Total
3425 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2021-42282 | 1 Microsoft | 11 Windows Server, Windows Server 2004, Windows Server 2008 and 8 more | 2026-08-19 | 7.5 High |
| Active Directory Domain Services Elevation of Privilege Vulnerability | ||||
| CVE-2021-42277 | 1 Microsoft | 18 Visual Studio, Visual Studio 2015, Visual Studio 2017 and 15 more | 2026-08-19 | 5.5 Medium |
| Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability | ||||
| CVE-2021-41370 | 1 Microsoft | 22 Windows 10, Windows 10 1507, Windows 10 1607 and 19 more | 2026-08-19 | 7.8 High |
| NTFS Elevation of Privilege Vulnerability | ||||
| CVE-2021-43211 | 1 Microsoft | 1 Windows 10 Update Assistant | 2026-08-19 | 5.5 Medium |
| Windows 10 Update Assistant Elevation of Privilege Vulnerability | ||||
| CVE-2021-42322 | 1 Microsoft | 1 Visual Studio Code | 2026-08-19 | 7.8 High |
| Visual Studio Code Elevation of Privilege Vulnerability | ||||
| CVE-2021-42319 | 1 Microsoft | 2 Visual Studio 2017, Visual Studio 2019 | 2026-08-19 | 4.7 Medium |
| Visual Studio Elevation of Privilege Vulnerability | ||||
| CVE-2021-42304 | 1 Microsoft | 1 Azure Real Time Operating System | 2026-08-19 | 6.6 Medium |
| Azure RTOS Elevation of Privilege Vulnerability | ||||
| CVE-2021-42303 | 1 Microsoft | 1 Azure Real Time Operating System | 2026-08-19 | 6.6 Medium |
| Azure RTOS Elevation of Privilege Vulnerability | ||||
| CVE-2021-42302 | 1 Microsoft | 1 Azure Real Time Operating System | 2026-08-19 | 6.6 Medium |
| Azure RTOS Elevation of Privilege Vulnerability | ||||
| CVE-2021-42280 | 1 Microsoft | 13 Windows 10, Windows 10 1607, Windows 10 1809 and 10 more | 2026-08-19 | 5.5 Medium |
| Windows Feedback Hub Elevation of Privilege Vulnerability | ||||
| CVE-2021-41377 | 1 Microsoft | 22 Windows 10, Windows 10 1507, Windows 10 1607 and 19 more | 2026-08-19 | 7.8 High |
| Windows Fast FAT File System Driver Elevation of Privilege Vulnerability | ||||
| CVE-2021-41367 | 1 Microsoft | 22 Windows 10, Windows 10 1507, Windows 10 1607 and 19 more | 2026-08-19 | 7.8 High |
| NTFS Elevation of Privilege Vulnerability | ||||
| CVE-2021-41366 | 1 Microsoft | 18 Windows 10, Windows 10 1507, Windows 10 1607 and 15 more | 2026-08-19 | 7.8 High |
| Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege Vulnerability | ||||
| CVE-2021-36957 | 1 Microsoft | 12 Windows 10, Windows 10 1607, Windows 10 1809 and 9 more | 2026-08-19 | 7.8 High |
| Windows Desktop Bridge Elevation of Privilege Vulnerability | ||||
| CVE-2026-74942 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-08-19 | 8.8 High |
| Privilege escalation in the Remote Settings Client component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1. | ||||
| CVE-2026-75857 | 1 Hmbown | 1 Codewhale | 2026-08-19 | 7 High |
| CodeWhale versions >= 0.8.41 and < 0.8.64 contain a vulnerability in the exec_shell_interact (alias exec_interact) tool, whose approval_requirement returns ApprovalRequirement::Auto. This overrides the default Required approval for code-executing tools, so LLM-controlled stdin is written into an already-approved long-running interactive shell (e.g., a python3 -i REPL, mysql, ssh, or sudo -i session) without any approval prompt. An attacker who can inject instructions via untrusted content the agent ingests (a fetched page, MCP result, or repo file) can cause commands to run at the privilege level of that approved process. Fixed in 0.8.64. | ||||
| CVE-2026-75837 | 1 Getgrav | 1 Grav | 2026-08-19 | 9.1 Critical |
| Grav before 2.0.14 fails to guard the access field in the core group blueprint with the required security@: admin.super restriction. A delegated admin.users operator can save a group with access[admin][super]=true to escalate to super-admin, gaining scheduler and Twig evaluation capabilities. | ||||
| CVE-2026-61225 | 1 Oracle | 1 Communications Converged Application Server | 2026-08-19 | 8.1 High |
| Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communications (component: Core). Supported versions that are affected are 8.2 and 8.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCP/IP to compromise Oracle Communications Converged Application Server. Successful attacks of this vulnerability can result in takeover of Oracle Communications Converged Application Server. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H). | ||||
| CVE-2026-61053 | 1 Oracle | 2 Communications Billing And Revenue Management Elastic Charging Engine, Communications Brm - Elastic Charging Engine | 2026-08-19 | 7.8 High |
| Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component: Diameter Gateway and SDK). Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Communications BRM - Elastic Charging Engine executes to compromise Oracle Communications BRM - Elastic Charging Engine. Successful attacks of this vulnerability can result in takeover of Oracle Communications BRM - Elastic Charging Engine. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). | ||||
| CVE-2026-74965 | 1 Mozilla | 2 Firefox, Thunderbird | 2026-08-19 | 8.8 High |
| Privilege escalation in the Shell Integration component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1. | ||||