CVE Explorer

Exact snapshot results

353,537 CVE records

CVE ID descending · no relevance ranking

CVE-2026-45542

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.2.6, 5.3.5, 5.4.4, 5.5.4, and 6.0, a heap buffer overflow exists in the Security Scheme 2 (SRP6a) session-setup path of the protocomm component. The first-phase handler (handle_session_command0() in components/protocomm/src/security/security2.c) trusts the length of a client-supplied protobuf field for the SRP6a username and copies it into a buffer whose size is derived from a narrower destination type. The re

PUBLISHED

Vendor: espressif
Product: esp-idf
Provider severity: HIGH
Conflicts: 0

CVE-2026-45541

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.2.6, 5.3.5, 5.4.4, 5.5.4, and 6.0, a NULL-pointer dereference exists in the WebSocket subprotocol-negotiation path of the esp_http_server component. While parsing the client-supplied Sec-WebSocket-Protocol request header during the WebSocket handshake, the tokenisation result is dereferenced without a NULL check, so a malformed header value can crash the server before any application-level authentication runs.

PUBLISHED

Vendor: espressif
Product: esp-idf
Provider severity: HIGH
Conflicts: 0

CVE-2026-4554

A security flaw has been discovered in Tenda F453 1.0.0.3. The affected element is the function FormWriteFacMac of the file /goform/WriteFacMac. The manipulation of the argument mac results in command injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks.

PUBLISHED

Vendor: Tenda
Product: F453
Provider severity: MEDIUM
Conflicts: 2

CVE-2026-45539

Microsoft APM is an open-source, community-driven dependency manager for AI agents. From 0.5.4 to 0.12.4, two primitive integrators in apm-cli enumerate package files with bare Path.glob() / Path.rglob() calls and read each match with Path.read_text(), transparently following symbolic links. A symlink committed inside a remote APM dependency under .apm/prompts/<x>.prompt.md or .apm/agents/<x>.agent.md is preserved verbatim into apm_modules/ on clone and then dereferenced during integration, with

PUBLISHED

Vendor: microsoft
Product: apm
Provider severity: HIGH
Conflicts: 1

CVE-2026-45536

Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, netty_unix_socket_recvFd sets msg_control to `char control[CMSG_SPACE(sizeof(int))]` (line 940) — 24 bytes on 64-bit Linux. A peer-sent SCM_RIGHTS cmsg carrying two ints has cmsg_len = CMSG_LEN(8) = 24, which fits exactly with no MSG_CTRUNC, so the kernel installs both fds in the receiving process. The subsequent check `cmsg->cmsg_len == CMSG_LEN(sizeof(int)

PUBLISHED

Vendor: netty
Product: netty
Provider severity: MEDIUM
Conflicts: 1

CVE-2026-45535

DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase SQL-type datasets store attacker-controlled SQL variable defaultValue entries such as ${var} and SqlparserUtils.handleVariableDefaultValue() inserts them with String.replace() without escaping or parameterization, causing stored SQL injection whenever a user with dataset read permission accesses the dataset. This issue is fixed in version 2.10.23.

PUBLISHED

Vendor: dataease
Product: dataease
Provider severity: HIGH
Conflicts: 0

CVE-2026-45534

DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase Redshift datasource connections can load attacker-controlled rsjdbc.ini configuration from System.getProperty("java.io.tmpdir"), setting socketFactory=org.springframework.context.support.FileSystemXmlApplicationContext so com.amazon.redshift.Driver#connect, com.amazon.redshift.Driver#getJdbcIniFile, and com.amazon.redshift.util.ObjectFactory#instantiate execute a reflection-based remote code execution cha

PUBLISHED

Vendor: dataease
Product: dataease
Provider severity: CRITICAL
Conflicts: 0

CVE-2026-45533

DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase export-center deletion can accept path traversal sequences such as ../ in the bulk delete API endpoint and pass attacker-controlled identifiers to ExportCenterManage.delete, allowing recursive deletion of arbitrary server directories through export task cleanup. This issue is fixed in version 2.10.23.

PUBLISHED

Vendor: dataease
Product: dataease
Provider severity: HIGH
Conflicts: 0

CVE-2026-4553

A vulnerability was identified in Tenda F453 1.0.0.3. Impacted is the function fromNatlimit of the file /goform/Natlimit of the component Parameters Handler. The manipulation of the argument page leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.

PUBLISHED

Vendor: Tenda
Product: F453
Provider severity: HIGH
Conflicts: 2

CVE-2026-4552

A vulnerability was determined in Tenda F453 1.0.0.3. This issue affects the function fromVirtualSer of the file /goform/VirtualSer of the component Parameters Handler. Executing a manipulation of the argument page can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.

