https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 08:50:14 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-11622 bdu:2026-11622 https://cve.radiocsirt.org/vuln/bdu:2026-11622 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1000 certfr-2026-avi-1000 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1000 https://cve.radiocsirt.org/vuln/euvd-2026-378709 EUVD-2026-378709 https://cve.radiocsirt.org/vuln/euvd-2026-378709 https://cve.radiocsirt.org/vuln/fkie_cve-2026-66806 <p>Off-by-one error in Microsoft Office Word allows an unauthorized attacker to disclose information locally.</p> <p>Off-by-one error in Microsoft Office Word allows an unauthorized attacker to disclose information locally.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-66806 https://cve.radiocsirt.org/vuln/ghsa-vr2p-489v-8hm2 <p>Off-by-one error in Microsoft Office Word allows an unauthorized attacker to disclose information locally.</p> <p>Off-by-one error in Microsoft Office Word allows an unauthorized attacker to disclose information locally.</p> https://cve.radiocsirt.org/vuln/ghsa-vr2p-489v-8hm2 https://cve.radiocsirt.org/vuln/msrc_cve-2026-66806 msrc_CVE-2026-66806 https://cve.radiocsirt.org/vuln/msrc_cve-2026-66806 https://cve.radiocsirt.org/vuln/ncsc-2026-0286 NCSC-2026-0286 https://cve.radiocsirt.org/vuln/ncsc-2026-0286 https://cve.radiocsirt.org/vuln/rhsa-2026:59579 <p>golang: net/http: net/http: sensitive headers incorrectly sent after cross-domain redirect crypto/internal/nistec: golang: Timing sidechannel for P-256 on ppc64le in crypto/internal/nistec golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing cluster-curator-controller: cluster-curator-controller: namespace admin can escalate to cluster-wide curator authority via ClusterCurator ServiceAccount token form-data: form-data: Form field override via CRLF injection provider-credential-controller: provider-credential-controller: cross-namespace credential propagation via attacker-controlled copiedFrom labels bypasses authorization crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs find-my-way: find-my-way: Denial of Service vulnerability in HTTP/2 server ip-address: ip-address: Server-Side Request Forgery via IPv4-mapped/NAT64 IPv6 address misclassification cluster-proxy-addon: cluster-proxy-addon: unauthenticated SSRF to arbitrary managed-cluster services via public…</p> <p>golang: net/http: net/http: sensitive headers incorrectly sent after cross-domain redirect crypto/internal/nistec: golang: Timing sidechannel for P-256 on ppc64le in crypto/internal/nistec golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing cluster-curator-controller: cluster-curator-controller: namespace admin can escalate to cluster-wide curator authority via ClusterCurator ServiceAccount token form-data: form-data: Form field override via CRLF injection provider-credential-controller: provider-credential-controller: cross-namespace credential propagation via attacker-controlled copiedFrom labels bypasses authorization crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs find-my-way: find-my-way: Denial of Service vulnerability in HTTP/2 server ip-address: ip-address: Server-Side Request Forgery via IPv4-mapped/NAT64 IPv6 address misclassification cluster-proxy-addon: cluster-proxy-addon: unauthenticated SSRF to arbitrary managed-cluster services via public…</p> https://cve.radiocsirt.org/vuln/rhsa-2026:59579 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2762 <p>Ein Angreifer kann mehrere Schwachstellen in Microsoft Office Produkte ausnutzen, um Dateien zu manipulieren, um seine Privilegien zu erhöhen, um Informationen offenzulegen, um einen Cross-Site Scripting Angriff durchzuführen, und um beliebigen Programmcode auszuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Microsoft Office Produkte ausnutzen, um Dateien zu manipulieren, um seine Privilegien zu erhöhen, um Informationen offenzulegen, um einen Cross-Site Scripting Angriff durchzuführen, und um beliebigen Programmcode auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2762