CVEs.

Latest CVEs

1. 8.8High

   CVE-2026-45454 ↗ (opens in a new tab)

   Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

   M3Microsoft 365· Jun 9, 2026

2. 5.4Med

   CVE-2026-45453 ↗ (opens in a new tab)

   Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

   M3Microsoft 365· Jun 9, 2026

3. 7.8High

   CVE-2026-44824 ↗ (opens in a new tab)

   Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

   M3Microsoft 365· Jun 9, 2026

4. 7.8High

   CVE-2026-44823 ↗ (opens in a new tab)

   Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

   M3Microsoft 365· Jun 9, 2026

5. 8.2High

   CVE-2026-44822 ↗ (opens in a new tab)

   Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

   M3Microsoft 365· Jun 9, 2026

6. 5.5Med

   CVE-2026-44821 ↗ (opens in a new tab)

   Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

   M3Microsoft 365· Jun 9, 2026

7. 7.8High

   CVE-2026-44820 ↗ (opens in a new tab)

   Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

   M3Microsoft 365· Jun 9, 2026

8. 7.8High

   CVE-2026-44819 ↗ (opens in a new tab)

   Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

   M3Microsoft 365· Jun 9, 2026

9. 7.0High

   CVE-2026-44818 ↗ (opens in a new tab)

   Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

   M3Microsoft 365· Jun 9, 2026

10. 7.8High

    CVE-2026-44817 ↗ (opens in a new tab)

    Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

    M3Microsoft 365· Jun 9, 2026

11. 7.8High

    CVE-2026-44812 ↗ (opens in a new tab)

    Integer overflow or wraparound in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally.

    M3Microsoft 365· Jun 9, 2026

12. 7.8High

    CVE-2026-44803 ↗ (opens in a new tab)

    Integer overflow or wraparound in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally.

    M3Microsoft 365· Jun 9, 2026

13. 8.1High

    CVE-2026-42835 ↗ (opens in a new tab)

    Improper neutralization of special elements in output used by a downstream component ('injection') in Microsoft Teams for Android allows an authorized attacker to disclose information over a network.

    M3Microsoft 365· Jun 9, 2026

14. 8.4High

    CVE-2026-41098 ↗ (opens in a new tab)

    Improper neutralization of input during web page generation ('cross-site scripting') in Azure Stack Edge allows an authorized attacker to perform spoofing over a network.

    MAMicrosoft Azure· Jun 9, 2026

15. 8.8High

    CVE-2026-40371 ↗ (opens in a new tab)

    Improper handling of insufficient permissions or privileges in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to elevate privileges over a network.

    M3Microsoft 365· Jun 9, 2026

16. 6.1Med

    CVE-2026-33113 ↗ (opens in a new tab)

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

    M3Microsoft 365· Jun 9, 2026

17. 8.8High

    CVE-2026-32193 ↗ (opens in a new tab)

    Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Azure Kubernetes Service allows an authorized attacker to execute code locally.

    MAMicrosoft Azure· Jun 9, 2026

18. 7.3High

    CVE-2026-24181 ↗ (opens in a new tab)

    NVIDIA DALI contains a vulnerability in a component where an attacker could cause an improper index validation. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and information disclosure.

    NVNVIDIA· Jun 9, 2026

19. 7.3High

    CVE-2026-24180 ↗ (opens in a new tab)

    NVIDIA DALI contains a vulnerability in a component where an attacker could cause a heap-based buffer overflow. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and information disclosure.

    NVNVIDIA· Jun 9, 2026

20. 9.8Crit

    CVE-2026-48567 ↗ (opens in a new tab)

    Authentication bypass by spoofing in Azure HorizonDB allows an unauthorized attacker to elevate privileges over a network.

    MAMicrosoft Azure· Jun 4, 2026

21. 7.5High

    CVE-2026-47644 ↗ (opens in a new tab)

    Improper neutralization of special elements in output used by a downstream component ('injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to disclose information over a network.

    M3Microsoft 365· Jun 4, 2026

22. 8.8High

    CVE-2026-45497 ↗ (opens in a new tab)

    Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an authorized attacker to execute code over a network.

    M3Microsoft 365· Jun 4, 2026

23. 7.5High

    CVE-2026-42824 ↗ (opens in a new tab)

    Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose information over a network.