PUBLISHED

Vendor: Tenda
Product: F453
Provider severity: HIGH
Conflicts: 2

CVE-2026-4551

A vulnerability was found in Tenda F453 1.0.0.3. This vulnerability affects the function fromSafeClientFilter of the file /goform/SafeClientFilter of the component Parameters Handler. Performing a manipulation of the argument menufacturer/Go results in stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been made public and could be used.

PUBLISHED

Vendor: Tenda
Product: F453
Provider severity: HIGH
Conflicts: 2

CVE-2026-45505

Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ. Non-parenthesized discovery wrappers such as `masterslave:vm://...,...` and `static:vm://...` incorrectly pass validation allowing bypass of fix in CVE-2026-34197. Original description from CVE-2026-34197. Apache ActiveMQ exposes the Jolokia JMX-HTTP bridge at /api/jolokia/ on the web console. The default Jolokia access policy pe

PUBLISHED

Vendor: Apache Software Foundation, Apache Software Foundation, Apache Software Foundation
Product: Apache ActiveMQ All, Apache ActiveMQ, Apache ActiveMQ Broker
Provider severity: HIGH
Conflicts: 2

CVE-2026-45504

Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

PUBLISHED

Vendor: Microsoft, Microsoft, Microsoft, Microsoft
Product: Microsoft Exchange Server 2019 Cumulative Update 14, Microsoft Exchange Server 2019 Cumulative Update 15, Microsoft Exchange Server Subscription Edition RTM, Microsoft Exchange Server 2016 Cumulative Update 23
Provider severity: HIGH
Conflicts: 1

CVE-2026-45503

Improper authorization in Microsoft Exchange Server allows an authorized attacker to disclose information over a network.

PUBLISHED

Vendor: Microsoft, Microsoft, Microsoft, Microsoft
Product: Microsoft Exchange Server 2019 Cumulative Update 14, Microsoft Exchange Server 2019 Cumulative Update 15, Microsoft Exchange Server 2016 Cumulative Update 23, Microsoft Exchange Server Subscription Edition RTM
Provider severity: HIGH
Conflicts: 1

CVE-2026-45502

Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to disclose information over a network.

PUBLISHED

Vendor: Microsoft, Microsoft, Microsoft, Microsoft
Product: Microsoft Exchange Server 2019 Cumulative Update 14, Microsoft Exchange Server 2016 Cumulative Update 23, Microsoft Exchange Server Subscription Edition RTM, Microsoft Exchange Server 2019 Cumulative Update 15
Provider severity: MEDIUM
Conflicts: 1

CVE-2026-45501

Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network.

PUBLISHED

Vendor: Microsoft, Microsoft, Microsoft, Microsoft
Product: Microsoft Exchange Server 2019 Cumulative Update 15, Microsoft Exchange Server Subscription Edition RTM, Microsoft Exchange Server 2016 Cumulative Update 23, Microsoft Exchange Server 2019 Cumulative Update 14
Provider severity: MEDIUM
Conflicts: 1

CVE-2026-45500

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

PUBLISHED

Vendor: Microsoft, Microsoft, Microsoft, Microsoft
Product: Microsoft Exchange Server 2016 Cumulative Update 23, Microsoft Exchange Server Subscription Edition RTM, Microsoft Exchange Server 2019 Cumulative Update 14, Microsoft Exchange Server 2019 Cumulative Update 15
Provider severity: MEDIUM
Conflicts: 1

CVE-2026-4550

A vulnerability has been found in code-projects Simple Gym Management System up to 1.0. This affects an unknown part of the file /gym/func.php. Such manipulation of the argument Trainer_id/fname leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.

PUBLISHED

Vendor: code-projects
Product: Simple Gym Management System
Provider severity: MEDIUM
Conflicts: 2

CVE-2026-45499

Server-side request forgery (ssrf) in Azure OpenAI allows an authorized attacker to elevate privileges over a network.

PUBLISHED

Vendor: Microsoft
Product: Azure Open AI
Provider severity: CRITICAL
Conflicts: 0

CVE-2026-45498

Microsoft Defender Denial of Service Vulnerability

PUBLISHEDCISA KEV

Vendor: Microsoft
Product: Microsoft Defender Antimalware Platform
Provider severity: MEDIUM
Conflicts: 0

CVE-2026-45497

Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an authorized attacker to execute code over a network.

PUBLISHED

Vendor: Microsoft
Product: Microsoft 365 Copilot
Provider severity: HIGH
Conflicts: 0

CVE-2026-45496

Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

PUBLISHED

Vendor: Microsoft
Product: Visual Studio Code
Provider severity: MEDIUM
Conflicts: 0

CVE-2026-45495

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

PUBLISHED

Vendor: Microsoft
Product: Microsoft Edge (Chromium-based)
Provider severity: HIGH
Conflicts: 1

CVE-2026-45494

Microsoft Edge (Chromium-based) Spoofing Vulnerability

PUBLISHED

Vendor: Microsoft
Product: Microsoft Edge (Chromium-based)
Provider severity: MEDIUM
Conflicts: 0

CVE-2026-45492

Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.

