🚨 CVE-2023-4622
A use-after-free vulnerability in the Linux kernel's af_unix component can be exploited to achieve local privilege escalation.
The unix_stream_sendpage() function tries to add data to the last skb in the peer's recv queue without locking the queue. Thus there is a race where unix_stream_sendpage() could access an skb locklessly that is being released by garbage collection, resulting in use-after-free.
We recommend upgrading past commit 790c2f9d15b594350ae9bca7b236f2b1859de02c (or backported equivalents).
🎖@cveNotify
A use-after-free vulnerability in the Linux kernel's af_unix component can be exploited to achieve local privilege escalation.
The unix_stream_sendpage() function tries to add data to the last skb in the peer's recv queue without locking the queue. Thus there is a race where unix_stream_sendpage() could access an skb locklessly that is being released by garbage collection, resulting in use-after-free.
We recommend upgrading past commit 790c2f9d15b594350ae9bca7b236f2b1859de02c (or backported equivalents).
🎖@cveNotify
🚨 CVE-2025-20296
A vulnerability in the web-based management interface of Cisco UCS Manager Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface.
This vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of an affected system. An attacker could exploit this vulnerability by injecting malicious data into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. To exploit this vulnerability, the attacker must be a member of the Administrator or AAA Administrator role.
🎖@cveNotify
A vulnerability in the web-based management interface of Cisco UCS Manager Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface.
This vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of an affected system. An attacker could exploit this vulnerability by injecting malicious data into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. To exploit this vulnerability, the attacker must be a member of the Administrator or AAA Administrator role.
🎖@cveNotify
Cisco
Cisco Security Advisory: Cisco UCS Manager Software Stored Cross-Site Scripting Vulnerability
A vulnerability in the web-based management interface of Cisco UCS Manager Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface.
This vulnerability is due to insufficient…
This vulnerability is due to insufficient…
🚨 CVE-2025-20311
A vulnerability in the handling of certain Ethernet frames in Cisco IOS XE Software for Catalyst 9000 Series Switches could allow an unauthenticated, adjacent attacker to cause an egress port to become blocked and drop all outbound traffic.
This vulnerability is due to improper handling of crafted Ethernet frames. An attacker could exploit this vulnerability by sending crafted Ethernet frames through an affected switch. A successful exploit could allow the attacker to cause the egress port to which the crafted frame is forwarded to start dropping all frames, resulting in a denial of service (DoS) condition.
🎖@cveNotify
A vulnerability in the handling of certain Ethernet frames in Cisco IOS XE Software for Catalyst 9000 Series Switches could allow an unauthenticated, adjacent attacker to cause an egress port to become blocked and drop all outbound traffic.
This vulnerability is due to improper handling of crafted Ethernet frames. An attacker could exploit this vulnerability by sending crafted Ethernet frames through an affected switch. A successful exploit could allow the attacker to cause the egress port to which the crafted frame is forwarded to start dropping all frames, resulting in a denial of service (DoS) condition.
🎖@cveNotify
Cisco
Cisco Security Advisory: Cisco IOS XE Software for Catalyst 9000 Series Switches Denial of Service Vulnerability
A vulnerability in the handling of certain Ethernet frames in Cisco IOS XE Software for Catalyst 9000 Series Switches could allow an unauthenticated, adjacent attacker to cause an egress port to become blocked and drop all outbound traffic.
This vulnerability…
This vulnerability…
🚨 CVE-2026-67378
Untrusted pointer dereference in SQL Server allows an unauthorized attacker to execute code over a network.
🎖@cveNotify
Untrusted pointer dereference in SQL Server allows an unauthorized attacker to execute code over a network.
🎖@cveNotify
🚨 CVE-2026-67631
Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.
🎖@cveNotify
Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.
🎖@cveNotify
🚨 CVE-2026-67636
Out-of-bounds read in SQL Server allows an unauthorized attacker to execute code over a network.
🎖@cveNotify
Out-of-bounds read in SQL Server allows an unauthorized attacker to execute code over a network.
🎖@cveNotify
🚨 CVE-2026-67643
Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.
🎖@cveNotify
Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.
🎖@cveNotify
🚨 CVE-2026-69626
Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
🎖@cveNotify
Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
🎖@cveNotify
🚨 CVE-2026-69632
Use after free in Microsoft Office allows an unauthorized attacker to execute code over a network.
🎖@cveNotify
Use after free in Microsoft Office allows an unauthorized attacker to execute code over a network.
🎖@cveNotify
🚨 CVE-2026-69671
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
🎖@cveNotify
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
🎖@cveNotify
🚨 CVE-2026-69678
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
🎖@cveNotify
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
🎖@cveNotify
🚨 CVE-2026-69686
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
🎖@cveNotify
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
🎖@cveNotify
🚨 CVE-2026-69719
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
🎖@cveNotify
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
🎖@cveNotify
🚨 CVE-2026-69722
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
🎖@cveNotify
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
🎖@cveNotify
🚨 CVE-2026-69734
Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
🎖@cveNotify
Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
🎖@cveNotify
🚨 CVE-2026-69739
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
🎖@cveNotify
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
🎖@cveNotify
🚨 CVE-2026-69759
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
🎖@cveNotify
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
🎖@cveNotify
🚨 CVE-2026-69767
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
🎖@cveNotify
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
🎖@cveNotify
🚨 CVE-2026-69797
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
🎖@cveNotify
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
🎖@cveNotify
🚨 CVE-2026-72938
Access of resource using incompatible type ('type confusion') in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
🎖@cveNotify
Access of resource using incompatible type ('type confusion') in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
🎖@cveNotify
🚨 CVE-2026-72972
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
🎖@cveNotify
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
🎖@cveNotify