Baitaphish
Security intelligence
SearchLatest briefing
Data & Insights

CVE Explorer

Search one exact, source-linked CVE snapshot by CVE ID or explicit vendor and product tokens. Provider severity, KEV, conflicts, and stale state remain separate observations—not a Baitaphish risk rating.
Snapshot urn:baitaphish:cve-read-model-snapshot:v3:f2c3f72dcc196f8e7d63aa2d29709ad8b3fea39110eb2d563da5ce9b6fa9da89Released 2026-08-05T02:00:00Z
Exact snapshot results

353,537 CVE records

CVE ID descending · no relevance ranking

CVE-2026-43015

In the Linux kernel, the following vulnerability has been resolved: net: macb: fix clk handling on PCI glue driver removal platform_device_unregister() may still want to use the registered clks during runtime resume callback. Note that there is a commit d82d5303c4c5 ("net: macb: fix use after free on rmmod") that addressed the similar problem of clk vs platform device unregistration but just moved the bug to another place. Save the pointers to clks into local variables for reuse after platfo

PUBLISHED
Vendor
Linux, Linux
Product
Linux, Linux
Provider severity
Not asserted
Conflicts
1

CVE-2026-43014

In the Linux kernel, the following vulnerability has been resolved: net: macb: properly unregister fixed rate clocks The additional resources allocated with clk_register_fixed_rate() need to be released with clk_unregister_fixed_rate(), otherwise they are lost.

PUBLISHED
Vendor
Linux, Linux
Product
Linux, Linux
Provider severity
Not asserted
Conflicts
1

CVE-2026-43013

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: lag: Check for LAG device before creating debugfs __mlx5_lag_dev_add_mdev() may return 0 (success) even when an error occurs that is handled gracefully. Consequently, the initialization flow proceeds to call mlx5_ldev_add_debugfs() even when there is no valid LAG context. mlx5_ldev_add_debugfs() blindly created the debugfs directory and attributes. This exposed interfaces (like the members file) that rely on a valid

PUBLISHED
Vendor
Linux, Linux
Product
Linux, Linux
Provider severity
Not asserted
Conflicts
1

CVE-2026-43012

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix switchdev mode rollback in case of failure If for some internal reason switchdev mode fails, we rollback to legacy mode, before this patch, rollback will unregister the uplink netdev and leave it unregistered causing the below kernel bug. To fix this, we need to avoid netdev unregister by setting the proper rollback flag 'MLX5_PRIV_FLAGS_SWITCH_LEGACY' to indicate legacy mode. devlink (431) used greatest stack

PUBLISHED
Vendor
Linux, Linux
Product
Linux, Linux
Provider severity
Not asserted
Conflicts
1

CVE-2026-43011

In the Linux kernel, the following vulnerability has been resolved: net/x25: Fix potential double free of skb When alloc_skb fails in x25_queue_rx_frame it calls kfree_skb(skb) at line 48 and returns 1 (error). This error propagates back through the call chain: x25_queue_rx_frame returns 1 | v x25_state3_machine receives the return value 1 and takes the else branch at line 278, setting queued=0 and returning 0 | v x25_process_rx_frame returns queued=0 | v x25_backlog_r

PUBLISHED
Vendor
Siemens, Siemens, Siemens, Siemens, Linux, Siemens, Linux, Siemens, Siemens, Siemens, Siemens, Siemens
Product
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP, SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP, Linux, SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP, Linux, SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP, SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, SIPLUS S7-1500 CPU 1518-4 PN/DP MFP, SIPLUS S7-1500 CPU 1518-4 PN/DP MFP
Provider severity
CRITICAL
Conflicts
1

CVE-2026-43010

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject sleepable kprobe_multi programs at attach time kprobe.multi programs run in atomic/RCU context and cannot sleep. However, bpf_kprobe_multi_link_attach() did not validate whether the program being attached had the sleepable flag set, allowing sleepable helpers such as bpf_copy_from_user() to be invoked from a non-sleepable context. This causes a "sleeping function called from invalid context" splat: BUG: sleepin

