Month: June 2026

Information published. Continue reading CVE-2026-42507 Arbitrary inputs are included in errors without any escaping in net/textproto→

Information published. Continue reading CVE-2026-42504 Quadratic complexity in WordDecoder.DecodeHeader in mime→

Information published. Continue reading CVE-2026-37460 Missing input validation in the rfapiRibBi2Ri() function (rfapi_rib.c) of FRRouting (FRR) stable/10.0 to stable/10.6 allows attackers to cause a Denial of Service (DoS) via supplying a crafted BGP UPDATE message.→

Information published. Continue reading CVE-2026-10722 cilium ebpf LoadCollectionSpec/LoadCollectionSpecFromReader btf.go loadRawSpec integer overflow→

Information published. Continue reading CVE-2026-50219 libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_GetBuffer, XML_Parse, XML_ParseBuffer, XML_ParserFree, or XML_ParserReset from within handlers in cases of a policy violation. Thus, a use-after-free can occur,→

Information published. Continue reading CVE-2026-11332 Ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution→

Authentication bypass by spoofing in Azure HorizonDB allows an unauthorized attacker to elevate privileges over a network. Continue reading CVE-2026-48567 Azure HorizonDB Elevation of Privilege Vulnerability→

Improper neutralization of special elements used in a command (‘command injection’) in Microsoft Copilot allows an authorized attacker to execute code over a network. Continue reading CVE-2026-45497 Microsoft M365 Copilot Remote Code Execution Vulnerability→