CVE-2026-81788Published
WordPress IMPress for IDX Broker plugin <= 3.3.0 - Broken Access Control vulnerability
cve-program ·
https://wordpress.org/plugins: idx-broker-platinum
Security
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Advisory catalog
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
Collected statements
700899 source statements · aliases may refer to the same vulnerabilityCVE-2026-64837Published
ICEcoder through 8.1 OS Command Injection via lib/properties.php
cve-program ·
https://packagist.org/packages/icecoder/icecoder: icecoder/icecoder
CVE-2026-81795Published
WordPress Page Visits Counter – Lite plugin <= 1.2.3 - Cross Site Scripting (XSS) vulnerability
cve-program ·
https://wordpress.org/plugins: page-visits-counter-lite
CVE-2026-87922Published
Rizwan17 inventory-management-system AJAX Backend process.php DBOperation.addCategory missing authentication
cve-program ·
Vendor product: inventory-management-system
CVE-2026-81803Published
WordPress RepairBuddy plugin <= 4.1224 - Remote Code Execution (RCE) vulnerability
cve-program ·
https://wordpress.org/plugins: computer-repair-shop
CVE-2026-84821Published
WordPress WP Fast Total Search plugin <= 1.82.284 - Broken Access Control vulnerability
cve-program ·
https://wordpress.org/plugins: fulltext-search
CVE-2026-73786Published
Unauthenticated Network-Based Denial of Service in CPPM systems
cve-program ·
Vendor product: ClearPass Policy Manager (CPPM)
CVE-2026-21103Published
Path traversal in GalaxyDiagnostics prior to SMR Sep-2026 Release 1 allows physical attackers to access files with system privilege.
cve-program ·
Vendor product: Samsung Mobile Devices
CVE-2026-19201Published
Denial of Service via Unbounded Recursion in go-attestation Windows SIPA Parser
cve-program ·
Vendor product: go-attestation
CVE-2026-78620Published
Improper Path Validation in Okta Access Gateway Kerberos Configuration Handling
cve-program ·
Vendor product: Okta Access Gateway
CVE-2026-61915Published
An issue was discovered in Cyrus IMAP before 3.12.4. There is a VPATCH BYPARAM double-free. An authenticated calendar user could crash a Cyrus CalDAV worker with a PATCH containing PATCH-ACTION="BYPARAM@..." against a resource with two or m…
cve-program ·
Vendor product: Cyrus IMAP
CVE-2026-85545Published
There is an Vulnerability in some HikCentral Access Control versions. Authenticated low-privilege users can invoke API interfaces that their role is not authorized to access.
cve-program ·
Vendor product: HikCentral Access Control
CVE-2026-81904Published
Concrete CMS before 9.5.3 is vulnerable to Missing Authorization in Stack/Container Sub-Block Asset Registration
cve-program ·
Vendor product: Concrete CMS
CVE-2026-84685Published
Improper Cache Isolation in auth0/react-native-auth0 SDK Web Platform Credential Management
cve-program ·
Vendor product: react-native-auth0
CVE-2026-85983Published
Local Privilege Escalation in Auth0 AD/LDAP Connector
cve-program ·
Vendor product: Auth0 AD/LDAP Connector
CVE-2026-85982Published
Stored Cross-Site Scripting (XSS) in Auth0 AD/LDAP Connector
cve-program ·
Vendor product: Auth0 AD/LDAP Connector
CVE-2026-85981Published
Unauthenticated Localhost Admin Panel in Auth0 AD/LDAP Connector
cve-program ·
Vendor product: Auth0 AD/LDAP Connector
CVE-2026-78622Published
Improper Link Resolution in Okta Verify for Windows Uninstaller Data Removal
cve-program ·
Vendor product: Okta Verify for Windows
CVE-2026-78631Published
Improper Restriction of Sensitive Information in Okta Hyperdrive Agent Logging
cve-program ·
Vendor product: Okta Hyperdrive Agent
CVE-2026-78630Published
Improper Input Neutralization in Okta Access Gateway SNMP Configuration Processing
cve-program ·
Vendor product: Okta Access Gateway
CVE-2026-28611Published
In multiple functions of NfcService.java, there is a possible silent payment session hijacking enablement due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. Us…
cve-program ·
Vendor product: Android
CVE-2026-85543Published
Some Wi-Fi series camera products have insufficient permission validation on certain interfaces, allowing authenticated low-privileged users to obtain device Wi-Fi configuration information through these interfaces.
