Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 441 of 1013.
- CVE-2026-68844 Windows Storage Spaces Controller Remote Code Execution Vulnerability
- CVE-2026-68843 Microsoft Office Word Information Disclosure Vulnerability
- CVE-2026-68842 Windows MIDI Service Module Information Disclosure Vulnerability
- CVE-2026-68841 Windows NTFS Elevation of Privilege Vulnerability
- CVE-2026-68840 Windows USB Driver Elevation of Privilege Vulnerability
- CVE-2026-68839 Windows USB Mass Storage Class Driver Remote Code Execution Vulnerability
- CVE-2026-68838 Windows NTFS Elevation of Privilege Vulnerability
- CVE-2026-68837 Windows File History Service Elevation of Privilege Vulnerability
- CVE-2026-68836 Windows kernel32.dll Elevation of Privilege Vulnerability
- CVE-2026-68835 Windows Print Spooler Components Elevation of Privilege Vulnerability
- CVE-2026-68834 Windows NTFS Elevation of Privilege Vulnerability
- CVE-2026-68833 Windows NTFS Remote Code Execution Vulnerability
- CVE-2026-68832 Windows NTFS Elevation of Privilege Vulnerability
- CVE-2026-68831 Windows Defender Firewall Service Information Disclosure Vulnerability
- CVE-2026-68830 Windows Universal Plug and Play (UPnP) Device Host Information Disclosure Vulnerability
- CVE-2026-6883 Missing Authorization in GitLab
- CVE-2026-68828 Remote Desktop Client Remote Code Execution Vulnerability
- CVE-2026-68827 Windows GDI+ Elevation of Privilege Vulnerability
- CVE-2026-68825 Windows Bind Filter Driver Elevation of Privilege Vulnerability
- CVE-2026-68824 Connected User Experiences and Telemetry Elevation of Privilege Vulnerability
- CVE-2026-68823 Azure Confidential Ledger Remote Code Execution Vulnerability
- CVE-2026-68821 Windows Package Manager Elevation of Privilege Vulnerability
- CVE-2026-68820 Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free
- CVE-2026-68819 Windows Network File System Denial of Service Vulnerability
- CVE-2026-68817 Microsoft Excel Remote Code Execution Vulnerability
- CVE-2026-68816 Microsoft Excel Remote Code Execution Vulnerability
- CVE-2026-68815 Microsoft Excel Remote Code Execution Vulnerability
- CVE-2026-68814 Microsoft Excel Remote Code Execution Vulnerability
- CVE-2026-68813 Microsoft Excel Information Disclosure Vulnerability
- CVE-2026-68812 Microsoft Excel Remote Code Execution Vulnerability
- CVE-2026-68811 Microsoft Excel Remote Code Execution Vulnerability
- CVE-2026-68810 Microsoft Excel Remote Code Execution Vulnerability
- CVE-2026-6881 SQL injection in Advance Web
- CVE-2026-68809 Powerpoint Information Disclosure Vulnerability
- CVE-2026-68808 Microsoft Excel Information Disclosure Vulnerability
- CVE-2026-68807 Microsoft Excel Remote Code Execution Vulnerability
- CVE-2026-68806 Microsoft Excel Remote Code Execution Vulnerability
- CVE-2026-68805 Microsoft Excel Remote Code Execution Vulnerability
- CVE-2026-68804 Microsoft Excel Remote Code Execution Vulnerability
- CVE-2026-68803 Microsoft Excel Remote Code Execution Vulnerability
- CVE-2026-68802 Microsoft Excel Information Disclosure Vulnerability
- CVE-2026-68801 Microsoft Excel Remote Code Execution Vulnerability
- CVE-2026-68800 Microsoft Excel Remote Code Execution Vulnerability
- CVE-2026-68799 Microsoft Excel Information Disclosure Vulnerability
- CVE-2026-68798 Microsoft Excel Remote Code Execution Vulnerability
- CVE-2026-68797 Microsoft Excel Information Disclosure Vulnerability
- CVE-2026-68796 Microsoft Excel Remote Code Execution Vulnerability
- CVE-2026-68795 Microsoft Excel Remote Code Execution Vulnerability
- CVE-2026-68794 Microsoft Excel Remote Code Execution Vulnerability
- CVE-2026-68793 Microsoft Excel Remote Code Execution Vulnerability
- CVE-2026-68792 Microsoft Office Elevation of Privilege Vulnerability
- CVE-2026-68791 Azure Machine Learning Information Disclosure Vulnerability
- CVE-2026-6879 Quadratic Behavior in xml.etree.ElementPath Index Predicates
- CVE-2026-68789 Azure SQL Database Elevation of Privilege Vulnerability
