpoint uses case-sensitive str

Frappe is a full-stack web application framework. Prior to 14.99.14 and 15.94.0, an attacker could craft a malicious sig

Worklenz is a project management tool. Prior to 2.1.7, there are multiple SQL injection vulnerabilities were discovered

Zed is a multiplayer code editor. Prior to 0.219.4, Zed does not show with which parameters a tool is being invoked, whe

ClipBucket v5 is an open source video sharing platform. Prior to 5.5.3 - #40, a Time-of-Check to Time-of-Use (TOCTOU) ra

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics)

The internal locking mechanism of the MongoDB server uses an internal encoding of the resources in order to choose what

A series of specifically crafted, unauthenticated messages can exhaust available memory and crash a MongoDB server.

Emmett is a framework designed to simplify your development process. Prior to 1.3.11, the cookies property in mmett_core

Docmost is open-source collaborative wiki and documentation software. From 0.20.0 and before 0.25.0, the public share pa

Cleartext storage of sensitive information in Azure Compute Gallery allows an authorized attacker to disclose informatio

Improper control of generation of code ('code injection') in Microsoft Defender for Linux allows an unauthorized attacke

Improper privilege management in Windows Remote Desktop allows an authorized attacker to elevate privileges locally.

Deserialization of untrusted data in Azure SDK allows an unauthorized attacker to execute code over a network.

Improper neutralization of input during web page generation ('cross-site scripting') in Azure HDInsights allows an autho

Binding to an unrestricted ip address in Azure IoT Explorer allows an unauthorized attacker to disclose information over

User interface (ui) misrepresentation of critical information in Microsoft Exchange Server allows an unauthorized attack

Null pointer dereference in Windows Remote Access Connection Manager allows an unauthorized attacker to deny service loc

Time-of-check time-of-use (toctou) race condition in GitHub Copilot and Visual Studio allows an authorized attacker to e

Improper neutralization of special elements used in a command ('command injection') in Azure Compute Gallery allows an a

Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to