External control of file name or path in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network....
Fresh 2026 Zero-Days & Newly Disclosed CVEs
Continuous surveillance of newly registered CVE advisories with CVSS threat scores, attack vector metrics, and impacted software libraries.
Heap-based buffer overflow in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to deny service over a network....
Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network....
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network....
Relative path traversal in Age of Empires II: Definitive Edition Game allows an unauthorized attacker to execute code over a network....
Loop with unreachable exit condition ('infinite loop') in Azure Active Directory allows an unauthorized attacker to deny service over a network....
Deserialization of untrusted data in Azure Active Directory allows an unauthorized attacker to deny service over a network....
Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network....
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network....
Improper authentication in Azure Spring Apps allows an authorized attacker to elevate privileges over a network....
Uncontrolled resource consumption in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a network....
Allocation of resources without limits or throttling in HTTP/2 allows an unauthorized attacker to deny service over a network....
Allocation of resources without limits or throttling in Windows HTTP.sys allows an unauthorized attacker to deny service over a network....
Integer underflow (wrap or wraparound) in Windows DHCP Client allows an unauthorized attacker to elevate privileges over a network....
Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to execute code over a network....
Heap-based buffer overflow in Windows FTP Service allows an unauthorized attacker to execute code over a network....
Use after free in DNS Server allows an authorized attacker to execute code over a network....
Heap-based buffer overflow in Active Directory Domain Services allows an unauthorized attacker to execute code over a network....
Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network....
Improper neutralization of special elements used in a command ('command injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to execute code over a network....
Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network....
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network....
Missing release of memory after effective lifetime in Windows Cryptographic Services allows an unauthorized attacker to deny service over a network....
Heap-based buffer overflow in SQL Server ODBC driver allows an unauthorized attacker to execute code over a network....