CVEs.

Latest CVEs

1. 7.5High

   CVE-2026-21511 ↗ (opens in a new tab)

   Deserialization of untrusted data in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.

   M3Microsoft 365· Feb 10, 2026

2. 5.5Med

   CVE-2026-21261 ↗ (opens in a new tab)

   Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

   M3Microsoft 365· Feb 10, 2026

3. 7.5High

   CVE-2026-21260 ↗ (opens in a new tab)

   Exposure of sensitive information to an unauthorized actor in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.

   M3Microsoft 365· Feb 10, 2026

4. 7.8High

   CVE-2026-21259 ↗ (opens in a new tab)

   Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to elevate privileges locally.

   M3Microsoft 365· Feb 10, 2026

5. 5.5Med

   CVE-2026-21258 ↗ (opens in a new tab)

   Improper input validation in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

   M3Microsoft 365· Feb 10, 2026

6. 8.8High

   CVE-2026-21229 ↗ (opens in a new tab)

   Improper input validation in Power BI allows an authorized attacker to execute code over a network.

   M3Microsoft 365· Feb 10, 2026

7. 8.1High

   CVE-2026-21228 ↗ (opens in a new tab)

   Improper certificate validation in Azure Local allows an unauthorized attacker to execute code over a network.

   MAMicrosoft Azure· Feb 10, 2026

8. 5.8Med

   CVE-2026-25905 ↗ (opens in a new tab)

   The Python code being run by 'runPython' or 'runPythonAsync' is not isolated from the rest of the JS code, allowing any Python code to use the Pyodide APIs to modify the JS environment. This may result in an attacker hijacking the MCP server - for malicious purposes including MCP tool shadowing. Note - the "mcp-run-python" project is archived and unlikely to receive a fix.

   JFJFrog· Feb 9, 2026

9. 5.8Med

   CVE-2026-25904 ↗ (opens in a new tab)

   The Pydantic-AI MCP Run Python tool configures the Deno sandbox with an overly permissive configuration that allows the underlying Python code to access the localhost interface of the host to perform SSRF attacks. Note - the "mcp-run-python" project is archived and unlikely to receive a fix.

   JFJFrog· Feb 9, 2026

10. 7.6High

    CVE-2026-25793 ↗ (opens in a new tab)

    Nebula is a scalable overlay networking tool. In versions from 1.7.0 to 1.10.2, when using P256 certificates (which is not the default configuration), it is possible to evade a blocklist entry created against the fingerprint of a certificate by using ECDSA Signature Malleability to use a copy of the certificate with a different fingerprint. This issue has been patched in version 1.10.3.

    SLSlack· Feb 6, 2026

11. 8.8High

    CVE-2026-25628 ↗ (opens in a new tab)

    Qdrant is a vector similarity search engine and vector database. From 1.9.3 to before 1.16.0, it is possible to append to arbitrary files via /logger endpoint using an attacker-controlled on_disk.log_file path. Minimal privileges are required (read-only access). This vulnerability is fixed in 1.16.0.

    QCQdrant Cloud· Feb 6, 2026

12. 7.7High

    CVE-2026-25725 ↗ (opens in a new tab)

    Claude Code is an agentic coding tool. Prior to version 2.1.2, Claude Code's bubblewrap sandboxing mechanism failed to properly protect the .claude/settings.json configuration file when it did not exist at startup. While the parent directory was mounted as writable and .claude/settings.local.json was explicitly protected with read-only constraints, settings.json was not protected if it was missing. This allowed malicious code running inside the sandbox to create this file and inject persistent hooks (such as SessionStart commands) that would execute with host privileges when Claude Code was re

    ANAnthropic (Claude)· Feb 6, 2026

13. 2.3Low

    CVE-2026-25724 ↗ (opens in a new tab)

    Claude Code is an agentic coding tool. Prior to version 2.1.7, Claude Code failed to strictly enforce deny rules configured in settings.json when accessing files through symbolic links. If a user explicitly denied Claude Code access to a file (such as /etc/passwd) and Claude Code had access to a symbolic link pointing to that file, it was possible for Claude Code to read the restricted file through the symlink without triggering deny rule enforcement. This issue has been patched in version 2.1.7.

