https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 17:31:47 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-13274 bdu:2026-13274 https://cve.radiocsirt.org/vuln/bdu:2026-13274 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1001 certfr-2026-avi-1001 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1001 https://cve.radiocsirt.org/vuln/euvd-2026-378548 EUVD-2026-378548 https://cve.radiocsirt.org/vuln/euvd-2026-378548 https://cve.radiocsirt.org/vuln/fkie_cve-2026-66804 <p>Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally.</p> <p>Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-66804 https://cve.radiocsirt.org/vuln/ghsa-m9fr-m5pc-g6ww <p>Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally.</p> <p>Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally.</p> https://cve.radiocsirt.org/vuln/ghsa-m9fr-m5pc-g6ww https://cve.radiocsirt.org/vuln/msrc_cve-2026-66804 msrc_CVE-2026-66804 https://cve.radiocsirt.org/vuln/msrc_cve-2026-66804 https://cve.radiocsirt.org/vuln/ncsc-2026-0284 NCSC-2026-0284 https://cve.radiocsirt.org/vuln/ncsc-2026-0284 https://cve.radiocsirt.org/vuln/rhsa-2026:57191 <p>fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization github.com/hashicorp/memberlist: HashiCorp memberlist: Denial of Service via push/pull state handling golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass grafana: Grafana: Privilege escalation via dashboard overwrite net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header axios: Axios: Information disclosure of proxy credentials via HTTP redirects axios: Axios: Information disclosure of proxy credentials via redirect flows axios: Axios: Denial of Service due to unenforced request and response size limits axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normali…</p> <p>fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization github.com/hashicorp/memberlist: HashiCorp memberlist: Denial of Service via push/pull state handling golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass grafana: Grafana: Privilege escalation via dashboard overwrite net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header axios: Axios: Information disclosure of proxy credentials via HTTP redirects axios: Axios: Information disclosure of proxy credentials via redirect flows axios: Axios: Denial of Service due to unenforced request and response size limits axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normali…</p> https://cve.radiocsirt.org/vuln/rhsa-2026:57191 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2756 <p>Ein Angreifer kann mehrere Schwachstellen in Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows 10, Microsoft Windows Server 2019, Microsoft Windows Server 2022, Microsoft Exchange, Microsoft Windows 11, Microsoft Windows Server 2025 und Microsoft Windows ausnutzen, um beliebigen Programmcode auszuführen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, um einen Cross-Site Scripting Angriff durchzuführen, und um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows 10, Microsoft Windows Server 2019, Microsoft Windows Server 2022, Microsoft Exchange, Microsoft Windows 11, Microsoft Windows Server 2025 und Microsoft Windows ausnutzen, um beliebigen Programmcode auszuführen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, um einen Cross-Site Scripting Angriff durchzuführen, und um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2756