Vulnerabilities
All
My stack
Known exploited
Public exploit
Critical (9+)
Likely exploited (EPSS ≥ 50%)
Changed, 24 h
New, 24 h
CVSS medium ×
Sort:
risk
modified
published
CVSS
EPSS
| CVE | CVSS | EPSS | Vendor, product | Description | Modified |
|---|---|---|---|---|---|
| CVE-2026-57192 | 6.0 medium | 1.0% | no CPE yet | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an authenticated attacker may cause a heap buffer overflow through an out-of-bounds write in the `Codec2` decoder caused by a `floor/ceil sample-count mismatch`. The `codec_codec2` module must be loaded and `Codec2` must be configured on the attacked endpoint. The attacker must pass SIP authentication by username/password or `source IP address matching`, establish a call using `Codec2`, and send carefully crafted `Codec2` audio packets. This issue is fixed in Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3. | 22 h ago |
| CVE-2026-62900 | 5.9 medium | 1.0% | microsoft, visual_studio_2022, visual_studio_2026, .net | Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network. | 16 h ago |
| CVE-2026-62899 | 5.9 medium | 1.0% | microsoft, visual_studio_2022, visual_studio_2026, .net | Inconsistent interpretation of http requests ('http request/response smuggling') in .NET allows an unauthorized attacker to bypass a security feature over a network. | 16 h ago |
| CVE-2026-56649 | 5.9 medium | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Network File System allows an unauthorized attacker to execute code over a network. | 16 h ago |
| CVE-2026-50324 | 5.9 medium | 1.0% | microsoft, microsoft .net framework 3.5 and 4.7.2, microsoft .net framework 3.5 and 4.8, microsoft .net framework 3.5 and 4.8.1 | Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network. | 16 h ago |
| CVE-2026-116171 | 5.9 medium | 1.0% | no CPE yet | SiYuan 3.5.4 before 3.8.7 on Windows contains a sensitive-path denylist bypass in IsSensitivePath because the Windows extended-length prefix (\\?\) survives filepath.Clean and matches no forbidden prefix. Authenticated API callers can prepend the prefix to localPath in /api/import/importStdMd to copy workspace conf files, including the API token and TLS private keys, into assets served to unauthenticated clients. | 17 h ago |
| CVE-2026-70005 | 5.9 medium | 1.0% | microsoft, windows_server_2019, windows_server_2022, windows_server_2025 | Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network. | 20 h ago |
| CVE-2026-110185 | 5.9 medium | 1.0% | no CPE yet | The Bit Flows: AI Agent Automation & Integrations for Forms, CRM, eCommerce, Google Sheets, and More plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.31.0 via the 'image (any body field referenced by the ImageHelper node's mix tag)' parameter parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where .php file types can be uploaded and included. Exploitation requires that an administrator has built a webhook-triggered flow that pipes a webhook body field into an ImageHelper imageToBase64 node, and that the webhook remains in its default configuration (no bearer secret enforced, no IP allowlist set) — a legitimate and documented use case. | 20 h ago |
| CVE-2026-57084 | 5.5 medium | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Use of uninitialized resource in Windows File Explorer allows an unauthorized attacker to disclose information locally. | 16 h ago |
| CVE-2026-57083 | 5.5 medium | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Use of uninitialized resource in Microsoft Windows Codecs Library allows an unauthorized attacker to disclose information locally. | 16 h ago |
| CVE-2026-55121 | 5.5 medium | 1.0% | microsoft, microsoft 365 apps for enterprise, microsoft office 2016, microsoft office 2019 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. | 16 h ago |
| CVE-2026-56195 | 5.5 medium | 1.0% | microsoft, microsoft 365 apps for enterprise, microsoft office 2016, microsoft office 2019 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. | 16 h ago |
| CVE-2026-56192 | 5.5 medium | 1.0% | microsoft, microsoft 365 apps for enterprise, microsoft office 2016, microsoft office 2019 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. | 16 h ago |
| CVE-2026-55042 | 5.5 medium | 1.0% | microsoft, microsoft 365 apps for enterprise, microsoft office 2016, microsoft office 2019 | Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information locally. | 16 h ago |
