Recently updated CVEs

Nov 10, 2026 UTC

Improper restriction of xml external entity reference in Microsoft PowerShell allows an unauthorized attacker to disclose information over a network.

Nov 10, 2026 UTC

Improper control of generation of code ('code injection') in Microsoft Teams for Android allows an unauthorized attacker to perform spoofing over a network.

Nov 10, 2026 UTC

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.

Nov 10, 2026 UTC

Improper restriction of xml external entity reference in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to disclose information over a network.

Nov 10, 2026 UTC

Weak authentication in Microsoft Configuration Manager allows an unauthorized attacker to disclose information over a network.

Nov 10, 2026 UTC

Incorrect permission assignment for critical resource in Azure Front Door (AFD) allows an unauthorized attacker to elevate privileges over a network.

Nov 10, 2026 UTC

Improper verification of cryptographic signature in Windows Remote Procedure Call Runtime allows an unauthorized attacker to execute code over a network.

Nov 10, 2026 UTC

Improper access control in Windows Network File System allows an authorized attacker to disclose information locally.

Nov 10, 2026 UTC

Weak authentication in Active Directory Domain Services allows an authorized attacker to elevate privileges over a network.

Nov 10, 2026 UTC

A flaw was found in the Dynamic Client Registration component of Keycloak, an open-source identity and access management solution. The issue occurs because the system does not properly restrict which claim names can be used when setting up new clients. An attacker with valid regi…

Nov 10, 2026 UTC

Due to a weak HMAC cryptography calculation when receiving an RFC callback in SAP NetWeaver and ABAP Platform (Application Server ABAP), an authenticated attacker with high privileges and access to a network segment between application servers on an SAP system could intercept net…

Nov 10, 2026 UTC

Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over a network.

Nov 10, 2026 UTC

Use after free in Windows Link Layer Topology Discovery Protocol allows an authorized attacker to elevate privileges locally.

Nov 10, 2026 UTC

Use after free in Windows Link Layer Topology Discovery Protocol allows an unauthorized attacker to execute code over an adjacent network.

Nov 10, 2026 UTC

Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges with a physical attack.