https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T17:32:12.329037+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-1096 certfr-2026-avi-1096 — De multiples vulnérabilités ont été découvertes dans Microsoft Edge. Certaines d'entre elles permettent à un attaquant… 2026-10-02T17:32:12.718617+00:00 certfr-2026-avi-1096 https://cve.radiocsirt.org/vuln/euvd-2026-378740 EUVD-2026-378740 2026-10-02T17:32:12.718709+00:00 EUVD-2026-378740 https://cve.radiocsirt.org/vuln/fkie_cve-2026-66798 fkie_cve-2026-66798 2026-10-02T17:32:12.718734+00:00

Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

 https://cve.radiocsirt.org/vuln/ghsa-c27v-65fh-7pg2 GHSA-c27v-65fh-7pg2 2026-10-02T17:32:12.718778+00:00

Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-66798 msrc_CVE-2026-66798 — Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability 2026-10-02T17:32:12.718802+00:00 msrc_CVE-2026-66798 https://cve.radiocsirt.org/vuln/rhsa-2026:60386 RHSA-2026:60386 — Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.17.1 security update 2026-10-02T17:32:12.718829+00:00

multicluster-operators-subscription: multicluster-operators-subscription: namespace edit user can deploy cluster-scoped ClusterRoleBinding and become cluster-admin via Application Subscription fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization github.com/hashicorp/memberlist: HashiCorp memberlist: Denial of Service via push/pull state handling volsync-addon-controller: volsync-addon-controller: annotation values rendered into YAML via text/template without escaping allows YAML injection into Subscription golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries grafana: Grafana: Privilege escalation via dashboard overwrite github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering github.com/go-git/go-billy: Billy: Denial of Service via crafted input due to insufficient validation sanitize-html: `sanitize-html`: Stored Cross-Site Scripting via HTML sanitizer bypass postcss: PostCSS: Information disclosure and denial of service via crafted CSS input github.com/hamba/avro/v2: github.com/linkedin/goavro/v2: Intege…

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3085 WID-SEC-W-2026-3085 — Microsoft Edge: Mehrere Schwachstellen 2026-10-02T17:32:12.719035+00:00

Ein Angreifer kann mehrere Schwachstellen in Microsoft Edge ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Spoofing-Angriffe durchzuführen, Daten zu manipulieren oder offenzulegen oder einen Denial-of-Service-Zustand herbeizuführen.