CVE-2026-76890Published
Expired Pointer Dereference in Wireshark
cve-program ·
Vendor product: Wireshark
Security
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Advisory catalog
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
Collected statements
699291 source statements · aliases may refer to the same vulnerabilityCVE-2026-76889Published
Heap-based Buffer Overflow in Wireshark
cve-program ·
Vendor product: Wireshark
CVE-2026-66372Published
Predictable Seed in Pseudo-Random Number Generator (PRNG) in Digital Watchdog VMAX DVR and NVR Product Lineups
cve-program ·
Vendor product: VMAX A1 G4 DVR · Vendor product: VMAX IP G4 NVR · Vendor product: VMAX A1 PLUS
CVE-2026-76888Published
Heap-based Buffer Overflow in Wireshark
cve-program ·
Vendor product: Wireshark
CVE-2026-76887Published
Heap-based Buffer Overflow in Wireshark
cve-program ·
Vendor product: Wireshark
CVE-2026-81736Published
Remote CPU denial of service through cached SVCB/HTTPS AliasMode trees
cve-program ·
Vendor product: BIND 9
CVE-2026-19667Published
Remote assertion failure via 16-bit length truncation in `dns_ncache_add()`
cve-program ·
Vendor product: BIND 9
CVE-2026-76883Published
Heap-based Buffer Overflow in Wireshark
cve-program ·
Vendor product: Wireshark
CVE-2026-19662Published
qpcache NOQNAME proof use-after-free crashes recursive resolver
cve-program ·
Vendor product: BIND 9
MAL-2026-16248Published
Malicious code in kartykgithub-takedown-a (npm)
osv · GHSA-5r64-rpvg-q9rr
npm: kartykgithub-takedown-a
CVE-2026-76879Published
Stack-based Buffer Overflow in Wireshark
cve-program ·
Vendor product: Wireshark
CVE-2026-76000Published
ColdFusion | Uncontrolled Resource Consumption (CWE-400)
cve-program ·
Vendor product: ColdFusion 2025 · Vendor product: ColdFusion 2023
CVE-2026-75057Published
In JetBrains IntelliJ IDEA before 2026.1.5 git credentials were written in plaintext to the IDE log
cve-program ·
Vendor product: IntelliJ IDEA
CVE-2026-19941Published
checkwildcard() accepts an out-of-zone NSEC as a wildcard-nonexistence proof
cve-program ·
Vendor product: BIND 9
CVE-2026-74983Published
Mitigation bypass in the Data Loss Prevention component
cve-program ·
Vendor product: Firefox · Vendor product: Thunderbird
CVE-2026-74961Published
Side-channel in the Web Audio component
cve-program ·
Vendor product: Firefox · Vendor product: Thunderbird
CVE-2026-77692Published
Unauthenticated remote crash of named via a single DoH SIG(0) request
cve-program ·
Vendor product: BIND 9
CVE-2026-73072Published
Vim: Heap Buffer Overflow when Loading a Spell File
cve-program ·
Vendor product: vim
CVE-2026-78301Published
Out-of-zone database nodes can become authoritative zone cuts
cve-program ·
Vendor product: BIND 9
CVE-2026-71100Published
Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via O…
cve-program ·
Vendor product: Oracle Database Server
CVE-2026-71099Published
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web Answers). The supported version that is affected is 26.01.0.0.0. Easily exploitable vulnerability allows high privi…
cve-program ·
Vendor product: Oracle Business Intelligence Enterprise Edition
CVE-2026-71098Published
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security). The supported version that is affected is 26.01.0.0.0. Difficult to exploit vulnerability allows low privileg…
cve-program ·
Vendor product: Oracle Business Intelligence Enterprise Edition
CVE-2026-82964Published
Avast sandbox privilege escalation via unpreserved DACLs on virtualized files in aswSnx.sys
cve-program ·
Vendor product: Avast Free Antivirus, Avast One, Avast Premium Security, Avast Ultimate, Avast Business Security · Vendor product: AVG Antivirus Free, AVG Internet Security, AVG Ultimate · Vendor product: Norton Antivirus Plus, Norton 360 Standard, Norton 360 Deluxe, Norton 360 Advanced
CVE-2026-71097Published
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security). The supported version that is affected is 26.01.0.0.0. Easily exploitable vulnerability allows low privileged…
cve-program ·
Vendor product: Oracle Business Intelligence Enterprise Edition
CVE-2026-71094Published
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Presentation Services). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privile…
