Microsoft January 2026 Security Updates

Microsoft December 2025 Security Updates

Microsoft December 2025 Early Security Updates

Microsoft November 2025 Security Updates

Microsoft October 2025 Security Updates

Microsoft September 2025 Security Updates

Microsoft August 2025 Security Updates

Microsoft August Early 2025 Security Updates

Microsoft July 2025 Security Updates

Microsoft June 2025 Security Updates

Microsoft June Early 2025 Security Updates

Microsoft May 2025 Security Updates

Microsoft May Early 2025 Security Updates

Microsoft April 2025 Security Updates

Microsoft March 2025 Security Updates

Microsoft March 2025 Early Security Updates

Microsoft February 2025 Security Updates

Microsoft February 2025 Early Security Updates

Microsoft January 2025 Security Updates

Microsoft January 2025 Early Security Updates

Microsoft December 2024 Security Updates

Microsoft November 2024 Security Updates

Microsoft October 2024 Security Updates

Microsoft September 2024 Security Updates

Microsoft August 2024 Security Updates

Microsoft July 2024 Security Updates

Microsoft June 2024 Security Updates

Microsoft May 2024 Security Updates

Microsoft April 2024 Security Updates

Microsoft March 2024 Security Updates

Microsoft February 2024 Security Updates

Microsoft January 2024 Security Updates

fortisiem

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSIEM 7.4.0, FortiSIEM 7.3.0 through 7.3.4, FortiSIEM 7.1.0 through 7.1.8, FortiSIEM 7.0.0 through 7.0.4, FortiSIEM 6.7.0 through 6.7.10 may allow an attacker to execute unauthorized code or commands via  crafted TCP requests.

FortiSIEM

Fortinet

An improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Fortinet FortiSIEM. Affected versions include FortiSIEM 7.4.0, 7.3.0 through 7.3.4, 7.2.0 through 7.2.6, 7.1.0 through 7.1.8, 7.0.0 through 7.0.4, and 6.7.0 through 6.7.10. An attacker may execute unauthorized code or commands via crafted TCP requests.

Command Line Execution through SQL Injection

Command Delimiters

Exploiting Multiple Input Interpretation Layers

Argument Injection

OS Command Injection

fortiguard.fortinet.com

The CVE description is not yet available but Feedly AI found this CVE id to be trending

cal.com

Client-Side Enforcement of Server-Side Security

Authorization Bypass Through User-Controlled Key

Cal.com is open-source scheduling software. From 3.1.6 to before 6.0.7, there is a vulnerability in a custom NextAuth JWT callback that allows attackers to gain full authenticated access to any user's account by supplying a target email address via session.update(). This vulnerability is fixed in 6.0.7.

calcom

Authentication bypass vulnerability in Cal.com's custom NextAuth JWT callback that allows attackers to gain full authenticated access to any user's account by supplying a target email address via session.update(). Affects Cal.com versions 3.1.6 through 6.0.6.

Manipulating Hidden Fields

Create Malicious Client

Removing Important Client Functionality

Removing/short-circuiting 'Purse' logic: removing/mutating 'cash' decrements

Exploitation of Trusted Identifiers

Accessing/Intercepting/Modifying HTTP Cookies

Harvesting Information via API Event Monitoring

Application API Message Manipulation via Man-in-the-Middle

Transaction or Event Tampering via Application API Manipulation

Application API Navigation Remapping

Navigation Remapping To Propagate Malicious Content

Application API Button Hijacking

Access Token Manipulation

oneview

Improper Control of Generation of Code ('Code Injection')

A remote code execution issue exists in HPE OneView.

HPE OneView

Hewlett Packard Enterprise (HPE)

A code injection vulnerability in HPE OneView allows improper control of code generation, enabling unauthenticated remote code execution over the network without requiring user interaction.

Code Injection

Leverage Executable Code in Non-Executable Files

Manipulating User-Controlled Variables

support.hpe.com

gogs

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Improper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code.

Improper symbolic link handling in the PutContents API allows authenticated attackers to perform path traversal attacks and execute arbitrary code locally on affected Gogs instances.

Path Traversal

Using Slashes and URL Encoding Combined to Bypass Validation Logic

Manipulating Web Input to File System Calls

Using Escaped Slashes in Alternate Encoding

Using Slashes in Alternate Encoding

Github Advisory

github.com

Incorrect Privilege Assignment

An attacker may gain unauthorized access to the host filesystem, potentially allowing them to read and modify system data.