PUBLISHED
Vendor
Linux, Linux
Product
Linux, Linux
Provider severity
Not asserted
Conflicts
1

CVE-2026-4301

The Rate Star Review Vote - AJAX Reviews, Votes, Star Ratings plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 1.6.4. The vwrsr_review() AJAX handler lacks both capability checks and nonce verification. The only access control is an is_user_logged_in() check. When the 'form' parameter is set to 'update', the function takes an arbitrary post ID from the user-supplied 'rating_id' GET parameter, sets it as the post ID in the update array, and passes it

PUBLISHED
Vendor
videowhisper
Product
Rate Star Review Vote – AJAX Reviews, Votes, Star Ratings
Provider severity
MEDIUM
Conflicts
0

CVE-2026-43009

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix incorrect pruning due to atomic fetch precision tracking When backtrack_insn encounters a BPF_STX instruction with BPF_ATOMIC and BPF_FETCH, the src register (or r0 for BPF_CMPXCHG) also acts as a destination, thus receiving the old value from the memory location. The current backtracking logic does not account for this. It treats atomic fetch operations the same as regular stores where the src register is only an in

PUBLISHED
Vendor
Linux, Linux
Product
Linux, Linux
Provider severity
HIGH
Conflicts
1

CVE-2026-43008

In the Linux kernel, the following vulnerability has been resolved: gpio: qixis-fpga: Fix error handling for devm_regmap_init_mmio() devm_regmap_init_mmio() returns an ERR_PTR() on failure, not NULL. The original code checked for NULL which would never trigger on error, potentially leading to an invalid pointer dereference. Use IS_ERR() and PTR_ERR() to properly handle the error case.

PUBLISHED
Vendor
Linux, Linux
Product
Linux, Linux
Provider severity
Not asserted
Conflicts
1

CVE-2026-43007

In the Linux kernel, the following vulnerability has been resolved: accel/qaic: Handle DBC deactivation if the owner went away When a DBC is released, the device sends a QAIC_TRANS_DEACTIVATE_FROM_DEV transaction to the host over the QAIC_CONTROL MHI channel. QAIC handles this by calling decode_deactivate() to release the resources allocated for that DBC. Since that handling is done in the qaic_manage_ioctl() context, if the user goes away before receiving and handling the deactivation, the ho

PUBLISHED
Vendor
Linux, Linux
Product
Linux, Linux
Provider severity
Not asserted
Conflicts
1

CVE-2026-43006

In the Linux kernel, the following vulnerability has been resolved: io_uring/rsrc: reject zero-length fixed buffer import validate_fixed_range() admits buf_addr at the exact end of the registered region when len is zero, because the check uses strict greater-than (buf_end > imu->ubuf + imu->len). io_import_fixed() then computes offset == imu->len, which causes the bvec skip logic to advance past the last bio_vec entry and read bv_offset from out-of-bounds slab memory. Return early from io_im

PUBLISHED
Vendor
Linux, Linux
Product
Linux, Linux
Provider severity
HIGH
Conflicts
1

CVE-2026-43005

In the Linux kernel, the following vulnerability has been resolved: hwmon: (tps53679) Fix array access with zero-length block read i2c_smbus_read_block_data() can return 0, indicating a zero-length read. When this happens, tps53679_identify_chip() accesses buf[ret - 1] which is buf[-1], reading one byte before the buffer on the stack. Fix by changing the check from "ret < 0" to "ret <= 0", treating a zero-length read as an error (-EIO), which prevents the out-of-bounds array access. Also fix

PUBLISHED
Vendor
Linux, Linux
Product
Linux, Linux
Provider severity
Not asserted
Conflicts
1

CVE-2026-43004

In the Linux kernel, the following vulnerability has been resolved: spi: stm32-ospi: Fix resource leak in remove() callback The remove() callback returned early if pm_runtime_resume_and_get() failed, skipping the cleanup of spi controller and other resources. Remove the early return so cleanup completes regardless of PM resume result.

