Month: July 2026

Corrected the Exploitability Index, Exploited flag and CVSS vector which was incorrect at the time of publication on 7/14/2026. This is an informational change only. Continue reading CVE-2026-58644 Microsoft SharePoint Remote Code Execution Vulnerability→

Updated acknowledgment. This is an informational change only. Continue reading CVE-2026-50375 DirectX Graphics Kernel Elevation of Privilege Vulnerability→

Updated acknowledgment. This is an informational change only. Continue reading CVE-2026-56182 Windows NTFS Elevation of Privilege Vulnerability→

Information published. Continue reading CVE-2026-59875 node-tar: Uncaught Exception DoS via NUL byte in PAX path/linkpath records→

Information published. Continue reading CVE-2026-42505 Invoking Encrypted Client Hello privacy leak in crypto/tls→

Information published. Continue reading CVE-2026-39822 Root escape via symlink plus trailing slash in os→

Information published. Continue reading CVE-2026-13221 Perl versions through 5.43.9 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string branches is compiled into a trie in Perl_study_chunk→

Information published. Continue reading CVE-2026-57432 Perl versions through 5.43.10 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pack and unpack→