https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T11:49:50.267558+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-13274 bdu:2026-13274 2026-10-03T11:49:50.917922+00:00 bdu:2026-13274 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1001 certfr-2026-avi-1001 — De multiples vulnérabilités ont été découvertes dans Microsoft Windows. Certaines d'entre elles permettent à un attaqua… 2026-10-03T11:49:50.917982+00:00 certfr-2026-avi-1001 https://cve.radiocsirt.org/vuln/euvd-2026-378548 EUVD-2026-378548 2026-10-03T11:49:50.918004+00:00 EUVD-2026-378548 https://cve.radiocsirt.org/vuln/fkie_cve-2026-66804 fkie_cve-2026-66804 2026-10-03T11:49:50.918018+00:00

Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally.

 https://cve.radiocsirt.org/vuln/ghsa-m9fr-m5pc-g6ww GHSA-m9fr-m5pc-g6ww 2026-10-03T11:49:50.918047+00:00

Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-66804 msrc_CVE-2026-66804 — Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability 2026-10-03T11:49:50.918063+00:00 msrc_CVE-2026-66804 https://cve.radiocsirt.org/vuln/ncsc-2026-0284 NCSC-2026-0284 — Kwetsbaarheden verholpen in Microsoft Windows 2026-10-03T11:49:50.918080+00:00 NCSC-2026-0284 https://cve.radiocsirt.org/vuln/rhsa-2026:57191 RHSA-2026:57191 — Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.16.3 security update 2026-10-03T11:49:50.918450+00:00

fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization github.com/hashicorp/memberlist: HashiCorp memberlist: Denial of Service via push/pull state handling golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass grafana: Grafana: Privilege escalation via dashboard overwrite net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header axios: Axios: Information disclosure of proxy credentials via HTTP redirects axios: Axios: Information disclosure of proxy credentials via redirect flows axios: Axios: Denial of Service due to unenforced request and response size limits axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normali…

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2756 WID-SEC-W-2026-2756 — Microsoft Windows Produkte: Mehrere Schwachstellen 2026-10-03T11:49:50.918533+00:00

Ein Angreifer kann mehrere Schwachstellen in Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows 10, Microsoft Windows Server 2019, Microsoft Windows Server 2022, Microsoft Exchange, Microsoft Windows 11, Microsoft Windows Server 2025 und Microsoft Windows ausnutzen, um beliebigen Programmcode auszuführen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, um einen Cross-Site Scripting Angriff durchzuführen, und um Sicherheitsvorkehrungen zu umgehen.