home.social

Search

306 results for “CV”

  1. 🚨 EUVD-2026-56292

    📊 Score: 4.6/10 (CVSS v3.1)
    📦 Product: Microsoft SharePoint Server Subscription Edition, Microsoft SharePoint Server 2019
    🏢 Vendor: Microsoft
    📅 Published: 2026-08-11 | Updated: 2026-10-26

    📝 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform ...

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

  2. 🚨 EUVD-2026-56295

    📊 Score: 8.8/10 (CVSS v3.1)
    📦 Product: Microsoft SharePoint Server 2019, Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server Subscription Edition
    🏢 Vendor: Microsoft
    📅 Published: 2026-08-11 | Updated: 2026-10-26

    📝 Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code o...

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

  3. 🚨 EUVD-2026-56294

    📊 Score: 6.5/10 (CVSS v3.1)
    📦 Product: Microsoft SharePoint Server Subscription Edition, Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019
    🏢 Vendor: Microsoft
    📅 Published: 2026-08-11 | Updated: 2026-10-26

    📝 Relative path traversal in Microsoft Office SharePoint allows an authorized attacker to disclose information ove...

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

  4. 🚨 EUVD-2026-63691

    📊 Score: 8.6/10 (CVSS v3.1)
    📦 Product: Azure Stack HCI
    🏢 Vendor: Microsoft
    📅 Published: 2026-08-20 | Updated: 2026-10-26

    📝 Observable response discrepancy in Azure Stack HCI allows an unauthorized attacker to disclose information over a network.

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

  5. 🚨 EUVD-2026-63693

    📊 Score: 10.0/10 (CVSS v3.1)
    📦 Product: Microsoft Entra
    🏢 Vendor: Microsoft
    📅 Published: 2026-08-20 | Updated: 2026-10-26

    📝 Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network.

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

  6. 🚨 EUVD-2026-63692

    📊 Score: 9.9/10 (CVSS v3.1)
    📦 Product: Microsoft Entra
    🏢 Vendor: Microsoft
    📅 Published: 2026-08-20 | Updated: 2026-10-26

    📝 Server-side request forgery (ssrf) in Azure Active Directory allows an authorized attacker to elevate privileges over a network.

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

  7. 🚨 EUVD-2026-56299

    📊 Score: 6.5/10 (CVSS v3.1)
    📦 Product: Microsoft Dynamics 365 Business Central Release Wave 1 2025, Microsoft Dynamics 365 Business Central 2024 Release Wave 2, Microsoft Dynamics 365 Business Central 2026 Release Wave 1 (+1 more)
    🏢 Vendor: Microsoft
    📅 Published: 2026-08-11 | Updated: 2026-10-26

    📝 Missing authorization in Dynamics Business Centr...

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

  8. 🚨 EUVD-2026-67846

    📊 Score: 5.4/10 (CVSS v3.1)
    📦 Product: Microsoft Edge (Chromium-based), Microsoft Edge for iOS
    🏢 Vendor: Microsoft
    📅 Published: 2026-08-28 | Updated: 2026-10-26

    📝 Improper neutralization of input used for llm prompting in Microsoft Edge for iOS allows an unauthorized attacker to perform spoofing over a network.

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

  9. 🚨 EUVD-2026-56300

    📊 Score: 7.5/10 (CVSS v3.1)
    📦 Product: Windows 11 Version 23H2, Windows 10 Version 1809, Windows 10 Version 1607 (+14 more)
    🏢 Vendor: Microsoft
    📅 Published: 2026-08-11 | Updated: 2026-10-26

    📝 Allocation of resources without limits or throttling in Windows Kernel allows an unauthorized attacker to deny service over a network.

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

  10. 🚨 EUVD-2026-56303

    📊 Score: 7.4/10 (CVSS v3.1)
    📦 Product: PowerShell 7.6, PowerShell 7.5, PowerShell 7.4
    🏢 Vendor: Microsoft
    📅 Published: 2026-08-11 | Updated: 2026-10-26

    📝 Server-side request forgery (ssrf) in Microsoft PowerShell Core allows an unauthorized attacker to disclose information over a network.

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

  11. 🚨 EUVD-2026-56302

    📊 Score: 8.8/10 (CVSS v3.1)
    📦 Product: Windows 10 Version 1809, Windows 10 Version 22H2, Windows 11 Version 23H2 (+16 more)
    🏢 Vendor: Microsoft
    📅 Published: 2026-08-11 | Updated: 2026-10-26

    📝 Improper neutralization of special elements used in a command ('command injection') in Windows Active Directory allows an unauthorized attacker to execute ...

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

  12. 🚨 EUVD-2026-56301

    📊 Score: 7.8/10 (CVSS v3.1)
    📦 Product: Windows 11 Version 23H2, Windows 10 Version 1809, Windows Server 2025 (+16 more)
    🏢 Vendor: Microsoft
    📅 Published: 2026-08-11 | Updated: 2026-10-26

    📝 Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code locally.

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

  13. 🚨 EUVD-2026-56305

    📊 Score: 7.2/10 (CVSS v3.1)
    📦 Product: Azure Monitor Agent Linux Extension
    🏢 Vendor: Microsoft
    📅 Published: 2026-08-11 | Updated: 2026-10-26

    📝 Improper neutralization of special elements used in a command ('command injection') in Azure Monitor Agent allows an authorized attacker to elevate privileges over a network.

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

  14. 🚨 EUVD-2026-56306

    📊 Score: 6.5/10 (CVSS v3.1)
    📦 Product: Visual Studio Code
    🏢 Vendor: Microsoft
    📅 Published: 2026-08-11 | Updated: 2026-10-26

    📝 Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to disclose information over a network.