    M3Microsoft 365· Jun 4, 2026

24. 1.1Low

    CVE-2026-10804 ↗ (opens in a new tab)

    A vulnerability has been found in Streamlit up to 1.53.0. Impacted is an unknown function in the library lib/streamlit/runtime/caching/hashing.py of the component Palette Handler. Such manipulation leads to use of weak hash. Local access is required to approach this attack. The attack requires a high level of complexity. The exploitability is considered difficult. The exploit has been disclosed to the public and may be used. The pull request to fix this issue awaits acceptance.

    SNSnowflake· Jun 4, 2026

25. 6.1Med

    CVE-2026-20233 ↗ (opens in a new tab)

    A vulnerability in the web-based user interface of Cisco Webex Meetings could have allowed an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. Cisco has addressed this vulnerability in the Webex Meetings service, and no customer action is needed. This vulnerability existed because of insufficient validation of user input. Prior to this vulnerability being addressed, an attacker could have exploited this vulnerability by persuading a user to follow a malicious link. A successful exploit could have allowed the attacker to execute arbitrary script code in the brows

    WEWebex· Jun 3, 2026

26. 9.6Crit

    CVE-2026-5241 ↗ (opens in a new tab)

    A vulnerability in the LightGlue model loading path of huggingface/transformers version 5.2.0 allows an attacker-controlled model repository to execute arbitrary code during model initialization. The issue arises because the `trust_remote_code` parameter, intended to prevent remote code execution, is overridden by untrusted serialized configuration data in a nested code path. Specifically, when loading a LightGlue model using `AutoModel.from_pretrained()` with `trust_remote_code=False`, the `LightGlueConfig` reads the `trust_remote_code` value from the untrusted `config.json` file and propagat

    HFHugging Face· Jun 3, 2026

27. 8.2High

    CVE-2026-8936 ↗ (opens in a new tab)

    Fixed a VM panic caused by unbounded recursion in the grpcfuse kernel module when a container created deeply nested directories on a bind-mounted host folder and triggered a dentry invalidation event. This issue has been fixed in Docker Desktop 4.76.0.

    DODocker· Jun 2, 2026

28. 7.5High

    CVE-2026-42342 ↗ (opens in a new tab)

    React Router is a router for React. In versions 7.0.0 through 7.14.x of react-router and versions 2.10.0 through 2.17.4 of @remix-run/server-runtime, certain crafted requests can consume disproportionate server resources via unbounded path expansion in the __manifest endpoint, resulting in response time degradation and/or service unavailability for end users. This affects React Router Framework Mode applications as well as Remix applications. This does not impact applications using Declarative Mode (`<BrowserRouter>`) or Data Mode (`createBrowserRouter/<RouterProvider>`). This is patched in re

    SHShopify· Jun 2, 2026

29. 8.1High

    CVE-2026-42211 ↗ (opens in a new tab)

    React Router is a router for React. In versions 7.0.0 through 7.14.1, when using Framework Mode, a combination of steps could potentially allow unauthorized remote code execution (RCE) through external requests. This attack requires the application code to have an existing prototype pollution vulnerability, which can then be leveraged in a 2-step attack where the second step triggers unauthorized RCE on the remote server. This does not impact applications using Declarative Mode (`<BrowserRouter>`) or Data Mode (`createBrowserRouter/<RouterProvider>`). This is patched in version 7.14.2.

    SHShopify· Jun 2, 2026

30. 6.6Med

    CVE-2026-40181 ↗ (opens in a new tab)

    React Router is a router for React. In versions 7.0.0 through 7.14.0 and 6.7.0 through 6.30.3, certain URLs passed to the redirect function can trigger an open redirect to an external domain due to path values starting with // being reinterpreted as protocol-relative URLs. The level of impact depends on the validation done by the application prior to returning the redirect. This does not impact applications using Declarative Mode (<BrowserRouter>). This is patched in versions 7.14.1 and 6.30.4.