| CVE-2026-55142 | 5.5 medium | 1.0% | microsoft, microsoft 365 apps for enterprise, microsoft office 2019, microsoft office 365 for mac | Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to disclose information locally. | 16 h ago |
| CVE-2026-55057 | 5.5 medium | 1.0% | microsoft, microsoft 365 apps for enterprise, microsoft office 2016, microsoft office 2019 | Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to disclose information locally. | 16 h ago |
| CVE-2026-55035 | 5.5 medium | 1.0% | microsoft, microsoft 365 apps for enterprise, microsoft office 2016, microsoft office 2019 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. | 16 h ago |
| CVE-2026-55124 | 5.5 medium | 1.0% | microsoft, microsoft 365 apps for enterprise, microsoft office 2019, microsoft office 365 for mac | Improper validation of specified type of input in Microsoft Office Word allows an unauthorized attacker to disclose information locally. | 16 h ago |
| CVE-2026-55138 | 5.5 medium | 1.0% | microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2019 | Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. | 16 h ago |
| CVE-2026-55050 | 5.5 medium | 1.0% | microsoft, microsoft 365 apps for enterprise, microsoft office 2019, microsoft office 365 for mac | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. | 16 h ago |
| CVE-2026-55047 | 5.5 medium | 1.0% | microsoft, microsoft 365 apps for enterprise, microsoft office 2016, microsoft office 2019 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. | 16 h ago |
| CVE-2026-55028 | 5.5 medium | 1.0% | microsoft, microsoft 365 apps for enterprise, microsoft office 2016, microsoft office 2019 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. | 16 h ago |
| CVE-2026-55027 | 5.5 medium | 1.0% | microsoft, microsoft 365 apps for enterprise, microsoft office 2016, microsoft office 2019 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. | 16 h ago |
| CVE-2026-55023 | 5.5 medium | 1.0% | microsoft, microsoft 365 apps for enterprise, microsoft office 2016, microsoft office 2019 | Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally. | 16 h ago |
| CVE-2026-55046 | 5.5 medium | 1.0% | microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2019 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. | 16 h ago |
| CVE-2026-50408 | 5.5 medium | 1.0% | microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2019 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. | 16 h ago |
| CVE-2026-48580 | 5.5 medium | 1.0% | microsoft, microsoft 365 apps for enterprise, microsoft excel 2016, microsoft office 2019 | Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. | 16 h ago |
| CVE-2026-83507 | 5.5 medium | 1.0% | microsoft, windows_10_21h2, windows_10_22h2, windows_11_23h2 | Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally. | 19 h ago |
| CVE-2026-70261 | 5.5 medium | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally. | 19 h ago |
| CVE-2026-70260 | 5.5 medium | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally. | 19 h ago |
| CVE-2026-70277 | 5.5 medium | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Out-of-bounds read in Windows Fast FAT Driver allows an unauthorized attacker to disclose information locally. | 19 h ago |
| CVE-2026-70055 | 5.5 medium | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Exposure of sensitive system information to an unauthorized control sphere in Windows Cryptographic Services allows an authorized attacker to disclose information locally. | 20 h ago |
| CVE-2026-70084 | 5.5 medium | 1.0% | microsoft, windows_10_1809, windows_10_21h2, windows_10_22h2 | Improper access control in Windows Projected File System allows an authorized attacker to disclose information locally. | 20 h ago |
| CVE-2026-69644 | 5.5 medium | 1.0% | microsoft, windows_10_1607, windows_10_1809, windows_10_21h2 | Exposure of sensitive system information to an unauthorized control sphere in Windows iSCSI allows an authorized attacker to disclose information locally. | 23 h ago |
| CVE-2023-0062 | 5.4 medium | 1.0% | wpfactory, ean_for_woocommerce | The EAN for WooCommerce WordPress plugin before 4.4.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. | 17 h ago |
| CVE-2026-50415 | 5.3 medium | 1.0% | microsoft, windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 | Exposure of sensitive information to an unauthorized actor in Windows Media allows an unauthorized attacker to disclose information over a network. | 16 h ago |
