<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://cve.radiocsirt.org</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 02 Oct 2026 19:53:45 +0000</lastBuildDate>
    <item>
      <title>certfr-2026-avi-1001 — De multiples vulnérabilités ont été découvertes dans Microsoft Windows. Certaines d'entre elles permettent à un attaqua…</title>
      <link>https://cve.radiocsirt.org/vuln/certfr-2026-avi-1001</link>
      <description>certfr-2026-avi-1001</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/certfr-2026-avi-1001</guid>
    </item>
    <item>
      <title>EUVD-2026-351702</title>
      <link>https://cve.radiocsirt.org/vuln/euvd-2026-351702</link>
      <description>EUVD-2026-351702</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/euvd-2026-351702</guid>
    </item>
    <item>
      <title>fkie_cve-2026-6726</title>
      <link>https://cve.radiocsirt.org/vuln/fkie_cve-2026-6726</link>
      <description>&lt;p&gt;An information leakage vulnerability was reported in the TCG TPM 2.0 reference code that could allow a local attacker with elevated privileges to obtain a credential from a TPM-aware CA for a falsified TPM key (such as an Attestation Key, DevID Key or TLS authentication key) and falsify other TPM 2.0 attestations with this key.  See also TCG VRT0010.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;An information leakage vulnerability was reported in the TCG TPM 2.0 reference code that could allow a local attacker with elevated privileges to obtain a credential from a TPM-aware CA for a falsified TPM key (such as an Attestation Key, DevID Key or TLS authentication key) and falsify other TPM 2.0 attestations with this key.  See also TCG VRT0010.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/fkie_cve-2026-6726</guid>
    </item>
    <item>
      <title>GHSA-72rq-994p-w2hw</title>
      <link>https://cve.radiocsirt.org/vuln/ghsa-72rq-994p-w2hw</link>
      <description>&lt;p&gt;An information leakage vulnerability was reported in the TCG TPM 2.0 reference code that could allow a local attacker with elevated privileges to obtain a credential from a TPM-aware CA for a falsified TPM key (such as an Attestation Key, DevID Key or TLS authentication key) and falsify other TPM 2.0 attestations with this key.  See also TCG VRT0010.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;An information leakage vulnerability was reported in the TCG TPM 2.0 reference code that could allow a local attacker with elevated privileges to obtain a credential from a TPM-aware CA for a falsified TPM key (such as an Attestation Key, DevID Key or TLS authentication key) and falsify other TPM 2.0 attestations with this key.  See also TCG VRT0010.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/ghsa-72rq-994p-w2hw</guid>
    </item>
    <item>
      <title>jvndb-2026-035789</title>
      <link>https://cve.radiocsirt.org/vuln/jvndb-2026-035789</link>
      <description>&lt;p&gt;CVE-2026-42976 | Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability&#13;
CVE-2026-49179 | Windows Active Directory Domain Services Remote Code Execution Vulnerability&#13;
CVE-2026-50472 | Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability&#13;
CVE-2026-54113 | Remote Procedure Call Denial of Service Vulnerability&#13;
CVE-2026-54984 | Windows Imaging Component Remote Code Execution Vulnerability&#13;
CVE-2026-56174 | Windows Narrator Braille Elevation of Privilege Vulnerability&#13;
CVE-2026-59122 | Windows Telephony Service Elevation of Privilege Vulnerability&#13;
CVE-2026-59125 | Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability&#13;
CVE-2026-59126 | Windows Event Logging Service Elevation of Privilege Vulnerability&#13;
CVE-2026-59127 | Windows Installer Elevation of Privilege Vulnerability&#13;
CVE-2026-59128 | Windows Encrypting File System (EFS) Information Disclosure Vulnerability&#13;
CVE-2026-59130 | AMD Zen Information Disclosure Vulnerability&#13;
CVE-2026-59131 | AMD Zen Information Disclosure Vulnerability&#13;
CVE-2026-59132 | Windows TCP/IP Denial of Service Vulnerability&#13;
CVE-2026-59134 | Remote Desktop Client Remote Code Execution Vulnerability&#13;
CVE-2026-59135 | Microsoft Windows Search Component Information Disclosure Vulnerability&#13;
CVE-2026-59136 | Microsoft COM for Windows Information Disclosure Vulnerability&#13;
CVE-2026-59137 | Windows Event Logging Service Information Disclosure Vulnerability&#13;
CVE-2026-59138 |…&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;CVE-2026-42976 | Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability&#13;
CVE-2026-49179 | Windows Active Directory Domain Services Remote Code Execution Vulnerability&#13;