    SHShopify· Jun 2, 2026

31. 7.5High

    CVE-2026-34077 ↗ (opens in a new tab)

    React Router is a router for React. In versions 7.7.0 through 7.13.1, when using React Router's unstable React Server Components (RSC) APIs, there is a potential client-side Cross-Site Scripting (XSS) vulnerability in the RSC redirect handling if redirects come from untrusted sources. This does not impact applications that are not using the unstable RSC APIs in React Router. This is patched in version 7.13.2.

    SHShopify· Jun 2, 2026

32. 4.7Med

    CVE-2026-33245 ↗ (opens in a new tab)

    React Router is a router for React. In versions 7.7.0 through 7.13.1, when using React Router's unstable React Server Components (RSC) APIs, there is a potential client-side Cross-Site Scripting (XSS) vulnerability in the RSC redirect handling if redirects come from untrusted sources. This does not impact applications that are not using the unstable RSC APIs in React Router. This is patched in version 7.13.2.

    SHShopify· Jun 2, 2026

33. 5.4Med

    CVE-2026-33244 ↗ (opens in a new tab)

    React Router is a router for React. In versions 7.5.1 through 7.13.1, when using Framework Mode with pre-rendering enabled, improper neutralization of the HTTP `Location` header value can permit Cross-Site Scripting (XSS) in the statically generated HTML files if the redirect location comes from an untrusted source. This does not impact applications using Declarative Mode (`<BrowserRouter>`) or Data Mode (`createBrowserRouter/<RouterProvider>`). This is patched in version 7.13.2.

    SHShopify· Jun 2, 2026

34. 7.8High

    CVE-2026-24237 ↗ (opens in a new tab)

    NVIDIA NVTabular contains a vulnerability where an attacker could cause improper deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.

    NVNVIDIA· Jun 2, 2026

35. 7.8High

    CVE-2026-24221 ↗ (opens in a new tab)

    NVIDIA NVTabular contains a vulnerability where an attacker could cause improper deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering and information disclosure.

    NVNVIDIA· Jun 2, 2026

36. 8.6High

    CVE-2026-10591 ↗ (opens in a new tab)

    Insufficient access control restrictions in the file write tool in Amazon Kiro IDE before version 0.11 might allow remote unauthenticated actors to execute arbitrary commands via crafted instructions that cause writes to execution-sensitive paths (such as .vscode/tasks.json), enabling auto-execution on folder open. To remediate this issue, users should upgrade to Kiro IDE version 0.11 or later.

    AWAmazon Web Services· Jun 2, 2026

37. 7.5High

    CVE-2026-3514 ↗ (opens in a new tab)

    In version 3.6.19 of prefecthq/prefect, an authentication bypass vulnerability exists due to the improper handling of URL path exemptions for health check probes. Specifically, the authentication middleware exempts any URL path ending with 'health' or 'ready' from authentication checks. This allows an attacker to create resources with names ending in 'health' or 'ready' and access them without authentication. Affected endpoints include those for variables, flows, work pools, work queues, and deployments. This vulnerability can lead to unauthorized access to sensitive information, such as API k

    PCPrefect Cloud· Jun 2, 2026

38. 8.0High

    CVE-2026-47294 ↗ (opens in a new tab)

    Improper neutralization of special elements used in an os command ('os command injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

    M3Microsoft 365· Jun 1, 2026

39. 9.1Crit

    CVE-2026-48501 ↗ (opens in a new tab)

    GitHub CLI (gh) is GitHub’s official command line tool. Prior to 2.93.0, GitHub CLI incorrectly includes authorization header in API requests to TUF repository mirrors via gh attestation, gh release verify, and gh release verify-asset commands. The CLI uses a shared HTTP client with an authentication layer that automatically attaches tokens to outgoing requests. This layer lacks accurate host detection and can incorrectly attribute the target host, providing it with a token it should never receive. Specifically, the host normalization logic collapses any *.github.com subdomain to github.com, s

    GIGitHub· May 29, 2026

40. 6.5Med

    CVE-2026-49095 ↗ (opens in a new tab)

    Improper Input Validation (CWE-20) in the Kibana Fleet agent policy management feature can lead to privilege escalation. An authenticated user with Fleet management privileges can manipulate agent policy configuration by injecting values into a configuration override mechanism that is not adequately validated. An attacker can cause Elastic Agents to be issued API keys with elevated Elasticsearch privileges, potentially granting unauthorized read and write access to sensitive Elasticsearch security indices beyond what is intended for the Fleet management role.