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

  15. 🚨 EUVD-2026-56309

    📊 Score: 5.5/10 (CVSS v3.1)
    📦 Product: Windows Server 2016 (Server Core installation), Windows 11 Version 25H2, Windows 11 Version 23H2 (+16 more)
    🏢 Vendor: Microsoft
    📅 Published: 2026-08-11 | Updated: 2026-10-26

    📝 Out-of-bounds read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally.

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

  16. 🚨 EUVD-2026-56307

    📊 Score: 9.8/10 (CVSS v3.1)
    📦 Product: Microsoft HPC Pack 2019
    🏢 Vendor: Microsoft
    📅 Published: 2026-08-11 | Updated: 2026-10-26

    📝 Deserialization of untrusted data in Microsoft High Performance Computing (HPC) Pack allows an unauthorized attacker to execute code over a network.

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

  17. 🚨 EUVD-2026-56312

    📊 Score: 7.5/10 (CVSS v3.1)
    📦 Product: Windows Server 2025, Windows Server 2012, Windows 10 Version 21H2 (+16 more)
    🏢 Vendor: Microsoft
    📅 Published: 2026-08-11 | Updated: 2026-10-26

    📝 Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over a network.

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

  18. 🚨 EUVD-2026-56311

    📊 Score: 5.6/10 (CVSS v3.1)
    📦 Product: Windows Server 2025, Windows 10 Version 22H2, Windows Server 2016 (+14 more)
    🏢 Vendor: Microsoft
    📅 Published: 2026-08-11 | Updated: 2026-10-26

    📝 No cwe for this issue in AMD Zen allows an authorized attacker to disclose information locally.

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

  19. 🚨 EUVD-2026-56313

    📊 Score: 5.5/10 (CVSS v3.1)
    📦 Product: Windows Server 2012, Windows 10 Version 1809, Windows Server 2016 (+16 more)
    🏢 Vendor: Microsoft
    📅 Published: 2026-08-11 | Updated: 2026-10-26

    📝 Weak authentication in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

  20. 🚨 EUVD-2026-56314

    📊 Score: 7.5/10 (CVSS v3.1)
    📦 Product: Windows Server 2012 (Server Core installation), Windows Server 2019 (Server Core installation), Windows Server 2025 (Server Core installation) (+16 more)
    🏢 Vendor: Microsoft
    📅 Published: 2026-08-11 | Updated: 2026-10-26

    📝 Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to...

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

  21. 🚨 EUVD-2026-56315

    📊 Score: 5.5/10 (CVSS v3.1)
    📦 Product: Windows Server 2012 R2 (Server Core installation), Windows Server 2012, Windows Server 2019 (+16 more)
    🏢 Vendor: Microsoft
    📅 Published: 2026-08-11 | Updated: 2026-10-26

    📝 Use of uninitialized resource in Microsoft COM for Windows allows an authorized attacker to disclose information locally.

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

  22. 🚨 EUVD-2026-56316

    📊 Score: 5.5/10 (CVSS v3.1)
    📦 Product: Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2022 (+16 more)
    🏢 Vendor: Microsoft
    📅 Published: 2026-08-11 | Updated: 2026-10-26

    📝 Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally.

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

  23. 🚨 EUVD-2026-56317

    📊 Score: 6.5/10 (CVSS v3.1)
    📦 Product: Windows 11 Version 25H2, Windows Server 2019, Windows 11 version 26H1 (+16 more)
    🏢 Vendor: Microsoft
    📅 Published: 2026-08-11 | Updated: 2026-10-26

    📝 Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network.

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

  24. 🚨 EUVD-2026-56318

    📊 Score: 6.5/10 (CVSS v3.1)
    📦 Product: Windows Server 2016 (Server Core installation), Windows 10 Version 21H2, Windows 11 Version 24H2 (+16 more)
    🏢 Vendor: Microsoft
    📅 Published: 2026-08-11 | Updated: 2026-10-26

    📝 Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network.

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

  25. 🚨 EUVD-2026-56321

    📊 Score: 5.5/10 (CVSS v3.1)
    📦 Product: Windows 10 Version 22H2, Windows Server 2012 R2 (Server Core installation), Windows Server 2025 (+16 more)
    🏢 Vendor: Microsoft
    📅 Published: 2026-08-11 | Updated: 2026-10-26

    📝 Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally.

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

  26. 🚨 EUVD-2026-56320

    📊 Score: 7.8/10 (CVSS v3.1)
    📦 Product: Windows Server 2012 R2, Windows Server 2012 (Server Core installation), Windows 11 version 26H1 (+16 more)
    🏢 Vendor: Microsoft
    📅 Published: 2026-08-11 | Updated: 2026-10-26

    📝 Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

  27. 🚨 EUVD-2026-56324

    📊 Score: 4.6/10 (CVSS v3.1)
    📦 Product: Windows Server 2016 (Server Core installation), Windows Server 2019 (Server Core installation), Windows 10 Version 21H2 (+16 more)
    🏢 Vendor: Microsoft
    📅 Published: 2026-08-11 | Updated: 2026-10-26

    📝 Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack.

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

  28. New objective: patch Brotli in every affected product immediately.

    Reward: You've received the Cursed Decoder Ring — it was supposed to decompress your problems, but look at you now.

    securityweek.com/node2shell-br

    #Brotli #CVE #NodeJS #CyberSecurity #ZeroDay #PatchedOrPerish (3/3)

Share on Mastodon

Enter the server where you have an account.