- CVE-2026-68787 Microsoft SQL Server Remote Code Execution Vulnerability
- CVE-2026-68786 Microsoft SQL Server Remote Code Execution Vulnerability
- CVE-2026-68785 Microsoft SQL Server Remote Code Execution Vulnerability
- CVE-2026-68784 Microsoft SQL Server Information Disclosure Vulnerability
- CVE-2026-68782 Azure SQL Database Elevation of Privilege Vulnerability
- CVE-2026-68781 Microsoft SQL Server Information Disclosure Vulnerability
- CVE-2026-68780 Microsoft SQL Server Information Disclosure Vulnerability
- CVE-2026-6878 ByteDance verl grader.py math_equal sandbox
- CVE-2026-68779 Microsoft SQL Server Information Disclosure Vulnerability
- CVE-2026-68778 Microsoft SQL Server Information Disclosure Vulnerability
- CVE-2026-68777 Microsoft SQL Server Information Disclosure Vulnerability
- CVE-2026-68776 Microsoft SQL Server Information Disclosure Vulnerability
- CVE-2026-68775 Microsoft SQL Server Remote Code Execution Vulnerability
- CVE-2026-68772 ZenML 0.94.6 Remote Code Execution via CloudpickleMaterializer
- CVE-2026-68771 ComfyUI 0.23.0 Unauthenticated RCE via LoadTrainingDataset Pickle Deserialization
- CVE-2026-68770 sentence-transformers Arbitrary Code Execution on Local Model Load Despite trust_remote_code=False
- CVE-2026-6877 Domain Separation Bypass in ServiceNow AI Platform
- CVE-2026-68768 hashcat through 7.1.2 Heap Buffer Overflow in outfile_write() via Oversized Username
- CVE-2026-68767 hashcat through 7.1.2 Off-by-One Out-of-Bounds Heap Write in fgetl()
- CVE-2026-68766 hashcat through 7.1.2 Arbitrary File Write via Restore File Option Injection
- CVE-2026-68765 hashcat KeePass KDBX v4 Module Heap Buffer Overflow via Token Field
- CVE-2026-68763 Apache Tomcat: DoS via allocation leak in HTTP/2 backlog tracking when a stream is reset
- CVE-2026-68762 Denial of service in Ktor
- CVE-2026-68760 Potential remember-me authentication bypass in JFrog Artifactory
- CVE-2026-6876 Sandbox Escape in ServiceNow AI Platform
- CVE-2026-68759 Integration credential holders may impersonate users in JFrog Access
- CVE-2026-68758 Authenticated users may access restricted Artifactory support information
- CVE-2026-68757 Potential improper SAML signature verification in JFrog Artifactory
- CVE-2026-68756 Potential insecure deserialization in JFrog Artifactory
- CVE-2026-68755 Bundle writers may alter trusted release information in JFrog Artifactory
- CVE-2026-68754 Publishers without delete permission can overwrite docker layer information
- CVE-2026-68753 Anonymous users may access restricted Artifactory content under specific configurations
- CVE-2026-68752 Project Resource Managers may escalate privileges in JFrog Artifactory
- CVE-2026-68750 Quadratic sibling re-flattening in the html_sanitize_ex traversal engine allows CPU-exhaustion denial of service
- CVE-2026-6875 Sandbox Escape in ServiceNow AI Platform
- CVE-2026-68749 Quadratic regex backtracking in the html_sanitize_ex CSS scrubber allows CPU-exhaustion denial of service
- CVE-2026-68747 CSS sanitizer allowlist bypass in html_sanitize_ex via non-declaration input
- CVE-2026-68746 Livebook Teams identity check fails open when the deployment group is unresolvable, allowing unauthenticated access
- CVE-2026-68745 Apache CloudStack: SAML2 Signature Validation Silently Skipped for Cert-less IdP
- CVE-2026-68744 Sssd: sssd: nss responder uninitialized heap disclosure in initgroups reply
- CVE-2026-68743 Sssd: sssd: pam responder out-of-bounds read via unchecked auth_token_length in protocol v1
- CVE-2026-68742 Sssd: sssd: nss responder out-of-bounds read via unchecked addrlen in gethostbyaddr
- CVE-2026-6874 ericc-ch copilot-api Header token dns rebinding
- CVE-2026-6873 Signed cookie salt namespace collision in django.http.HttpRequest.get_signed_cookie
- CVE-2026-6871 Obfuscate - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-033
- CVE-2026-6870 Access of Uninitialized Pointer in Wireshark