| CVE-2026-50432 | 5.3 medium | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Use after free in Windows Virtual Filtering Platform (VFP) allows an authorized attacker to deny service over a network. | 16 h ago |
| CVE-2026-44806 | 5.3 medium | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Missing release of memory after effective lifetime in Windows Cryptographic Services allows an unauthorized attacker to deny service over a network. | 16 h ago |
| CVE-2023-33181 | 5.3 medium | 1.0% | xibosignage, xibo | Xibo is a content management system (CMS). Starting in version 3.0.0 and prior to version 3.3.5, some API routes will print a stack trace when called with missing or invalid parameters revealing sensitive information about the locations of paths that the server is using. Users should upgrade to version 3.3.5, which fixes this issue. There are no known workarounds aside from upgrading. | 17 h ago |
| CVE-2026-104743 | 4.9 medium | 1.0% | no CPE yet | The Tainacan plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.3.0 via the 'tmp_file' parameter parameter. This makes it possible for authenticated attackers, with editor-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information. The poisoned importer path is persisted to the database and later triggered via a separate GET request to the /source_info endpoint, which passes the attacker-controlled path to fopen() and fgetcsv() and returns parsed file contents in the REST response. | 23 h ago |
| CVE-2026-62826 | 4.6 medium | 1.0% | microsoft, microsoft sharepoint enterprise server 2016, microsoft sharepoint server 2019, microsoft sharepoint server subscription edition | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | 16 h ago |
| CVE-2026-55135 | 4.6 medium | 1.0% | microsoft, microsoft sharepoint enterprise server 2016, microsoft sharepoint server 2019, microsoft sharepoint server subscription edition | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | 16 h ago |
| CVE-2026-55030 | 4.6 medium | 1.0% | microsoft, microsoft sharepoint enterprise server 2016, microsoft sharepoint server 2019, microsoft sharepoint server subscription edition | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | 16 h ago |
| CVE-2026-55020 | 4.6 medium | 1.0% | microsoft, microsoft sharepoint enterprise server 2016, microsoft sharepoint server 2019, microsoft sharepoint server subscription edition | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | 16 h ago |
| CVE-2026-55019 | 4.6 medium | 1.0% | microsoft, microsoft sharepoint enterprise server 2016, microsoft sharepoint server 2019, microsoft sharepoint server subscription edition | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | 16 h ago |
| CVE-2026-55016 | 4.6 medium | 1.0% | microsoft, microsoft sharepoint enterprise server 2016, microsoft sharepoint server 2019, microsoft sharepoint server subscription edition | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | 16 h ago |
| CVE-2026-50485 | 4.5 medium | 1.0% | microsoft, windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 | Buffer over-read in Windows Hyper-V allows an authorized attacker to deny service over an adjacent network. | 16 h ago |
| CVE-2026-66798 | 4.3 medium | 1.0% | microsoft, edge_chromium | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | 15 h ago |
| CVE-2023-2085 | 4.3 medium | 1.0% | wpdeveloper, essential_blocks | The Essential Blocks plugin for WordPress is vulnerable to unauthorized use of functionality due to a missing capability check on the templates function in versions up to, and including, 4.0.6. This makes it possible for subscriber-level attackers to obtain plugin template information. While a nonce check is present, it is only executed when a nonce is provided. Not providing a nonce results in the nonce verification to be skipped. There is no capability check. | 17 h ago |
| CVE-2023-2462 | 4.3 medium | 1.0% | google, fedoraproject, chrome, fedora, debian_linux | Inappropriate implementation in Prompts in Google Chrome prior to 113.0.5672.63 allowed a remote attacker to obfuscate main origin data via a crafted HTML page. (Chromium security severity: Medium) | 17 h ago |
Download these 780 as CSV · subscribe to this list.
EPSS scores: 2026-10-28. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.