Total
10460 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-56170 | 3 Apple, Linux, Microsoft | 4 Macos, Linux Kernel, .net and 1 more | 2026-10-28 | N/A | 7.5 HIGH |
| Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. | |||||
| CVE-2026-50659 | 3 Apple, Linux, Microsoft | 19 Macos, Linux Kernel, .net and 16 more | 2026-10-28 | N/A | 6.5 MEDIUM |
| Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network. | |||||
| CVE-2026-50651 | 3 Apple, Linux, Microsoft | 6 Macos, Linux Kernel, .net and 3 more | 2026-10-28 | N/A | 7.5 HIGH |
| Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network. | |||||
| CVE-2026-50650 | 1 Microsoft | 15 .net, .net Framework, Windows and 12 more | 2026-10-28 | N/A | 7.8 HIGH |
| Improper control of generation of code ('code injection') in .NET Framework allows an unauthorized attacker to elevate privileges locally. | |||||
| CVE-2026-50649 | 1 Microsoft | 16 .net, .net Framework, Visual Studio 2026 and 13 more | 2026-10-28 | N/A | 7.8 HIGH |
| Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally. | |||||
| CVE-2026-50648 | 3 Apple, Linux, Microsoft | 19 Macos, Linux Kernel, .net and 16 more | 2026-10-28 | N/A | 7.5 HIGH |
| Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service over a network. | |||||
| CVE-2026-50646 | 1 Microsoft | 17 .net, .net Framework, Visual Studio 2022 and 14 more | 2026-10-28 | N/A | 7.8 HIGH |
| Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally. | |||||
| CVE-2026-50528 | 3 Apple, Linux, Microsoft | 6 Macos, Linux Kernel, .net and 3 more | 2026-10-28 | N/A | 8.2 HIGH |
| Incorrect authorization in .NET allows an unauthorized attacker to bypass a security feature over a network. | |||||
| CVE-2026-50527 | 3 Apple, Linux, Microsoft | 19 Macos, Linux Kernel, .net and 16 more | 2026-10-28 | N/A | 7.5 HIGH |
| Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network. | |||||
| CVE-2026-50526 | 3 Apple, Linux, Microsoft | 6 Macos, Linux Kernel, .net and 3 more | 2026-10-28 | N/A | 7.0 HIGH |
| Improper link resolution before file access ('link following') in .NET allows an authorized attacker to perform tampering locally. | |||||
| CVE-2026-50525 | 3 Apple, Linux, Microsoft | 19 Macos, Linux Kernel, .net and 16 more | 2026-10-28 | N/A | 7.5 HIGH |
| Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network. | |||||
| CVE-2026-50524 | 3 Apple, Linux, Microsoft | 6 Macos, Linux Kernel, .net and 3 more | 2026-10-28 | N/A | 7.5 HIGH |
| Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to deny service over a network. | |||||
| CVE-2026-47304 | 3 Apple, Linux, Microsoft | 22 Macos, Linux Kernel, .net and 19 more | 2026-10-28 | N/A | 8.1 HIGH |
| Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network. | |||||
| CVE-2026-47303 | 3 Apple, Linux, Microsoft | 6 Macos, Linux Kernel, .net and 3 more | 2026-10-28 | N/A | 8.8 HIGH |
| Authentication bypass by assumed-immutable data in ASP.NET Core allows an authorized attacker to elevate privileges over a network. | |||||
| CVE-2026-47302 | 3 Apple, Linux, Microsoft | 19 Macos, Linux Kernel, .net and 16 more | 2026-10-28 | N/A | 7.5 HIGH |
| Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network. | |||||
| CVE-2026-47300 | 3 Apple, Linux, Microsoft | 6 Macos, Linux Kernel, .net and 3 more | 2026-10-28 | N/A | 8.8 HIGH |
| Incorrect implementation of authentication algorithm in ASP.NET Core allows an authorized attacker to elevate privileges over a network. | |||||
| CVE-2026-96644 | 2 Microsoft, Python | 2 Windows, Pillow | 2026-10-28 | N/A | 8.1 HIGH |
| Pillow is a Python imaging library. Prior to 13.0.0 on Windows, src/PIL/WmfImagePlugin.py passes unchecked 32-bit WMF or EMF dimensions to the native drawwmf handler in src/display.c. The handler sizes a DIB allocation from 16-bit-truncated bcWidth and bcHeight fields but copies pixel data using the original full dimensions. A crafted wide, short metafile can pass the pixel-count decompression-bomb check and make the Windows-only renderer read beyond the heap buffer, potentially disclosing memory or crashing the process. This issue is fixed in version 13.0.0. | |||||
| CVE-2023-22234 | 2 Adobe, Microsoft | 2 Premiere Rush, Windows | 2026-10-28 | N/A | 7.8 HIGH |
| Adobe Premiere Rush version 2.6 (and earlier) is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | |||||
| CVE-2023-22231 | 3 Adobe, Apple, Microsoft | 3 Bridge, Macos, Windows | 2026-10-28 | N/A | 5.5 MEDIUM |
| Adobe Bridge versions 12.0.3 (and earlier) and 13.0.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | |||||
| CVE-2026-96521 | 3 Adobe, Apple, Microsoft | 3 Photoshop, Macos, Windows | 2026-10-28 | N/A | 7.8 HIGH |
| Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | |||||