Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
8.6 HIGH
CVE-2026-103845 — Dimension | Uncontrolled Search Path Element (CWE-427)

Dimension is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. A local attacker with user permissions cou…

dimension | Path Traversal
Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
7.8 HIGH
CVE-2026-103844 — Dimension | Out-of-bounds Write (CWE-787)

Dimension is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in…

dimension | Memory Corruption
Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
7.8 HIGH
CVE-2026-103843 — Substance3D - Stager | Use After Free (CWE-416)

Substance3D - Stager is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interacti…

substance_3d_stager | Memory Corruption
Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
7.8 HIGH
CVE-2026-103842 — Substance3D - Stager | Out-of-bounds Read (CWE-125)

Substance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leve…

substance_3d_stager | Memory Corruption
Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
7.8 HIGH
CVE-2026-103841 — Substance3D - Stager | Out-of-bounds Read (CWE-125)

Substance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leve…

substance_3d_stager | Memory Corruption
Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
7.8 HIGH
CVE-2026-103840 — Substance3D - Stager | Out-of-bounds Read (CWE-125)

Substance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leve…

substance_3d_stager | Memory Corruption
Oct 13, 2026 Oct 15, 2026
Oct 13, 2026
Oct 15, 2026
7.8 HIGH
CVE-2026-103839 — Substance3D - Stager | Out-of-bounds Write (CWE-787)

Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user int…

substance_3d_stager | Memory Corruption
Oct 13, 2026 Oct 15, 2026
Oct 13, 2026
Oct 15, 2026
7.8 HIGH
CVE-2026-103838 — Substance3D - Stager | Out-of-bounds Write (CWE-787)

Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user int…

substance_3d_stager | Memory Corruption
Oct 13, 2026 Oct 15, 2026
Oct 13, 2026
Oct 15, 2026
7.8 HIGH
CVE-2026-103837 — Substance3D - Stager | Out-of-bounds Write (CWE-787)

Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user int…

substance_3d_stager | Memory Corruption
Oct 13, 2026 Oct 15, 2026
Oct 13, 2026
Oct 15, 2026
7.8 HIGH
CVE-2026-103836 — Substance3D - Stager | Out-of-bounds Write (CWE-787)

Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user int…

substance_3d_stager | Memory Corruption
Oct 13, 2026 Oct 15, 2026
Oct 13, 2026
Oct 15, 2026
7.8 HIGH
CVE-2026-103835 — Substance3D - Stager | Out-of-bounds Write (CWE-787)

Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user int…

substance_3d_stager | Memory Corruption
Oct 13, 2026 Oct 15, 2026
Oct 13, 2026
Oct 15, 2026
7.8 HIGH
CVE-2026-103834 — Substance3D - Stager | Out-of-bounds Write (CWE-787)

Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user int…

substance_3d_stager | Memory Corruption
Oct 13, 2026 Oct 15, 2026
Oct 13, 2026
Oct 15, 2026
7.8 HIGH
CVE-2026-103833 — Substance3D - Stager | Out-of-bounds Write (CWE-787)

Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user int…

substance_3d_stager | Memory Corruption
Oct 13, 2026 Oct 15, 2026
Oct 13, 2026
Oct 15, 2026
7.8 HIGH
CVE-2026-103832 — Substance3D - Stager | Out-of-bounds Write (CWE-787)

Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user int…

substance_3d_stager | Memory Corruption
Oct 13, 2026 Oct 15, 2026
Oct 13, 2026
Oct 15, 2026
7.8 HIGH
CVE-2026-103830 — Substance3D - Stager | Stack-based Buffer Overflow (CWE-121)

Substance3D - Stager is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires u…

substance_3d_stager | Memory Corruption
Oct 13, 2026 Oct 15, 2026
Oct 13, 2026
Oct 15, 2026
8.8 HIGH
CVE-2026-102855 — Microsoft Office Visio Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.

Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
9.6 CRITICAL
CVE-2026-102238 — Visual Studio Code Remote Code Execution Vulnerability

Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to execute code over a network.

Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
8.8 HIGH
CVE-2026-102235 — Visual Studio Code Remote Code Execution Vulnerability

Improper encoding or escaping of output in Visual Studio Code allows an unauthorized attacker to execute code over a network.

Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
7.4 HIGH
CVE-2026-102234 — Visual Studio Code Security Feature Bypass Vulnerability

Reliance on untrusted inputs in a security decision in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
6.5 MEDIUM
CVE-2026-97844 — Role: DNS Server Information Disclosure Vulnerability

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
Showing 20 of 16407 Results