    ANAnthropic (Claude)· Feb 6, 2026

14. 7.7High

    CVE-2026-25723 ↗ (opens in a new tab)

    Claude Code is an agentic coding tool. Prior to version 2.0.55, Claude Code failed to properly validate commands using piped sed operations with the echo command, allowing attackers to bypass file write restrictions. This vulnerability enabled writing to sensitive directories like the .claude folder and paths outside the project scope. Exploiting this required the ability to execute commands through Claude Code with the "accept edits" feature enabled. This issue has been patched in version 2.0.55.

    ANAnthropic (Claude)· Feb 6, 2026

15. 7.7High

    CVE-2026-25722 ↗ (opens in a new tab)

    Claude Code is an agentic coding tool. Prior to version 2.0.57, Claude Code failed to properly validate directory changes when combined with write operations to protected folders. By using the cd command to navigate into sensitive directories like .claude, it was possible to bypass write protection and create or modify files without user confirmation. Reliably exploiting this required the ability to add untrusted content into a Claude Code context window. This issue has been patched in version 2.0.57.

    ANAnthropic (Claude)· Feb 6, 2026

16. 5.4Med

    CVE-2025-13523 ↗ (opens in a new tab)

    Mattermost Confluence plugin version <1.7.0 fails to properly escape user-controlled display names in HTML template rendering which allows authenticated Confluence users with malicious display names to execute arbitrary JavaScript in victim browsers via sending a specially crafted OAuth2 connection link that, when visited, renders the attacker's display name without proper sanitization. Mattermost Advisory ID: MMSA-2025-00557

    MCMattermost Cloud· Feb 6, 2026

17. 9.8Crit

    CVE-2026-24302 ↗ (opens in a new tab)

    Improper access control in Azure Arc allows an unauthorized attacker to elevate privileges over a network.

    MAMicrosoft Azure· Feb 5, 2026

18. 9.8Crit

    CVE-2026-24300 ↗ (opens in a new tab)

    Azure Front Door Elevation of Privilege Vulnerability

    MAMicrosoft Azure· Feb 5, 2026

19. 8.2High

    CVE-2026-21532 ↗ (opens in a new tab)

    Azure Function Information Disclosure Vulnerability

    MAMicrosoft Azure· Feb 5, 2026

20. 7.2High

    CVE-2026-23572 ↗ (opens in a new tab)

    Improper access control in the TeamViewer Full and Host clients (Windows, macOS, Linux) prior version 15.74.5 allows an authenticated user to bypass additional access controls with “Allow after confirmation” configuration in a remote session. An exploit could result in unauthorized access prior to local confirmation. The user needs to be authenticated for the remote session via ID/password, Session Link, or Easy Access as a prerequisite to exploit this vulnerability.

    TETeamViewer· Feb 5, 2026

21. 9.8Crit

    CVE-2026-25526 ↗ (opens in a new tab)

    JinJava is a Java-based template engine based on django template syntax, adapted to render jinja templates. Prior to versions 2.7.6 and 2.8.3, JinJava is vulnerable to arbitrary Java execution via bypass through ForTag. This allows arbitrary Java class instantiation and file access bypassing built-in sandbox restrictions. This issue has been patched in versions 2.7.6 and 2.8.3.

    HUHubSpot· Feb 4, 2026

22. 7.5High

    CVE-2026-23897 ↗ (opens in a new tab)

    Apollo Server is an open-source, spec-compliant GraphQL server that's compatible with any GraphQL client, including Apollo Client. In versions from 2.0.0 to 3.13.0, 4.2.0 to before 4.13.0, and 5.0.0 to before 5.4.0, the default configuration of startStandaloneServer from @apollo/server/standalone is vulnerable to denial of service (DoS) attacks through specially crafted request bodies with exotic character set encodings. This issue does not affect users that use @apollo/server as a dependency for integration packages, like @as-integrations/express5 or @as-integrations/next, only direct usage o

    AGApollo GraphOS· Feb 4, 2026

23. 7.8High

    CVE-2026-0536 ↗ (opens in a new tab)

    A maliciously crafted GIF file, when parsed through Autodesk 3ds Max, can cause a Stack-Based Buffer Overflow vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

    AUAutodesk· Feb 4, 2026

24. 7.8High

    CVE-2026-0662 ↗ (opens in a new tab)

    A maliciously crafted project directory, when opening a max file in Autodesk 3ds Max, could lead to execution of arbitrary code in the context of the current process due to an Untrusted Search Path being utilized.