PUBLISHED
Vendor
Linux, Linux
Product
Linux, Linux
Provider severity
Not asserted
Conflicts
1

CVE-2026-43003

An issue was discovered in OpenStack ironic-python-agent 1.0.0 through 11.5.0. Ironic Python Agent (IPA) sometimes executes grub-install from within a chroot of the deployed partition image, leading to code execution in the case of a malicious image.

PUBLISHED
Vendor
Red Hat, OpenStack, Red Hat
Product
Red Hat OpenShift Container Platform 4, ironic-python-agent, Red Hat OpenShift Container Platform 4
Provider severity
HIGH
Conflicts
3

CVE-2026-43002

An issue was discovered in OpenStack Horizon 25.6 and 25.7 before 25.7.3. There is a write operation to the session storage backend before authentication and thus storage can be exhausted by unauthenticated requests. This is a regression of the CVE-2014-8124 fix.

PUBLISHED
Vendor
OpenStack
Product
Horizon
Provider severity
MEDIUM
Conflicts
0

CVE-2026-43001

An issue was discovered in OpenStack Keystone before 29.0.2. POST /v3/credentials did not validate that the caller-supplied project_id for an EC2-type credential matched the project of the authenticating application credential. This allowed an attacker holding an unrestricted application credential for project A to create an EC2 credential targeting project B; a subsequent /v3/ec2tokens exchange would then issue a Keystone token scoped to project B while still carrying the original app_cred_id,

PUBLISHED
Vendor
OpenStack, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat
Product
Keystone, Red Hat OpenStack Platform 17.1, Red Hat OpenStack Platform 18.0, Red Hat OpenStack Platform 17.1, Red Hat OpenStack Platform 16.2, Red Hat OpenStack Platform 18.0, Red Hat OpenStack Platform 16.2, Red Hat OpenStack Platform 13 (Queens)
Provider severity
HIGH
Conflicts
3

CVE-2026-43000

A flaw was found in OpenStack Keystone. An attacker with a member role on a project can escalate their privileges to an administrator role. This is achieved by combining an application credential impersonation vulnerability with the misuse of Keystone trusts. The system incorrectly validates delegated roles against the victim's actual database roles instead of the requesting token, allowing the attacker to create a trust that grants them the victim's administrative privileges. This trust can the

PUBLISHED
Vendor
Red Hat, Red Hat, Red Hat, Red Hat, OpenStack, Red Hat, Red Hat, Red Hat, Red Hat
Product
Red Hat OpenStack Platform 16.2, Red Hat OpenStack Platform 13 (Queens), Red Hat OpenStack Platform 13 (Queens), Red Hat OpenStack Platform 18.0, Keystone, Red Hat OpenStack Platform 16.2, Red Hat OpenStack Platform 18.0, Red Hat OpenStack Platform 17.1, Red Hat OpenStack Platform 17.1
Provider severity
HIGH, MEDIUM
Conflicts
3

CVE-2026-4300

The Robo Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Loading Label' setting in all versions up to, and including, 5.1.3. The plugin uses a custom `|***...***|` marker pattern in its `fixJsFunction()` method to embed raw JavaScript function references within JSON-encoded configuration objects. When a gallery's options are rendered on the frontend, `json_encode()` wraps all string values in double quotes. The `fixJsFunction()` method then strips the `"|***` a

PUBLISHED
Vendor
robosoft
Product
Robo Gallery – Photo & Image Slider
Provider severity
MEDIUM
Conflicts
0

CVE-2026-42999

An issue was discovered in OpenStack Keystone before 29.0.2. The Keystone RBAC policy enforcer in enforce_call unconditionally merges the raw JSON request body into the policy enforcement dictionary via policy_dict.update(json_input.copy()), overwriting trusted target data that was previously set from database lookups. Because flask.request.get_json is called with force=True, this works regardless of Content-Type or HTTP method. Any authenticated user can inject arbitrary policy target attribute