PUBLISHED

Vendor: Microsoft
Product: Microsoft Edge (Chromium-based)
Provider severity: MEDIUM
Conflicts: 0

CVE-2026-45491

Improper link resolution before file access ('link following') in .NET allows an unauthorized attacker to perform tampering locally.

PUBLISHED

Vendor: Microsoft, Microsoft, Microsoft, Microsoft
Product: .NET 8.0, .NET 8.0, .NET 9.0, .NET 10.0
Provider severity: MEDIUM
Conflicts: 1

CVE-2026-45490

A flaw was found in the .NET SDK dotnet.exe workload command on Windows. Insufficient access controls on a named pipe could allow a local attacker to perform arbitrary file creation or truncation operations with the privileges of another local user. This issue may lead to privilege escalation and unauthorized access, modification, or destruction of data belonging to the targeted user.

PUBLISHED

Vendor: Microsoft, Microsoft, Red Hat, Red Hat, Microsoft, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat
Product: .NET 8.0, .NET 9.0, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 8, .NET 10.0, Red Hat Hardened Images, Red Hat Enterprise Linux 8, Red Hat Hardened Images, Red Hat Hardened Images, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 10
Provider severity: HIGH
Conflicts: 3

CVE-2026-4549

A flaw has been found in mickasmt next-saas-stripe-starter 1.0.0. Affected by this issue is the function openCustomerPortal of the file actions/open-customer-portal.ts of the component Stripe API. This manipulation causes authorization bypass. Remote exploitation of the attack is possible. The complexity of an attack is rather high. The exploitation is known to be difficult.

PUBLISHED

Vendor: mickasmt
Product: next-saas-stripe-starter
Provider severity: LOW
Conflicts: 2

CVE-2026-45489

Microsoft Edge (Chromium-based) Spoofing Vulnerability

PUBLISHED

Vendor: Microsoft
Product: Microsoft Edge (Chromium-based)
Provider severity: MEDIUM
Conflicts: 1

CVE-2026-45488

User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

PUBLISHED

Vendor: Microsoft
Product: Microsoft Edge (Chromium-based)
Provider severity: MEDIUM
Conflicts: 0

CVE-2026-45487

Time-of-check time-of-use (TOCTOU) race condition in Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

PUBLISHED

Vendor: Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product: Windows 10 Version 21H2, Windows 11 version 23H2, Windows Server 2025, Windows 11 Version 24H2, Windows Server 2022, Windows 10 Version 22H2, Windows 11 Version 23H2, Windows 11 version 26H1, Windows 11 Version 25H2, Windows Server 2025 (Server Core installation)
Provider severity: HIGH
Conflicts: 1

CVE-2026-45486

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

PUBLISHED

Vendor: Microsoft, Microsoft, Microsoft, Microsoft
Product: Microsoft Office LTSC for Mac 2024, Microsoft 365 Apps for Enterprise, Microsoft Office LTSC for Mac 2021, Microsoft Office 365 for Mac
Provider severity: HIGH
Conflicts: 1

CVE-2026-45485

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

PUBLISHED

Vendor: Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product: Microsoft SharePoint Enterprise Server 2016, Microsoft 365 Apps for Enterprise, Microsoft SharePoint Server 2019, Microsoft Office LTSC 2021, Microsoft Office 365 for Mac, Microsoft Office 2019, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024, Microsoft Office LTSC 2024, Microsoft Office 2016, Microsoft SharePoint Server Subscription Edition
Provider severity: LOW
Conflicts: 1

CVE-2026-45484

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

PUBLISHED

Vendor: Microsoft, Microsoft, Microsoft
Product: Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition
Provider severity: HIGH
Conflicts: 1

CVE-2026-45483

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office Project Server allows an authorized attacker to perform spoofing over a network.

PUBLISHED

Vendor: Microsoft, Microsoft, Microsoft
Product: Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition, Microsoft SharePoint Enterprise Server 2016
Provider severity: MEDIUM
Conflicts: 1

CVE-2026-45482

Improper limitation of a pathname to a restricted directory ('path traversal') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

PUBLISHED

Vendor: Microsoft
Product: Microsoft Visual Studio Code CoPilot Chat Extension
Provider severity: HIGH
Conflicts: 0

CVE-2026-45481

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

PUBLISHED

Vendor: Microsoft, Microsoft, Microsoft
Product: Microsoft SharePoint Server Subscription Edition, Microsoft SharePoint Server 2019, Microsoft SharePoint Enterprise Server 2016
Provider severity: HIGH
Conflicts: 1

CVE-2026-45480

Improper authentication in Azure Active Directory allows an unauthorized attacker to elevate privileges over a network.