    ECElastic Cloud· May 28, 2026

41. 6.5Med

    CVE-2026-49094 ↗ (opens in a new tab)

    Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated user with viewer-level access can submit a request containing an oversized input value to an analytics collections management endpoint. Kibana will consume excessive CPU and memory resources while processing the request. This results in Kibana becoming unavailable to all users until the service is manually recovered.

    ECElastic Cloud· May 28, 2026

42. 7.7High

    CVE-2026-49093 ↗ (opens in a new tab)

    Server-Side Request Forgery (CWE-918) in Kibana can allow an authenticated user with connector management privileges to bypass the operator-configured connector allowlist, causing the Kibana server to issue outbound requests to destinations the egress controls were intended to block.

    ECElastic Cloud· May 28, 2026

43. 6.5Med

    CVE-2026-42400 ↗ (opens in a new tab)

    Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated user can send a specially crafted compressed request payload that is processed prior to authorization checks, causing excessive memory and CPU resource consumption that can result in a Kibana instance becoming unresponsive or crashing.

    ECElastic Cloud· May 28, 2026

44. 6.5Med

    CVE-2026-42399 ↗ (opens in a new tab)

    Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated low-privileged user can cause Kibana to consume exponentially increasing amounts of memory by submitting a specially crafted Timelion visualization expression containing deeply chained function calls. The resulting data structure grows without bound, exhausting available memory and causing the Kibana service to crash and become unavailable to all users.

    ECElastic Cloud· May 28, 2026

45. 7.7High

    CVE-2026-42398 ↗ (opens in a new tab)

    Server-Side Request Forgery (CWE-918) in Kibana allows authenticated users with connector management privileges to bypass the operator-configured connection allowlist. By configuring a Webhook connector with a crafted target, an attacker can cause Kibana to issue outbound requests to destinations that the egress restriction controls were intended to block.

    ECElastic Cloud· May 28, 2026

46. 5.4Med

    CVE-2026-42401 ↗ (opens in a new tab)

    Improper Neutralization of Input During Web Page Generation (CWE-79) in Kibana can lead to stored HTML injection. A user with write access to an Elasticsearch index could persist crafted markup which, when subsequently rendered through an affected Kibana view by another user, was not sufficiently sanitized. Successful exploitation could result in unauthorized UI manipulation and outbound network requests issued from the viewing user's browser session.

    ECElastic Cloud· May 28, 2026

47. 6.5Med

    CVE-2026-33464 ↗ (opens in a new tab)

    Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to a denial of service via Excessive Allocation (CAPEC-130). An authenticated user holding a low-privileged role can submit a specially crafted, oversized payload to an internal Kibana API, causing the Kibana process to exhaust available resources and become unresponsive to all users until the service recovers or is restarted.

    ECElastic Cloud· May 28, 2026

48. 5.3Med

    CVE-2026-33463 ↗ (opens in a new tab)

    Operation on a Resource after Expiration or Termination (CWE-672) in Kibana can lead to unauthorized information disclosure. A logic error in how expiration timestamps were validated allowed a time-bounded access token to remain usable beyond its intended validity window, enabling an unauthenticated actor in possession of the token to retrieve the associated content after expiration.

    ECElastic Cloud· May 28, 2026

49. 7.3High

    CVE-2026-33462 ↗ (opens in a new tab)

    A path traversal vulnerability was identified in Kibana's dashboard management functionality. An authenticated user with limited permissions could create a dashboard with a specially crafted identifier. When an administrator subsequently attempts to delete this dashboard through the Kibana interface, the deletion request is redirected to an unintended internal endpoint, potentially resulting in the unauthorized deletion of user accounts or other resources. Exploitation requires an administrator to perform a delete action on the maliciously crafted dashboard object.

    ECElastic Cloud· May 28, 2026

50. 4.3Med

    CVE-2026-9807 ↗ (opens in a new tab)

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.9 before 18.10.7, 18.11 before 18.11.4, and 19.0 before 19.0.1 that under certain conditions could have allowed a blocked Project Access Token to continue accessing private resources due to incorrect authorization enforcement.

    GIGitLab· May 28, 2026