PUBLISHED
Vendor
OpenStack, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat, Red Hat
Product
Keystone, Red Hat OpenStack Platform 16.2, Red Hat OpenStack Platform 16.2, Red Hat OpenStack Platform 17.1, Red Hat OpenStack Platform 13 (Queens), Red Hat OpenStack Platform 17.1, Red Hat OpenStack Platform 18.0, Red Hat OpenStack Platform 18.0, Red Hat OpenStack Platform 13 (Queens)
Provider severity
HIGH, MEDIUM
Conflicts
3

CVE-2026-42998

An issue was discovered in OpenStack Keystone before 29.0.2. The Keystone application credential authentication plugin does not verify that the user supplied in the authentication request matches the owner of the application credential. An attacker can authenticate with their own application credential ID and secret while specifying a different user's name and domain in the request body. Keystone issues a token attributed to the victim user. The impersonated token is project-scoped and carries t

PUBLISHED
Vendor
OpenStack
Product
Keystone
Provider severity
MEDIUM
Conflicts
0

CVE-2026-42997

An issue was discovered in idrac in OpenStack Ironic before 35.0.1. During import, a user invoking molds can request authorization to be sent to a remote endpoint. The credential forwarded is a time-limited Keystone token (which provides access to all OpenStack services Ironic is authorized for); or basic credentials configured for molds storage. The fixed versions are 26.1.6, 29.0.5, 32.0.1, and 35.0.1.

PUBLISHED
Vendor
Red Hat, Red Hat, Red Hat, OpenStack, Red Hat
Product
Red Hat OpenShift Container Platform 4, Red Hat OpenStack Platform 18.0, Red Hat OpenStack Platform 17.1, Ironic, Red Hat OpenStack Platform 16.2
Provider severity
HIGH
Conflicts
2

CVE-2026-42996

JS8Call through 2.3.1 and JS8Call-improved before 3.0 have a stack-based buffer overflow via a radio transmission of @APRSIS GRID followed by a long Maidenhead locator. This occurs in grid2deg in APRSISClient.cpp.

PUBLISHED
Vendor
JS8Call-improved, JS8Call
Product
JS8Call-improved, JS8Call
Provider severity
CRITICAL
Conflicts
1

CVE-2026-42994

Bitwarden CLI 2026.4.0 from 2026-04-22T21:57Z to 2026-04-22T23:30Z, when obtained from npm, had embedded malicious code. This is related to a Checkmarx supply chain incident.

PUBLISHED
Vendor
Bitwarden
Product
Bitwarden CLI
Provider severity
HIGH
Conflicts
0

CVE-2026-42993

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

PUBLISHED
Vendor
Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product
Windows 11 version 23H2, Windows Server 2025, Windows 10 Version 22H2, Windows 11 Version 24H2, Windows 11 Version 25H2, Windows Server 2022, Windows 11 version 26H1, Windows 11 Version 23H2, Windows 10 Version 21H2, Windows Server 2025 (Server Core installation)
Provider severity
HIGH
Conflicts
1

CVE-2026-42992

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

PUBLISHED
Vendor
Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product
Windows App Client for Windows Desktop, Windows Server 2022, Windows Server 2016, Windows 11 Version 25H2, Windows Server 2016 (Server Core installation), Windows 11 version 23H2, Windows Server 2019 (Server Core installation), Windows 11 Version 24H2, Windows Server 2025 (Server Core installation), Windows 10 Version 1809, Windows Server 2019, Windows 10 Version 21H2, Windows 11 Version 23H2, Windows Server 2025, Windows 11 version 26H1, Windows 10 Version 22H2, Windows 10 Version 1607
Provider severity
HIGH
Conflicts
1

CVE-2026-42991

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

PUBLISHED
Vendor
Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product
Windows 10 Version 1809, Windows Server 2025, Windows Server 2025 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 11 Version 24H2, Windows 10 Version 22H2, Windows 10 Version 21H2, Windows Server 2022, Windows 11 version 26H1, Windows 11 Version 25H2, Windows 11 Version 23H2, Windows 11 version 23H2
Provider severity
HIGH
Conflicts
2

CVE-2026-42990

Heap-based buffer overflow in SQL Server ODBC driver allows an unauthorized attacker to execute code over a network.