An attacker may gain unauthorized access to the host filesystem, potentially allowing them to read and modify system data. This vulnerability stems from incorrect privilege assignment (CWE-266).

Protection Mechanism Failure

Enclave is a secure JavaScript sandbox designed for safe AI agent code execution. Prior to 2.7.0, there is a critical sandbox escape vulnerability in enclave-vm that allows untrusted, sandboxed JavaScript code to execute arbitrary code in the host Node.js runtime. When a tool invocation fails, enclave-vm exposes a host-side Error object to sandboxed code. This Error object retains its host realm prototype chain, which can be traversed to reach the host Function constructor. An attacker can intentionally trigger a host error, then climb the prototype chain. Using the host Function constructor, arbitrary JavaScript can be compiled and executed in the host context, fully bypassing the sandbox and granting access to sensitive resources such as process.env, filesystem, and network. This breaks enclave-vm’s core security guarantee of isolating untrusted code. This vulnerability is fixed in 2.7.0.

enclave-vm Vulnerable to Sandbox Escape via Host Error Prototype Chain

A critical sandbox escape vulnerability in enclave-vm (versions prior to 2.7.0) allows untrusted, sandboxed JavaScript code to execute arbitrary code in the host Node.js runtime. When a tool invocation fails, the vulnerability exposes a host-side Error object to sandboxed code. This Error object retains its host realm prototype chain, which can be traversed to reach the host Function constructor. An attacker can intentionally trigger a host error, then climb the prototype chain to access the host Function constructor. Using this constructor, arbitrary JavaScript can be compiled and executed in the host context, fully bypassing the sandbox and its core security isolation mechanism.

Accessing Functionality Not Properly Constrained by ACLs

Cross Site Tracing

Directory Indexing

Using Malicious Files

Encryption Brute Forcing

Exploiting Trust in Client

Escaping a Sandbox by Calling Code in Another Language

Using Unpublished Interfaces

Signature Spoofing by Mixing Signed and Unsigned Content

Escaping Virtualization

Poison Web Service Registry

Utilizing REST's Trust in the System Resource to Obtain Sensitive Data

Session Credential Falsification through Prediction

Sniff Application Code

Key Negotiation of Bluetooth Attack (KNOB)

Manipulating State

Forceful Browsing

Services File Permissions Weakness

File and Directory Discovery

Escape to Host

windows_11_25H2

windows_11_24H2

windows_10_22h2

windows_11_23h2

windows_server_23h2

windows_10_21h2

windows_server_2022_23h2

windows_10_1809

windows_11_25h2

windows_11_2H2

windows_server_2016

windows_11_24h2

windows_server_2019

windows_server_2025

windows_11_23H2

windows_10_21H2

windows_10_1607

windows_10_22H2

windows_server_2022

windowshello

<p>Incorrect privilege assignment in Windows Hello allows an unauthorized attacker to perform tampering locally.</p>


Incorrect privilege assignment in Windows Hello allows an unauthorized attacker to perform tampering locally.

Windows 10 Version 1607

Windows Server 2025 (Server Core installation)

Windows 11 version 22H3

Windows Server 2022, 23H2 Edition (Server Core installation)

Windows 10 Version 22H2

Windows 11 Version 23H2

Windows Server 2019

Windows Server 2025

Windows 10 Version 21H2

Windows 11 Version 25H2

Windows Server 2016

Windows Server 2016 (Server Core installation)

Windows Server 2022

Windows 11 Version 24H2

Windows 10 Version 1809

Windows Server 2019 (Server Core installation)

Microsoft

Incorrect privilege assignment in Windows Hello allows an unauthorized attacker to perform tampering locally. The vulnerability exists due to improper privilege controls that enable local attackers to modify authentication settings and compromise system integrity without requiring credentials.

msrc.microsoft.com

Incorrect privilege assignment in Windows Hello allows an unauthorized attacker to perform tampering locally.


Search CVEs by ID

Trending Vulnerabilities

Latest Patch Tuesday Reports

January 2026 Patch Tuesday: 8 Critical Vulnerabilities Amid 112 CVEs

December 2025 Patch Tuesday: 10 Critical Vulnerabilities Amid 64 CVEs

December 2025 Early Security Update: 0 Critical Vulnerabilities Amid 1 CVEs

Browse

Be the first to know about critical vulnerabilities