cve-program ·
Vendor product: Oracle Business Intelligence Enterprise Edition
CVE-2026-71063Published
Vulnerability in the Portable Clusterware component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Easily exploitable vulnerability allows unauthenticated attacker with acces…
cve-program ·
Vendor product: Oracle Database Server
CVE-2026-71061Published
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are 8.2.0.0.0 and 26.01.0.0.0. Easily exploitable vulnerability allow…
cve-program ·
Vendor product: Oracle Business Intelligence Enterprise Edition
CVE-2026-71059Published
Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Service API). Supported versions that are affected are 8.2.0.0.0 and 26.1.0.0.0. Easily exploitable vulnerability allows low privileged attacker with net…
cve-program ·
Vendor product: Oracle BI Publisher
CVE-2026-71056Published
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Search). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allo…
cve-program ·
Vendor product: Oracle Business Intelligence Enterprise Edition
CVE-2026-19668Published
Resource Exhaustion via Excessive DNSSEC Cryptographic Material Matching
cve-program ·
Vendor product: BIND 9
CVE-2026-61308Published
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25…
cve-program ·
Vendor product: Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition
CVE-2026-75029Published
Message parser retains every identical singleton RDATA, enabling wire-to-work amplification
cve-program ·
Vendor product: BIND 9
CVE-2026-61298Published
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Manager Install). Supported versions that are affected are 13.5 and 24.1. Difficult to exploit vulnerability allows l…
cve-program ·
Vendor product: Oracle Enterprise Manager Base Platform
CVE-2026-60726Published
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged …
cve-program ·
Vendor product: Oracle Access Manager
CVE-2026-60718Published
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON). Supported versions that are affected are MySQL Server: 9.7.0-9.7.1; MySQL Cluster: 9.7.0-9.7.1. Easily exploitable vulnerability allows low…
cve-program ·
Vendor product: MySQL Server · Vendor product: MySQL Cluster
CVE-2026-77119Published
NSEC3 insecure-referral proof can use unrelated cached NSEC3 RRsets
cve-program ·
Vendor product: BIND 9
CVE-2026-60702Published
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low pri…
cve-program ·
Vendor product: Oracle WebLogic Server
CVE-2026-92395Published
@fastify/proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet
cve-program ·
Vendor product: @fastify/proxy-addr
CVE-2026-60696Published
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthe…
cve-program ·
Vendor product: Oracle WebLogic Server
CVE-2026-60415Published
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Difficult to exploit vulnerability allows unaut…
cve-program ·
Vendor product: Oracle WebLogic Server
CVE-2026-60182Published
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Clone Plugin). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.…
cve-program ·
Vendor product: MySQL Server · Vendor product: MySQL Cluster
CVE-2026-84858Published
Scada-LTS Authenticated Remote Code Execution via Scripting Sandbox Bypass
cve-program ·
Vendor product: Scada-LTS
CVE-2026-60165Published
Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Enterprise Command Center). The supported version that is affected is V16. Easily exploitable vulnerability allows high privileged attacker with ne…
cve-program ·
Vendor product: Oracle Cost Management
CVE-2026-49844Published
Apache Log4j API: Improper serialization of non-finite floating-point values in MapMessage.asJson()
cve-program ·
https://repo.maven.apache.org/maven2: org.apache.logging.log4j:log4j-api
CVE-2026-84859Published
Scada-LTS Authenticated Blind SQL Injection
cve-program ·
Vendor product: Scada-LTS
CVE-2026-41293Published
Apache Tomcat: HTTP/2 request headers not validated
cve-program ·
Vendor product: Apache Tomcat
CVE-2026-84860Published
Scada-LTS DWR Authorization Bypass - Systemic
cve-program ·
Vendor product: Scada-LTS
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.