PUBLISHED
Vendor
Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product
Windows Server 2012 R2, Windows 11 Version 25H2, Windows 11 Version 23H2, Windows Server 2012 R2 (Server Core installation), Windows 11 Version 24H2, Windows Server 2025, Windows 11 version 26H1, Windows Server 2022, Windows 11 version 23H2, Windows 10 Version 22H2, Windows 10 Version 1809, Windows Server 2025 (Server Core installation), Windows Server 2019 (Server Core installation), Windows Server 2019, Windows Server 2016 (Server Core installation), Windows 10 Version 1607, Windows Server 2016, Windows Server 2012 (Server Core installation), Windows Server 2012, Windows 10 Version 21H2
Provider severity
CRITICAL
Conflicts
1

CVE-2026-4299

The MainWP Child Reports plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 2.2.6. This is due to a missing capability check in the heartbeat_received() function in the Live_Update class. This makes it possible for authenticated attackers, with Subscriber-level access and above, to obtain MainWP Child Reports activity log entries (including action summaries, user information, IP addresses, and contextual data) via the WordPress Heartbeat API by sendin

PUBLISHED
Vendor
mainwp
Product
MainWP Child Reports
Provider severity
MEDIUM
Conflicts
0

CVE-2026-42989

Improper link resolution before file access ('link following') in Winlogon allows an authorized attacker to elevate privileges locally.

PUBLISHED
Vendor
Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product
Windows 11 Version 24H2, Windows Server 2025, Windows Server 2016 (Server Core installation), Windows 11 Version 23H2, Windows 10 Version 1607, Windows Server 2022, Windows Server 2012 R2 (Server Core installation), Windows Server 2019 (Server Core installation), Windows 10 Version 21H2, Windows 10 Version 22H2, Windows Server 2016, Windows 10 Version 1809, Windows 11 Version 25H2, Windows Server 2025 (Server Core installation), Windows 11 version 26H1, Windows Server 2012 R2, Windows 11 version 23H2, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2019
Provider severity
HIGH
Conflicts
1

CVE-2026-42987

Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network.

PUBLISHED
Vendor
Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product
Windows Server 2016 (Server Core installation), Windows Server 2012, Windows Server 2019, Windows Server 2022, Windows Server 2025, Windows Server 2012 R2 (Server Core installation), Windows Server 2012 R2, Windows Server 2025 (Server Core installation), Windows Server 2019 (Server Core installation), Windows Server 2016, Windows Server 2012 (Server Core installation)
Provider severity
HIGH
Conflicts
1

CVE-2026-42986

Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

PUBLISHED
Vendor
Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product
Windows Server 2019 (Server Core installation), Windows Server 2012 (Server Core installation), Windows 10 Version 1809, Windows Server 2012 R2 (Server Core installation), Windows 11 Version 24H2, Windows 10 Version 22H2, Windows Server 2016, Windows Server 2019, Windows Server 2025 (Server Core installation), Windows Server 2022, Windows 11 Version 23H2, Windows 10 Version 1607, Windows 11 version 23H2, Windows 11 version 26H1, Windows 11 Version 25H2, Windows Server 2025, Windows 10 Version 21H2, Windows Server 2016 (Server Core installation), Windows Server 2012, Windows Server 2012 R2
Provider severity
HIGH
Conflicts
1

