CVE-2026-107886
CVE-2026-107886
OpenPrinting CUPS before 2.4.20 contains a double-free in printer-class management. When CUPS-Add-Modify-Class replaces
#advisory
共收录 23210 条相关情报。
← 返回所有主题CVE-2026-107885
CVE-2026-107885
OpenPrinting CUPS through 2.4.20 contains a resource-exhaustion vulnerability in the submission-timeout handling of cups
Multiple ECH outer extension references are not permitted under RFC 9849; previously, a client...
CVE-2026-97031
Multiple ECH outer extension references are not permitted under RFC 9849; previously, a client could send a well-crafted
Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to...
CVE-2026-96207
Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a
Deserialization of untrusted data in Microsoft Dataverse allows an unauthorized attacker to...
CVE-2026-88131
Deserialization of untrusted data in Microsoft Dataverse allows an unauthorized attacker to execute code over a network.
Authorization bypass through user-controlled key in Microsoft Bookings allows an unauthorized...
CVE-2026-94510
Authorization bypass through user-controlled key in Microsoft Bookings allows an unauthorized attacker to elevate privil
Missing authentication for critical function in Azure App Service allows an unauthorized attacker...
CVE-2026-77900
Missing authentication for critical function in Azure App Service allows an unauthorized attacker to execute code over a
When a JavaScript template literal contains consecutive expressions, the context tracking state...
CVE-2026-94448
When a JavaScript template literal contains consecutive expressions, the context tracking state was not properly reset u
Missing authorization in Azure Event Grid allows an authorized attacker to perform spoofing over...
CVE-2026-83947
Missing authorization in Azure Event Grid allows an authorized attacker to perform spoofing over a network.
When parsing a Range header containing a large number of small ranges, FileServer(FS),...
CVE-2026-78667
When parsing a Range header containing a large number of small ranges, FileServer(FS), ServeContent, and ServeFile(FS) c
Exposure of sensitive information to an unauthorized actor in Azure API Center allows an...
CVE-2026-83943
Exposure of sensitive information to an unauthorized actor in Azure API Center allows an unauthorized attacker to disclo
Previously, a user operating inside of a malicious Go project that defines a bogus golang.org...
CVE-2026-94447
Previously, a user operating inside of a malicious Go project that defines a bogus golang.org/toolchain go.sum entry and
Parsing a multipart form can bypass memory limits and read an arbitrarily long line into memory...
CVE-2026-94440
Parsing a multipart form can bypass memory limits and read an arbitrarily long line into memory when the remaining limit
When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without...
CVE-2026-94439
When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without hijacking the connecti
Previously, a user operating inside of a malicious Go project that defines a bogus golang.org...
CVE-2026-94444
Previously, a user operating inside of a malicious Go project that defines a bogus golang.org/fips140 and operates a mal
A trusted template author may have previously written a valid template wherein the use of the ...
CVE-2026-97030
A trusted template author may have previously written a valid template wherein the use of the 'yield' keyword would not
Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over...
CVE-2026-69435
Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.
IBM Guardium Data Protection 12.2, and 12.2.2 could allow a remote attacker to execute arbitrary...
CVE-2026-84249
IBM Guardium Data Protection 12.2, and 12.2.2 could allow a remote attacker to execute arbitrary management operations d
A flaw was found in Eye of GNOME (eog). A heap-based buffer overflow exists in the PNG metadata...
CVE-2026-107651
A flaw was found in Eye of GNOME (eog). A heap-based buffer overflow exists in the PNG metadata reader due to improper s
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to cause a denial...
CVE-2026-84247
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to cause a denial of service due to a path