Search

Search Results (408730 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-75634 1 Adobe 4 C2pa, C2patool, Content Credentials Command-line Tool and 1 more 2026-10-15 4.3 Medium
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page.
CVE-2026-45451 2026-10-15 8.3 High
: Improper Authentication vulnerability in Unitronics Unitronics UniStream Pro/UniLogic. This issue affects Unitronics UniStream Pro/UniLogic: Unitronics UniStream Pro versions only (B10 / C10) – UniLogic versions prior to 1.41.329.
CVE-2026-83862 1 Microsoft 14 Windows 10 1607, Windows 10 1809, Windows Server 2012 and 11 more 2026-10-15 9.8 Critical
Use after free in Windows Network Load Balancing allows an unauthorized attacker to execute code over a network.
CVE-2026-45452 2026-10-15 8.3 High
Use of Externally-Controlled format string vulnerability in Unitronics Unitronics UniStream Pro/UniLogic. This issue affects Unitronics UniStream Pro/UniLogic: Unitronics UniStream Pro versions only (B10 / C10) – UniLogic versions prior to 1.41.329.
CVE-2026-75638 1 Adobe 4 C2pa, C2patool, Content Credentials Command-line Tool and 1 more 2026-10-15 6.5 Medium
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page.
CVE-2026-76194 1 Adobe 4 C2pa, C2patool, Content Credentials Command-line Tool and 1 more 2026-10-15 4.3 Medium
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page.
CVE-2026-89277 1 Adobe 4 C2pa, C2patool, Content Credentials Command-line Tool and 1 more 2026-10-15 5.5 Medium
CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page.
CVE-2026-110381 2026-10-15 6.3 Medium
Authorization Bypass Through User-Controlled Key vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simply Schedule Appointments: from n/a through 1.6.12.35.
CVE-2026-110888 2026-10-15 4.3 Medium
Missing Authorization vulnerability in Meow Apps AI Engine ai-engine allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Engine: from n/a through 3.8.3.
CVE-2026-110891 2026-10-15 5.4 Medium
Missing Authorization vulnerability in WordLift Srl WordLift wordlift allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordLift: from n/a through 3.54.15.
CVE-2026-101987 2026-10-15 6.5 Medium
An Improper Validation of Specified Quantity in Input vulnerability in the routing daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker to cause a denial of service by sending a specific IS-IS SRv6 packet when SRv6 and Flexible Algorithm are enabled.
CVE-2026-97781 1 Microsoft 1 365 Apps 2026-10-15 8.8 High
Improper neutralization of special elements used in a command ('command injection') in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network.
CVE-2026-97774 1 Microsoft 1 365 Apps 2026-10-15 7 High
Time-of-check time-of-use (toctou) race condition in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
CVE-2026-97001 1 Microsoft 7 365 Apps, Microsoft 365, Office 2021 and 4 more 2026-10-15 7.8 High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-96997 1 Microsoft 7 365 Apps, Microsoft 365, Office 2021 and 4 more 2026-10-15 7.8 High
Use after free in Microsoft Office OneNote allows an authorized attacker to elevate privileges locally.
CVE-2026-96996 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-10-15 7.8 High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-96995 1 Microsoft 7 365 Apps, Microsoft 365, Office 2021 and 4 more 2026-10-15 7.8 High
Stack-based buffer overflow in Microsoft Office Word allows an authorized attacker to elevate privileges locally.
CVE-2026-88197 1 Microsoft 7 365 Apps, Microsoft 365, Office 2021 and 4 more 2026-10-15 8.8 High
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
CVE-2026-88196 1 Microsoft 7 365 Apps, Microsoft 365, Office 2021 and 4 more 2026-10-15 8.8 High
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
CVE-2026-88109 1 Microsoft 3 365 Apps, Office 2021, Office 2024 2026-10-15 7.8 High
Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.