CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Microsoft
1Sharepoint Server
Sep 9, 2026
Sep 8, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
-
-
Sep 9, 2026
Sep 8, 2026
9.1 CRITICAL· v4
7.4 HIGH· v3
N/A· v2
XenForo before 2.3.13 contains an authentication bypass vulnerability in the OAuth2 token endpoint that allows unauthenticated attackers to obtain valid token pairs by submitting empty values for client_secret and code_v...Show more
XenForo before 2.3.13 contains an authentication bypass vulnerability in the OAuth2 token endpoint that allows unauthenticated attackers to obtain valid token pairs by submitting empty values for client_secret and code_verifier parameters. Attackers can exploit PHP truthy evaluation logic, which treats empty strings as false and skips client secret validation and PKCE code verifier validation, to exchange a valid authorization code for a token pair without proving client identity or holding the PKCE commitment.Show less
-
-
Sep 9, 2026
Sep 8, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Improper validation of consistency within input in Windows TCP/IP allows an unauthorized attacker to bypass a security feature over a network.
-
-
Sep 9, 2026
Sep 8, 2026
N/A· v4
4.7 MEDIUM· v3
N/A· v2
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to bypass a security feature locally.
-
-
Sep 9, 2026
Sep 8, 2026
N/A· v4
8.1 HIGH· v3
N/A· v2
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
-
-
Sep 9, 2026
Sep 8, 2026
N/A· v4
8.0 HIGH· v3
N/A· v2
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network.
-
-
Sep 9, 2026
Sep 8, 2026
N/A· v4
4.4 MEDIUM· v3
N/A· v2
Dependency on vulnerable third-party component in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.
-
-
Sep 9, 2026
Sep 8, 2026
N/A· v4
7.0 HIGH· v3
N/A· v2
Use after free in Windows Web Platform Storage allows an authorized attacker to elevate privileges locally.
-
-
Sep 9, 2026
Sep 8, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Integer underflow (wrap or wraparound) in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
-
-
Sep 9, 2026
Sep 8, 2026
N/A· v4
7.0 HIGH· v3
N/A· v2
Use after free in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally.
-
-
Sep 9, 2026
Sep 8, 2026
N/A· v4
7.0 HIGH· v3
N/A· v2
Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
-
-
Sep 9, 2026
Sep 8, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Incorrect calculation of buffer size in Windows iSCSI allows an unauthorized attacker to execute code over a network.
1Microsoft
7Windows 10 1607
Windows 10 1809Windows Server 2012+4 more
Sep 9, 2026
Sep 8, 2026
N/A· v4
8.1 HIGH· v3
N/A· v2
Stack-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
-
-
Sep 9, 2026
Sep 8, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
-
-
Sep 9, 2026
Sep 8, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Heap-based buffer overflow in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.
-
-
Sep 9, 2026
Sep 8, 2026
N/A· v4
8.0 HIGH· v3
N/A· v2
Out-of-bounds read in Windows VOLSNAP.SYS allows an authorized attacker to elevate privileges over a network.
-
-
Sep 9, 2026
Sep 8, 2026
N/A· v4
7.0 HIGH· v3
N/A· v2
Use after free in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
-
-
Sep 9, 2026
Sep 8, 2026
N/A· v4
8.0 HIGH· v3
N/A· v2
Out-of-bounds read in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges over a network.
-
-
Sep 9, 2026
Sep 8, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.
-
-
Sep 9, 2026
Sep 8, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Absolute path traversal in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
-
-
Sep 9, 2026
Sep 8, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Deserialization of untrusted data in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network.
-
-
Sep 9, 2026
Sep 8, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally.
-
-
Sep 9, 2026
Sep 4, 2026
6.3 MEDIUM· v4
N/A· v3
N/A· v2
PJSIP is a free and open source multimedia communication library written in C. Prior to commit 4472a31, a stack buffer overflow exists in the PJLIB-UTIL telnet CLI front-end when rendering feedback for an entered command...Show more
PJSIP is a free and open source multimedia communication library written in C. Prior to commit 4472a31, a stack buffer overflow exists in the PJLIB-UTIL telnet CLI front-end when rendering feedback for an entered command line. Several command-line handling paths write an attacker-influenced amount of data into fixed-size buffers without sufficient bounds checking, so a long command line can overflow them. This affects only applications that enable the telnet CLI front-end (e.g. pj_cli_telnet_create() / --cli-telnet-port). The telnet CLI is an interactive administration interface with no authentication, so any client able to reach it can already issue arbitrary CLI commands. A malformed or overly long command line can overflow a fixed-size stack buffer while rendering command-line feedback, which may lead to application termination. Because reaching this code already requires access to the unauthenticated CLI, the impact beyond that existing access is limited. Applications that do not enable the telnet CLI front-end are not affected. This issue has been patched via commit 4472a31.Show less
-
-
Sep 9, 2026
Sep 5, 2026
N/A· v4
9.1 CRITICAL· v3
N/A· v2
YesWiki is a wiki system written in PHP. Prior to version 4.6.6, the {{erasespamedcomments}} wiki action (actions/EraseSpamedCommentsAction.php) accepts a suppr[] array from POST and deletes every wiki page whose tag app...Show more
YesWiki is a wiki system written in PHP. Prior to version 4.6.6, the {{erasespamedcomments}} wiki action (actions/EraseSpamedCommentsAction.php) accepts a suppr[] array from POST and deletes every wiki page whose tag appears in that array, with no authorization check anywhere in the action body or in the page-deletion path it invokes. Combined with YesWiki's allow-by-default action ACL model, any user who has page write access, which is the default for everyone (default_write_acl='*') on a fresh install can permanently delete arbitrary wiki pages, including the front page, admin pages, and pages owned by other users. This issue has been patched in version 4.6.6.Show less
-
-
Sep 9, 2026
Aug 7, 2026
N/A· v4
5.9 MEDIUM· v3
N/A· v2
A lack of tenant separation in SuperTokens Inc. SuperTokens Core v6.0.0 to v11.4.0 allows an authenticated party in one tenant to access sessions, data, and endpoints of another tenant.