Month: April 2026

Information published. Continue reading CVE-2026-5393 OOB Read in DoTls13CertificateVerify with WOLFSSL_DUAL_ALG_CERTS→

Information published. Continue reading CVE-2026-5466 wc_VerifyEccsiHash missing sanity check→

Information published. Continue reading CVE-2026-33555→

Improper access control in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally. Continue reading CVE-2026-32214 Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability→

Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-33824 Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability→

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. Continue reading CVE-2026-33115 Microsoft Word Remote Code Execution Vulnerability→

Concurrent execution using shared resource with improper synchronization (‘race condition’) in Windows Win32K – GRFX allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-33104 Win32k Elevation of Privilege Vulnerability→

Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. Continue reading CVE-2026-33101 Windows Print Spooler Elevation of Privilege Vulnerability→