2026

Origin validation error in Windows Network Address Translation (NAT) allows an unauthorized attacker to perform spoofing

Untrusted search path in Windows Narrator Braille allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code locally.

Inclusion of functionality from untrusted control sphere in Visual Studio Code - Python extension allows an unauthorized

Exposure of sensitive information to an unauthorized actor in Microsoft Defender for Endpoint allows an authorized attac

Allocation of resources without limits or throttling in Windows Kernel allows an unauthorized attacker to deny service o

Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to el

Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally.

Improper neutralization of special elements used in a command ('command injection') in Windows Active Directory allows a

TypeBot is a chatbot builder tool. Prior to version 3.17.0, Typebot's WhatsApp status forwarding feature stores a worksp

CAI Content Credentials is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an applicati

CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an applicati

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application

CAI Content Credentials is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

ColdFusion is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in th

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application

CAI Content Credentials is affected by a NULL Pointer Dereference vulnerability that could result in an application deni

CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security featur

CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an a

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application

CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an applicati

ColdFusion is affected by a Use of a Broken or Risky Cryptographic Algorithm vulnerability that could lead to disclosure

ColdFusion is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

ColdFusion is affected by an Improper Input Validation vulnerability that could result in an application denial-of-servi

is affected by an Improper Encoding or Escaping of Output vulnerability that could result in a Security feature bypass.

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in an application denial-of-service

ColdFusion is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege

TypeBot is a chatbot builder tool. Prior to version 3.17.0, an authenticated user who has read access to any typebot can

Improper neutralization of special elements used in a command ('command injection') in Azure Monitor Agent allows an aut

Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unau

Observable Timing Discrepancy in the AMD Vitis Libraries ECDSA secp256k1 component could allow attackers with local acce

Missing authentication for critical function in Windows RPC API allows an authorized attacker to elevate privileges loca

Missing authorization in Dynamics Business Central allows an authorized attacker to disclose information over a network.

Protection mechanism failure for some Intel(R) Transfer Learning Tool before version v0.7 within Ring 3: User Applicatio

Deserialization of untrusted data for some Intel(R) Extension for PyTorch before version 2.8.0 within Ring 3: User Appli

is affected by a Use of Hard-coded Cryptographic Key vulnerability that could result in a Security feature bypass. A low

Uncontrolled search path for some Hardware-Aware-Automated-MachineLearning NA before version 45cd723 within Ring 3: User

Untrusted search path for some Intel(R) Performance Counter Monitor (Intel(R) PCM) before version tag 202604 within Ring

Uncontrolled search path for some Approximate Bayesian Inference Framework before version on commit #484c949 within Ring

Path traversal for some gaudi-container-runtime before version 1.24.0 within Ring 3: User Applications may allow an esca

Protection mechanism failure for some Intel(R) Workload Services Framework software within Ring 3: User Applications may

Integer overflow in the UEFI firmware for the Intel(R) Slim Bootloader may allow an information disclosure. System softw

Protection mechanism failure for some LLM-on-Ray before version 1.0 within Ring 3: User Applications may allow an escala

Uncontrolled search path for some EquiTriton before version f5ddbb5 within Ring 3: User Applications may allow an escala

Improper input validation for some vLLM Hardware Plugin for Intel(R) Gaudi(R) software before version 0.16.0 within Ring

is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. A low-privileged atta

Out-of-bounds write in the firmware for the Intel(R) Slim Bootloader may allow a denial of service. System software adve