    AUAutodesk· Feb 4, 2026

25. 8.4High

    CVE-2026-0661 ↗ (opens in a new tab)

    A maliciously crafted RGB file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

    AUAutodesk· Feb 4, 2026

26. 8.4High

    CVE-2026-0660 ↗ (opens in a new tab)

    A maliciously crafted GIF file, when parsed through Autodesk 3ds Max, can cause a Stack-Based Buffer Overflow vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

    AUAutodesk· Feb 4, 2026

27. 7.8High

    CVE-2026-0659 ↗ (opens in a new tab)

    A maliciously crafted USD file, when loaded or imported into Autodesk Arnold or Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

    AUAutodesk· Feb 4, 2026

28. 8.4High

    CVE-2026-0538 ↗ (opens in a new tab)

    A maliciously crafted GIF file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

    AUAutodesk· Feb 4, 2026

29. 8.4High

    CVE-2026-0537 ↗ (opens in a new tab)

    A maliciously crafted RGB file, when parsed through Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

    AUAutodesk· Feb 4, 2026

30. 6.7Med

    CVE-2025-14740 ↗ (opens in a new tab)

    Docker Desktop for Windows contains multiple incorrect permission assignment vulnerabilities in the installer's handling of the C:\ProgramData\DockerDesktop directory. The installer creates this directory without proper ownership verification, creating two exploitation scenarios: Scenario 1 (Persistent Attack): If a low-privileged attacker pre-creates C:\ProgramData\DockerDesktop before Docker Desktop installation, the attacker retains ownership of the directory even after the installer applies restrictive ACLs. At any time after installation completes, the attacker can modify the directory AC

    DODocker· Feb 4, 2026

31. 7.7High

    CVE-2026-24887 ↗ (opens in a new tab)

    Claude Code is an agentic coding tool. Prior to version 2.0.72, due to an error in command parsing, it was possible to bypass the Claude Code confirmation prompt to trigger execution of untrusted commands through the find command. Reliably exploiting this required the ability to add untrusted content into a Claude Code context window. This issue has been patched in version 2.0.72.

    ANAnthropic (Claude)· Feb 3, 2026

32. 7.7High

    CVE-2026-24053 ↗ (opens in a new tab)

    Claude Code is an agentic coding tool. Prior to version 2.0.74, due to a Bash command validation flaw in parsing ZSH clobber syntax, it was possible to bypass directory restrictions and write files outside the current working directory without user permission prompts. Exploiting this required the user to use ZSH and the ability to add untrusted content into a Claude Code context window. This issue has been patched in version 2.0.74.

    ANAnthropic (Claude)· Feb 3, 2026

33. 7.1High

    CVE-2026-24052 ↗ (opens in a new tab)

    Claude Code is an agentic coding tool. Prior to version 1.0.111, Claude Code contained insufficient URL validation in its trusted domain verification mechanism for WebFetch requests. The application used a startsWith() function to validate trusted domains (e.g., docs.python.org, modelcontextprotocol.io), this could have enabled attackers to register domains like modelcontextprotocol.io.example.com that would pass validation. This could enable automatic requests to attacker-controlled domains without user consent, potentially leading to data exfiltration. This issue has been patched in version

    ANAnthropic (Claude)· Feb 3, 2026

34. 7.8High

    CVE-2026-24149 ↗ (opens in a new tab)

    NVIDIA Megatron-LM for all platforms contains a vulnerability in a script, where malicious data created by an attacker may cause a code injection issue. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, data tampering.

    NVNVIDIA· Feb 3, 2026

35. 6.9Med

    CVE-2026-1664 ↗ (opens in a new tab)

    Summary An Insecure Direct Object Reference has been found to exist in `createHeaderBasedEmailResolver()` function within the Cloudflare Agents SDK. The issue occurs because the `Message-ID` and `References` headers are parsed to derive the target agentName and agentId without proper validation or origin checks, allowing an external attacker with control of these headers to route inbound mail to arbitrary Durable Object instances and namespaces . Root cause The `createHeaderBasedEmailResolver()` function lacks cryptographic verification or origin validation for the headers used in the routing

    CLCloudflare· Feb 3, 2026

36. 3.1Low

    CVE-2026-1751 ↗ (opens in a new tab)

    A vulnerability has been discovered in GitLab CE/EE affecting all versions starting with 16.8 before 18.5.0 that could have allowed unauthorized edits to merge request approval rules under certain conditions.

    GIGitLab· Feb 2, 2026

37. 9.2Crit

    CVE-2026-1723 ↗ (opens in a new tab)

    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in TOTOLINK X6000R allows OS Command Injection.This issue affects X6000R: through V9.4.0cu.1498_B20250826.