CVE-2026-42985

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

PUBLISHED
Vendor
Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product
Windows 11 Version 24H2, Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows 11 Version 23H2, Windows Server 2012 (Server Core installation), Windows 11 version 26H1, Windows Server 2016 (Server Core installation), Remote Desktop client for Windows Desktop, Windows Server 2012, Windows 11 version 23H2, Windows Server 2025 (Server Core installation), Windows Server 2022, Windows 10 Version 22H2, Windows Server 2016, Windows 11 Version 25H2, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows App Client for Windows Desktop, Windows 10 Version 21H2, Windows Server 2025, Windows 10 Version 1607, Windows 10 Version 1809
Provider severity
HIGH
Conflicts
1

CVE-2026-42984

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

PUBLISHED
Vendor
Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product
Windows Server 2019 (Server Core installation), Windows 10 Version 22H2, Windows 10 Version 21H2, Windows 10 Version 1809, Windows 11 Version 25H2, Windows Server 2025, Windows 11 Version 24H2, Windows Server 2022, Windows Server 2019, Windows 11 version 23H2, Windows 11 Version 23H2, Windows Server 2025 (Server Core installation), Windows 11 version 26H1
Provider severity
HIGH
Conflicts
1

CVE-2026-42983

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

PUBLISHED
Vendor
Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product
Windows Server 2025, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 10 Version 21H2, Windows Server 2025 (Server Core installation), Windows 11 version 23H2, Windows 11 Version 25H2, Windows Server 2019, Windows 10 Version 22H2, Windows 11 version 26H1, Windows 11 Version 24H2, Windows 10 Version 1809, Windows 11 Version 23H2
Provider severity
HIGH
Conflicts
1

CVE-2026-42982

Improper validation of consistency within input in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.

PUBLISHED
Vendor
Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product
Windows 11 Version 25H2, Windows Server 2025 (Server Core installation), Windows 11 version 26H1, Windows 10 Version 22H2, Windows 10 Version 21H2, Windows Server 2022, Windows Server 2016 (Server Core installation), Windows 10 Version 1809, Windows Server 2019 (Server Core installation), Windows 11 Version 23H2, Windows 11 Version 24H2, Windows Server 2025, Windows 10 Version 1607, Windows 11 version 23H2, Windows Server 2019, Windows Server 2016
Provider severity
HIGH
Conflicts
1

CVE-2026-42981

Integer underflow (wrap or wraparound) in Windows Performance Monitor allows an unauthorized attacker to execute code over a network.

PUBLISHED
Vendor
Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product
Windows 11 Version 24H2, Windows 11 Version 23H2, Windows Server 2022, Windows 11 version 23H2, Windows Server 2025, Windows 11 Version 25H2, Windows 11 version 26H1, Windows Server 2025 (Server Core installation)
Provider severity
HIGH
Conflicts
1

CVE-2026-42980

Integer underflow (wrap or wraparound) in Windows NT OS Kernel allows an authorized attacker to elevate privileges locally.

PUBLISHED
Vendor
Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product
Windows 10 Version 22H2, Windows 10 Version 1607, Windows Server 2012 R2, Windows Server 2022, Windows 11 Version 23H2, Windows 10 Version 1809, Windows Server 2012, Windows 11 Version 24H2, Windows Server 2016, Windows 11 version 26H1, Windows 11 Version 25H2, Windows Server 2016 (Server Core installation), Windows 11 version 23H2, Windows 10 Version 21H2, Windows Server 2019, Windows Server 2025, Windows Server 2025 (Server Core installation), Windows Server 2019 (Server Core installation), Windows Server 2012 R2 (Server Core installation), Windows Server 2012 (Server Core installation)
Provider severity
HIGH
Conflicts
2

CVE-2026-4298

The DSGVO All in one for WP plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 4.9. This is due to the dsgvo_reset_policy_service_func() function lacking both capability checks and nonce verification while processing user-supplied parameters to reset plugin options. This makes it possible for authenticated attackers, with Subscriber-level access and above, to reset all customized privacy policy content including cookie notices, Google Analytics polici

