CVE ID :CVE-2026-48034 Published : July 24, 2026, 7:16 p.m. | 47 minutes ago Description :Hulumi is an open-source toolkit that ships secure-by-default cloud and platform infrastructure components for Pulumi. Prior to version 1.4.0, there is a bypass via decoy sibling…
CVE ID :CVE-2026-48036 Published : July 24, 2026, 7:16 p.m. | 47 minutes ago Description :Hulumi is an open-source toolkit that ships secure-by-default cloud and platform infrastructure components for Pulumi. Prior to version 1.4.0, consumers running drift detection in CI /…
CVE ID :CVE-2026-63765 Published : July 23, 2026, 7:17 p.m. | 42 minutes ago Description :Chatwoot before 4.16.0 contains an authentication bypass vulnerability in the direct uploads controller that allows unauthenticated attackers to create arbitrary ActiveStorage blobs in any tenant account.…
CVE ID :CVE-2026-16756 Published : July 23, 2026, 7:16 p.m. | 43 minutes ago Description :Missing connection and header-read timeouts and the absence of a concurrent-connection cap in the default serve() path of Amazon aws-smithy-http-server might allow remote attackers to cause…
CVE ID :CVE-2026-65706 Published : July 23, 2026, 7:05 p.m. | 54 minutes ago Description :FFmpeg versions 3.0 through 8.1.2 contain an out-of-bounds write vulnerability in the vf_swaprect video filter that allows attackers to corrupt heap memory by supplying a crafted…
CVE ID :CVE-2026-65703 Published : July 23, 2026, 6:52 p.m. | 1 hour, 7 minutes ago Description :FFmpeg versions 2.7 through 8.1.2 contain an out-of-bounds write vulnerability in the TDSC video decoder that allows remote attackers to cause heap corruption by supplying…
A Russian state-supported espionage group spent months reading Western mailboxes through a then-unknown flaw in Zimbra’s webmail client. The payload goes after the last 90 days of email, the organization’s entire email directory, the password saved in the browser and…
CVE ID :CVE-2026-22049 Published : July 22, 2026, 7:16 p.m. | 34 minutes ago Description :ONTAP versions 9.16.1 and higher with WebAuthn multi-factor authentication (MFA) configured are susceptible to a vulnerability related to the Relying Party ID which when successfully exploited…
CVE ID :CVE-2026-64835 Published : July 22, 2026, 6:17 p.m. | 1 hour, 33 minutes ago Description :FFmpeg versions 4.4 through 8.1.2 contain an out-of-bounds memory access vulnerability in the ADX audio decoder within libavcodec that allows attackers to trigger both out-of-bounds…
CVE ID :CVE-2026-64832 Published : July 22, 2026, 6:17 p.m. | 1 hour, 33 minutes ago Description :FFmpeg versions 4.4 through 8.1.2 contain a double-free vulnerability in the NVIDIA NVDEC hardware decoder within libavcodec that allows attackers to trigger memory corruption by…