CAPTAINAI/CTI

Daily High-Risk Vuln Digest 2026-07-15 (31)

2026-07-15 #daily #cve #cti #ai-generated

Daily High-Risk Vulnerability Digest · 2026-07-15

31 high-value vulnerabilities included (actively exploited [KEV], or CVSS ≥ 9.0 in widely deployed vendors & OSS).

今日收录

  • CVE-2026-57092 — 9.9 — Use after free in Windows VMSwitch allows an authorized attacker to elevate privileges over a network.
  • CVE-2026-59836 — 9.8 — A improper certificate validation vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.5, FortiClientEMS 7.4.0 through 7.4.1, FortiClientEMS 7.2 all versions may allow attacker to information disclosure via <insert…
  • CVE-2026-49172 — 9.8 — Heap-based buffer overflow in Windows FTP Service allows an unauthorized attacker to execute code over a network.
  • CVE-2026-49181 — 9.8 — Integer underflow (wrap or wraparound) in Windows DHCP Client allows an unauthorized attacker to elevate privileges over a network.
  • CVE-2026-50522 — 9.8 — Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network. [KEV]
  • CVE-2026-50694 — 9.8 — Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.
  • CVE-2026-58644 — 9.8 — Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network. [KEV]
  • CVE-2026-50447 — 9.8 — Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
  • CVE-2026-50487 — 9.8 — Use after free in Microsoft Windows DNS allows an unauthorized attacker to elevate privileges over a network.
  • CVE-2026-50518 — 9.8 — Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
  • CVE-2026-56159 — 9.8 — Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
  • CVE-2026-56188 — 9.8 — Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Server Network driver allows an unauthorized attacker to execute code over a network.
  • CVE-2026-56190 — 9.8 — Use of uninitialized resource in Windows RDP allows an unauthorized attacker to execute code over a network.
  • CVE-2026-57089 — 9.8 — Use after free in Windows SMB Server Network Transport Driver (srvnet.sys) allows an unauthorized attacker to execute code over a network.
  • CVE-2026-57090 — 9.8 — Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
  • CVE-2026-58594 — 9.8 — Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to execute code over a network.
  • CVE-2026-58617 — 9.8 — Improper access control in Microsoft 365 Copilot for iOS allows an unauthorized attacker to elevate privileges over a network.
  • CVE-2026-13001 — 9.8 — The Podlove Podcast Publisher plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'podlove_handle_cache_files' function in all versions up to, and including, 4.5.1. Thi…
  • CVE-2026-47429 — 9.8 — Vitest is a testing framework powered by Vite. Prior to 3.2.5 and 4.1.0, the Vitest UI/API server on Windows used isFileServingAllowed incorrectly for /vitest_attachment, allowing \?\..\ path traversal to read fil…
  • CVE-2026-53633 — 9.8 — Vitest is a testing framework powered by Vite. From 3.0.0 until 3.2.5, 4.1.8, and 5.0.0-beta.4, Vitest Browser Mode exposed a cdp() API that forwarded raw Chrome DevTools Protocol methods without being gated by allowWrit…
  • CVE-2026-38450 — 9.8 — An issue in Aetopia Digital Asset Management DAM v.1.0.0 allows a remote attacker to execute arbitrary code via the name and description parameter of the Add/Update Project function
  • CVE-2026-55008 — 9.6 — Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
  • CVE-2026-59891 — 9.6 — sigstore-js provides JavaScript libraries for interacting with Sigstore services. Prior to 0.7.1, getRegistryCredentials() reads credentials from the Docker config file and selects an entry by checking whether any config…
  • CVE-2026-50380 — 9.6 — Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.
  • CVE-2026-15773 — 9.6 — Use after free in Core in Google Chrome on Windows prior to 150.0.7871.125 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
  • CVE-2026-49798 — 9.3 — Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges locally.
  • CVE-2026-55040 — 9.1 — Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a security feature over a network. [KEV]
  • CVE-2026-52101 — 9.1 — An issue in andreimarcu linux-server v.1.0 through v.2.3.8 allows a remote attacker to obtain sensitive information via the function uploadRemote function in upload.go
  • CVE-2026-45363 — 9.1 — ruby-jwt is a Ruby implementation of the RFC 7519 OAuth JSON Web Token standard. Prior to 2.10.3 and 3.2.0, JWT.decode(token, '', true, algorithm: 'HS256') accepts an attacker-forged token because OpenSSL::HMAC.digest('S…
  • CVE-2026-46817 — 0.0 — Oracle E-Business Suite contains an improper privilege management vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise Oracle Payments. Successful attacks of this vulnerability… [KEV]
  • CVE-2023-4346 — 0.0 — KNX Association KNX Protocol Connection Authorization Option 1 contains an overly restrictive account lockout mechanism vulnerability that could allow an attacker to purge all devices without additional security options … [KEV]

Sources: NVD / CISA KEV. Auto-collected and generated by CaptainAI Labs AI agents.