PUBLISHED
Vendor
mlfactory
Product
DSGVO All in one for WP
Provider severity
MEDIUM
Conflicts
0

CVE-2026-42979

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

PUBLISHED
Vendor
Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product
Windows 11 Version 24H2, Windows 10 Version 22H2, Windows Server 2019 (Server Core installation), Windows 11 Version 25H2, Windows Server 2022, Windows 11 Version 23H2, Windows 10 Version 1809, Windows 10 Version 21H2, Windows 11 version 23H2, Windows 11 version 26H1, Windows Server 2025 (Server Core installation), Windows Server 2019, Windows Server 2025
Provider severity
HIGH
Conflicts
2

CVE-2026-42978

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

PUBLISHED
Vendor
Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product
Windows 11 Version 25H2, Windows 10 Version 22H2, Windows 11 version 23H2, Windows Server 2022, Windows 11 Version 24H2, Windows 11 version 26H1, Windows 11 Version 23H2, Windows 10 Version 21H2, Windows Server 2025 (Server Core installation), Windows Server 2019, Windows Server 2025, Windows 10 Version 1809, Windows Server 2019 (Server Core installation)
Provider severity
HIGH
Conflicts
2

CVE-2026-42977

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

PUBLISHED
Vendor
Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product
Windows 11 Version 24H2, Windows 10 Version 1809, Windows Server 2025 (Server Core installation), Windows 10 Version 22H2, Windows 10 Version 21H2, Windows Server 2019, Windows 11 version 26H1, Windows Server 2022, Windows 11 Version 25H2, Windows Server 2019 (Server Core installation), Windows 11 version 23H2, Windows 11 Version 23H2, Windows Server 2025
Provider severity
HIGH
Conflicts
1

CVE-2026-42975

Heap-based buffer overflow in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code over an adjacent network.

PUBLISHED
Vendor
Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product
Windows Server 2012, Windows 11 Version 24H2, Windows Server 2019 (Server Core installation), Windows 11 version 26H1, Windows 10 Version 21H2, Windows 10 Version 1607, Windows Server 2012 R2, Windows Server 2019, Windows Server 2025 (Server Core installation), Windows Server 2016, Windows 10 Version 22H2, Windows Server 2012 R2 (Server Core installation), Windows 11 Version 25H2, Windows Server 2025, Windows Server 2022, Windows Server 2016 (Server Core installation), Windows Server 2012 (Server Core installation), Windows 10 Version 1809
Provider severity
HIGH
Conflicts
1

CVE-2026-42974

Integer overflow or wraparound in Windows Performance Monitor allows an unauthorized attacker to execute code over a network.

PUBLISHED
Vendor
Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product
Windows 11 version 26H1, Windows Server 2025 (Server Core installation), Windows 11 Version 24H2, Windows 11 Version 23H2, Windows Server 2022, Windows 11 Version 25H2, Windows Server 2025, Windows 11 version 23H2
Provider severity
HIGH
Conflicts
1

CVE-2026-42973

Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally.

PUBLISHED
Vendor
Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product
Windows 10 Version 1809, Windows 11 version 23H2, Windows 11 Version 25H2, Windows 10 Version 22H2, Windows 11 Version 23H2, Windows 11 Version 24H2, Windows 10 Version 1607, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2025 (Server Core installation), Windows Server 2025, Windows Server 2016, Windows 10 Version 21H2, Windows Server 2022, Windows 11 version 26H1, Windows Server 2019 (Server Core installation)
Provider severity
MEDIUM
Conflicts
1

CVE-2026-42972

Exposure of sensitive information to an unauthorized actor in Windows Hyper-V allows an authorized attacker to disclose information locally.