    PAPalo Alto Networks· Jan 30, 2026

38. 6.8Med

    CVE-2026-23571 ↗ (opens in a new tab)

    A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Nomad-RunPkgStatusRequest instruction. Improper input validation allows authenticated attackers with actioner privilege to run elevated arbitrary commands on connected hosts via malicious commands injected into the instruction’s input field. Users of 1E Client version 24.5 or higher are not affected.

    TETeamViewer· Jan 29, 2026

39. 6.5Med

    CVE-2026-23570 ↗ (opens in a new tab)

    A missing validation of a user-controlled value in the TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows an adjacent network attacker to tamper with log timestamps via crafted UDP Sync command. This could result in forged or nonsensical datetime prefixes and compromising log integrity and forensic correlation.

    TETeamViewer· Jan 29, 2026

40. 7.5High

    CVE-2026-23569 ↗ (opens in a new tab)

    An out-of-bounds read vulnerability in the TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows a remote attacker to leak stack memory and cause a denial of service via a crafted request. The leaked stack memory could be used to bypass ASLR remotely and facilitate exploitation of other vulnerabilities on the affected system.

    TETeamViewer· Jan 29, 2026

41. 8.1High

    CVE-2026-23568 ↗ (opens in a new tab)

    An out-of-bounds read vulnerability in the TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows an attacker on the adjacent network to cause information disclosure or denial-of-service via a special crafted packet. The leaked memory could be used to bypass ASLR and facilitate further exploitation.

    TETeamViewer· Jan 29, 2026

42. 6.5Med

    CVE-2026-23567 ↗ (opens in a new tab)

    An integer underflow in the UDP command handler of the TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows an adjacent network attacker to trigger a heap-based buffer overflow and cause a denial-of-service (service crash) via specially crafted UDP packets.

    TETeamViewer· Jan 29, 2026

43. 6.5Med

    CVE-2026-23566 ↗ (opens in a new tab)

    A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows an attacker on the adjacent network to inject, tamper with, or forge log entries in \Nomad Branch.log via crafted data sent to the UDP network handler. This can impact log integrity and nonrepudiation.

    TETeamViewer· Jan 29, 2026

44. 6.5Med

    CVE-2026-23565 ↗ (opens in a new tab)

    A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows an attacker on the adjacent network to cause the NomadBranch.exe process to terminate via crafted requests. This can result in a denial-of-service condition of the Content Distribution Service.

    TETeamViewer· Jan 29, 2026

45. 6.5Med

    CVE-2026-23564 ↗ (opens in a new tab)

    A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 26.1 for Windows allows an attacker on the adjacent network to cause normally encrypted UDP traffic to be sent in cleartext. This can result in disclosure of sensitive information.

    TETeamViewer· Jan 29, 2026

46. 7.1High

    CVE-2026-23563 ↗ (opens in a new tab)

    Improper Link Resolution Before File Access (invoked by 1E‑Explorer‑TachyonCore‑DeleteFileByPath instruction) in TeamViewer DEX - 1E Client before version 26.1 on Windows allows a low‑privileged local attacker to delete protected system files via a crafted RPC control junction or symlink that is followed when the delete instruction executes.

    TETeamViewer· Jan 29, 2026

47. 8.1High

    CVE-2025-14472 ↗ (opens in a new tab)

    Cross-Site Request Forgery (CSRF) vulnerability in Drupal Acquia Content Hub allows Cross Site Request Forgery.This issue affects Acquia Content Hub: from 0.0.0 before 3.6.4, from 3.7.0 before 3.7.3.

    ACAcquia· Jan 28, 2026

48. 5.5Med

    CVE-2025-33237 ↗ (opens in a new tab)

    NVIDIA HD Audio Driver for Windows contains a vulnerability where an attacker could exploit a NULL pointer dereference issue. A successful exploit of this vulnerability might lead to a denial of service.

    NVNVIDIA· Jan 28, 2026

49. 7.8High

    CVE-2025-33220 ↗ (opens in a new tab)

    NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause heap memory access after the memory is freed. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, or information disclosure.

    NVNVIDIA· Jan 28, 2026

50. 7.8High

    CVE-2025-33219 ↗ (opens in a new tab)

    NVIDIA Display Driver for Linux contains a vulnerability in the NVIDIA kernel module where an attacker could cause an integer overflow or wraparound. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, or information disclosure.

    NVNVIDIA· Jan 28, 2026