PUBLISHED

Vendor: Microsoft
Product: Azure Active Directory
Provider severity: CRITICAL
Conflicts: 0

CVE-2026-4548

A vulnerability was detected in mickasmt next-saas-stripe-starter 1.0.0. Affected by this vulnerability is the function updateUserrole of the file actions/update-user-role.ts. The manipulation of the argument userId/role results in improper authorization. The attack may be launched remotely.

PUBLISHED

Vendor: mickasmt
Product: next-saas-stripe-starter
Provider severity: MEDIUM
Conflicts: 2

CVE-2026-45479

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

PUBLISHED

Vendor: Microsoft, Microsoft, Microsoft
Product: Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server Subscription Edition, Microsoft SharePoint Server 2019
Provider severity: MEDIUM
Conflicts: 1

CVE-2026-45476

Use after free in Linux MANA Driver allows an authorized attacker to elevate privileges locally.

PUBLISHED

Vendor: Microsoft
Product: Linux kernel - Microsoft MANA Network Driver
Provider severity: HIGH
Conflicts: 0

CVE-2026-45475

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

PUBLISHED

Vendor: Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product: Microsoft 365 Apps for Enterprise, Microsoft SharePoint Server 2019, Microsoft Office 2016, Microsoft SharePoint Server Subscription Edition, Microsoft Office LTSC for Mac 2024, Microsoft Office 2019, Microsoft Office LTSC 2024, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC 2021, Microsoft SharePoint Enterprise Server 2016, Microsoft Office 365 for Mac
Provider severity: HIGH
Conflicts: 1

CVE-2026-45474

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

PUBLISHED

Vendor: Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product: Microsoft Office 2019, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC 2024, Microsoft Office LTSC 2021, Microsoft Office LTSC for Mac 2024, Microsoft Office 365 for Mac, Microsoft Office 2016, Microsoft 365 Apps for Enterprise, Microsoft Office for Android
Provider severity: HIGH
Conflicts: 1

CVE-2026-45472

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

PUBLISHED

Vendor: Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product: Microsoft Office 2019, Microsoft 365 Apps for Enterprise, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC 2024, Microsoft Office 2016, Microsoft Office for Android, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021, Microsoft Office LTSC for Mac 2024
Provider severity: HIGH
Conflicts: 1

CVE-2026-45471

Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.

PUBLISHED

Vendor: Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product: Microsoft 365 Apps for Enterprise, Microsoft Office 2019, Microsoft SharePoint Enterprise Server 2016, Microsoft Word 2016, Microsoft SharePoint Server 2019, Microsoft Office LTSC 2024, Microsoft Office 365 for Mac, Microsoft SharePoint Server Subscription Edition, Microsoft Office LTSC 2021, Microsoft Office LTSC for Mac 2024, Microsoft Office LTSC for Mac 2021
Provider severity: HIGH
Conflicts: 1

CVE-2026-4547

A security vulnerability has been detected in mickasmt next-saas-stripe-starter 1.0.0. Affected is the function generateUserStripe of the file actions/generate-user-stripe.ts of the component Checkout Handler. The manipulation of the argument priceId leads to business logic errors. The attack may be initiated remotely.

PUBLISHED

Vendor: mickasmt
Product: next-saas-stripe-starter
Provider severity: MEDIUM
Conflicts: 1

CVE-2026-45469

Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

PUBLISHED

Vendor: Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product: Microsoft Office LTSC 2021, Microsoft Office LTSC for Mac 2024, Microsoft Excel 2016, Microsoft Office 2019, Microsoft 365 Apps for Enterprise, Microsoft Office LTSC 2024, Office Online Server, Microsoft Office LTSC for Mac 2021, Microsoft Office 365 for Mac
Provider severity: HIGH
Conflicts: 2

CVE-2026-45468

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

PUBLISHED

Vendor: Microsoft, Microsoft, Microsoft
Product: Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition
Provider severity: MEDIUM
Conflicts: 1

CVE-2026-45467

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

PUBLISHED

Vendor: Microsoft, Microsoft, Microsoft
Product: Microsoft SharePoint Server 2019, Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server Subscription Edition
Provider severity: MEDIUM
Conflicts: 1

CVE-2026-45466

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

PUBLISHED

Vendor: Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product: Microsoft 365 Apps for Enterprise, Microsoft Office 365 for Mac, Microsoft Office LTSC 2021, Microsoft Office LTSC 2024, Microsoft Office LTSC for Mac 2024, Microsoft Office LTSC for Mac 2021
Provider severity: LOW
Conflicts: 1