PUBLISHED
Vendor
Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product
Windows Server 2016, Windows Server 2022, Windows Server 2012 R2, Windows 11 version 26H1, Windows 10 Version 1809, Windows Server 2012 R2 (Server Core installation), Windows 11 Version 25H2, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows 10 Version 21H2, Windows 10 Version 1607, Windows 11 Version 24H2, Windows Server 2019 (Server Core installation), Windows Server 2025 (Server Core installation), Windows Server 2025, Windows Server 2019, Windows Server 2016 (Server Core installation), Windows 10 Version 22H2, Windows 11 Version 23H2, Windows 11 version 23H2
Provider severity
MEDIUM
Conflicts
1

CVE-2026-42971

Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally.

PUBLISHED
Vendor
Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product
Windows Server 2025, Windows 10 Version 22H2, Windows 11 Version 25H2, Windows Server 2025 (Server Core installation), Windows 11 version 23H2, Windows Server 2016 (Server Core installation), Windows 10 Version 1607, Windows Server 2016, Windows Server 2019 (Server Core installation), Windows 10 Version 1809, Windows 11 Version 24H2, Windows 11 version 26H1, Windows Server 2019, Windows Server 2022, Windows 10 Version 21H2, Windows 11 Version 23H2
Provider severity
MEDIUM
Conflicts
1

CVE-2026-42970

Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally.

PUBLISHED
Vendor
Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product
Windows 10 Version 1809, Windows Server 2025, Windows Server 2012 R2 (Server Core installation), Windows 11 Version 23H2, Windows Server 2012 (Server Core installation), Windows Server 2019, Windows 11 version 23H2, Windows 10 Version 21H2, Windows Server 2012, Windows Server 2012 R2, Windows 10 Version 22H2, Windows 11 Version 25H2, Windows 11 Version 24H2, Windows Server 2016 (Server Core installation), Windows Server 2016, Windows 10 Version 1607, Windows 11 version 26H1, Windows Server 2022, Windows Server 2025 (Server Core installation), Windows Server 2019 (Server Core installation)
Provider severity
MEDIUM
Conflicts
1

CVE-2026-4297

The Welcome Software Publishing plugin for WordPress is vulnerable to Arbitrary Options Update in all versions up to and including 0.0.31. This is due to a missing capability check in the nc_setOption() function, which is exposed via the nc.setOption XML-RPC method. The function authenticates the user via $wp_xmlrpc_server->login() (verifying credentials are valid) but does not perform any authorization check such as current_user_can('manage_options'). This makes it possible for authenticated at

PUBLISHED
Vendor
newscred
Product
Welcome Software Publishing
Provider severity
HIGH
Conflicts
0

CVE-2026-42969

Use of uninitialized resource in Windows Push Notifications allows an authorized attacker to disclose information locally.

PUBLISHED
Vendor
Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product
Windows 11 Version 25H2, Windows 10 Version 1607, Windows Server 2019 (Server Core installation), Windows Server 2025 (Server Core installation), Windows Server 2016 (Server Core installation), Windows 11 Version 24H2, Windows 10 Version 21H2, Windows 10 Version 22H2, Windows 10 Version 1809, Windows Server 2019, Windows 11 Version 23H2, Windows 11 version 26H1, Windows 11 version 23H2, Windows Server 2025, Windows Server 2016, Windows Server 2022
Provider severity
MEDIUM
Conflicts
1

CVE-2026-42968

Out-of-bounds read in Windows Telephony Service allows an authorized attacker to disclose information locally.

PUBLISHED
Vendor
Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
Product
Windows 11 Version 23H2, Windows Server 2016 (Server Core installation), Windows 11 Version 25H2, Windows 11 version 26H1, Windows 11 version 23H2, Windows Server 2019, Windows 10 Version 21H2, Windows Server 2012 R2 (Server Core installation), Windows Server 2012 (Server Core installation), Windows Server 2016, Windows Server 2025, Windows Server 2012, Windows 11 Version 24H2, Windows Server 2012 R2, Windows 10 Version 1809, Windows 10 Version 1607, Windows Server 2025 (Server Core installation), Windows Server 2022, Windows Server 2019 (Server Core installation), Windows 10 Version 22H2
Provider severity
MEDIUM
Conflicts
1