CVE-2026-50472 | Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability&#13;
CVE-2026-54113 | Remote Procedure Call Denial of Service Vulnerability&#13;
CVE-2026-54984 | Windows Imaging Component Remote Code Execution Vulnerability&#13;
CVE-2026-56174 | Windows Narrator Braille Elevation of Privilege Vulnerability&#13;
CVE-2026-59122 | Windows Telephony Service Elevation of Privilege Vulnerability&#13;
CVE-2026-59125 | Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability&#13;
CVE-2026-59126 | Windows Event Logging Service Elevation of Privilege Vulnerability&#13;
CVE-2026-59127 | Windows Installer Elevation of Privilege Vulnerability&#13;
CVE-2026-59128 | Windows Encrypting File System (EFS) Information Disclosure Vulnerability&#13;
CVE-2026-59130 | AMD Zen Information Disclosure Vulnerability&#13;
CVE-2026-59131 | AMD Zen Information Disclosure Vulnerability&#13;
CVE-2026-59132 | Windows TCP/IP Denial of Service Vulnerability&#13;
CVE-2026-59134 | Remote Desktop Client Remote Code Execution Vulnerability&#13;
CVE-2026-59135 | Microsoft Windows Search Component Information Disclosure Vulnerability&#13;
CVE-2026-59136 | Microsoft COM for Windows Information Disclosure Vulnerability&#13;
CVE-2026-59137 | Windows Event Logging Service Information Disclosure Vulnerability&#13;
CVE-2026-59138 |…&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/jvndb-2026-035789</guid>
    </item>
    <item>
      <title>msrc_CVE-2026-6726 — MITRE: CVE-2026-6726 TPM 2.0 Improper Object Slot Reuse</title>
      <link>https://cve.radiocsirt.org/vuln/msrc_cve-2026-6726</link>
      <description>msrc_CVE-2026-6726</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/msrc_cve-2026-6726</guid>
    </item>
    <item>
      <title>NCSC-2026-0284 — Kwetsbaarheden verholpen in Microsoft Windows</title>
      <link>https://cve.radiocsirt.org/vuln/ncsc-2026-0284</link>
      <description>NCSC-2026-0284</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/ncsc-2026-0284</guid>
    </item>
    <item>
      <title>Withdrawn: UBUNTU-CVE-2026-6726</title>
      <link>https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-6726</link>
      <description>&lt;p&gt;&lt;strong&gt;Withdrawn by the publisher.&lt;/strong&gt;&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:22.04:LTS: libtpms, Ubuntu:24.04:LTS: libtpms&lt;/p&gt;
&lt;p&gt;An information leakage vulnerability was reported in the TCG TPM 2.0 reference code that could allow a local attacker with elevated privileges to obtain a credential from a TPM-aware CA for a falsified TPM key (such as an Attestation Key, DevID Key or TLS authentication key) and falsify other TPM 2.0 attestations with this key.  See also TCG VRT0010.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Withdrawn by the publisher.&lt;/strong&gt;&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:22.04:LTS: libtpms, Ubuntu:24.04:LTS: libtpms&lt;/p&gt;
&lt;p&gt;An information leakage vulnerability was reported in the TCG TPM 2.0 reference code that could allow a local attacker with elevated privileges to obtain a credential from a TPM-aware CA for a falsified TPM key (such as an Attestation Key, DevID Key or TLS authentication key) and falsify other TPM 2.0 attestations with this key.  See also TCG VRT0010.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-6726</guid>
    </item>
    <item>
      <title>WID-SEC-W-2026-2756 — Microsoft Windows Produkte: Mehrere Schwachstellen</title>
      <link>https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2756</link>
      <description>&lt;p&gt;Ein Angreifer kann mehrere Schwachstellen in Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows 10, Microsoft Windows Server 2019, Microsoft Windows Server 2022, Microsoft Exchange, Microsoft Windows 11, Microsoft Windows Server 2025 und Microsoft Windows ausnutzen, um beliebigen Programmcode auszuführen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, um einen Cross-Site Scripting Angriff durchzuführen, und um Sicherheitsvorkehrungen zu umgehen.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Ein Angreifer kann mehrere Schwachstellen in Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows 10, Microsoft Windows Server 2019, Microsoft Windows Server 2022, Microsoft Exchange, Microsoft Windows 11, Microsoft Windows Server 2025 und Microsoft Windows ausnutzen, um beliebigen Programmcode auszuführen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, um einen Cross-Site Scripting Angriff durchzuführen, und um Sicherheitsvorkehrungen zu umgehen.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2756</guid>
    </item>
  </channel>
</rss>