cve-program ·
Vendor product: Wi-Fi series camera
CVE-2026-78629Published
Improper Authentication Verification in the Okta Hyperdrive Agent MFA Response Handling
cve-program ·
Vendor product: Okta Hyperdrive Agent
CVE-2026-28612Published
In resolveActivity of ActivityStarter.java, there is a possible way to perform Intent Redirection attacks due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. Use…
cve-program ·
Vendor product: Android
CVE-2026-28614Published
In onCreate of SlicePermissionActivity.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for…
cve-program ·
Vendor product: Android
CVE-2026-78635Published
Improper Input Validation in the Okta Privileged Access SSH Client URL Handler Argument
cve-program ·
Vendor product: Okta Privileged Access Client
CVE-2026-87600Published
Improper input validation in Safebrowsing in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severit…
cve-program ·
Vendor product: Chrome
CVE-2026-28620Published
In multiple locations, there is a possible unauthorized URI access due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation…
cve-program ·
Vendor product: Android
CVE-2026-78579Published
Improper Input Sanitization in Okta Access Gateway LDAP Datastore Filter Interpolation
cve-program ·
Vendor product: Okta Access Gateway
CVE-2026-28624Published
In multiple locations, there is a possible read/write access to files without the proper permissions due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction…
cve-program ·
Vendor product: Android
CVE-2026-78627Published
Improper Credential Protection in Okta Hyperdrive Integration Installer Logging
cve-program ·
Vendor product: Okta Hyperdrive Integration Plugin
CVE-2026-28634Published
In handleUssdRequest of PhoneInterfaceManager.java, there is a possible way to send a USSD request without permission due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges…
cve-program ·
Vendor product: Android
CVE-2026-78574Published
Improper Assembly Resolution in Okta Hyperdrive Integration Plugin Registry Handling
cve-program ·
Vendor product: Okta Hyperdrive Integration Plugin
CVE-2026-28631Published
In buildMiniResolver of IntentForwarderActivity.java, there is a possible consent bypass due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction i…
cve-program ·
Vendor product: Android
CVE-2026-28663Published
In buildIntentSenderForUser of LauncherAppsService.java, there is a possible way to launch an activity from the background due to BAL Bypass. This could lead to local escalation of privilege with no additional execution privileges needed. U…
cve-program ·
Vendor product: Android
CVE-2026-78626Published
Improper Input Sanitization in Okta Access Gateway Protected Rules
cve-program ·
Vendor product: Okta Access Gateway
CVE-2026-78625Published
Insufficient Validation of Dashboard Application Labels in Okta Access Gateway Dashboard Site Configuration
cve-program ·
Vendor product: Okta Access Gateway
CVE-2026-28626Published
In onCreate of SetupPassthroughActivity.java, there is a possible way to launch arbitrary activity due to Intent redirection . This could lead to local escalation of privilege with no additional execution privileges needed. User interaction…
cve-program ·
Vendor product: Android
CVE-2026-28613Published
In initAppLinkTypeAndIntent of ChannelImpl.java, there is a possible launch an arbitrary intent due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interact…
cve-program ·
Vendor product: Android
CVE-2026-28656Published
In multiple functions of DeviceAdminAdd.java, there is a possible way to an overlay due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is nee…
cve-program ·
Vendor product: Android
CVE-2026-45528Published
In getManageSpaceActivityIntent of StorageManagerService.java, there is a possible LaunchAnyWhere chain due to an unsafe PendingIntent. This could lead to local escalation of privilege with no additional execution privileges needed. User in…
cve-program ·
Vendor product: Android
CVE-2026-78624Published
Improper Path Validation in Okta Access Gateway Backup and Restore Functionality
cve-program ·
Vendor product: Okta Access Gateway
CVE-2026-28639Published
In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed…
cve-program ·
Vendor product: Android
CVE-2026-78560Published
Improper Authentication Validation in Okta Access Gateway Pass-Through Authentication Source
cve-program ·
Vendor product: Okta Access Gateway
CVE-2026-28636Published
In setupLayout of PickActivity.java, there is a possible bypass of the "Install unknown apps" security restriction due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. Us…
cve-program ·
Vendor product: Android
CVE-2026-6485Published
UEFI BIOS embedded Shell can be used to bypass Secure Boot
cve-program ·
Vendor product: InsydeH2O
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.