New vulnerabilities – clearly explained

Microsoft Edge (Chromium-based): Heap-based buffer overflow enables code execution

A heap-based buffer overflow (CWE-122) in Microsoft Edge (Chromium-based) allows a remote attacker without privileges to execute code. The victim must take an action, such as visiting a malicious or compromised web page. The CVSS base score is 8.8 (High), but the fixed build is not yet confirmed.

Microsoft · Microsoft Edge (Chromium-based)

Microsoft Edge (Chromium-based): Heap-based buffer overflow allows code execution

A heap-based buffer overflow (CWE-122) in Microsoft Edge (Chromium-based) allows an unauthenticated remote attacker to execute code. The CVSS base score is 8.8 (High). Exploitation requires that a user is tricked into interacting, most likely by opening a malicious web page. CISA SSVC lists exploitation as none and automatable as no.

Microsoft · Edge (Chromium-based)

Microsoft Edge (Chromium-based): Security feature bypass via incomplete input filter

Microsoft Edge (Chromium-based) contains a security feature bypass caused by an incomplete list of disallowed inputs (CWE-184). An unauthenticated remote attacker can bypass a browser security feature over the network. Exploitation requires that a user visits a malicious or crafted web page. Microsoft rates the impact as High for confidentiality, integrity and availability.

Microsoft · Edge (Chromium-based)

Microsoft Edge: Use-after-free vulnerability allows remote code execution

A use-after-free vulnerability (CWE-416) in Microsoft Edge allows an unauthorized attacker to execute code over a network. The description also refers to Edge for iOS, while the affected products are listed as Chromium-based Edge. The CNA rates the issue at CVSS 3.1 8.8 with high impact on confidentiality, integrity and availability, and exploitation requires a user to visit a malicious page or perform a similar action but no privileges. VulDB scores the issue lower (6.3), so the severity assessment is inconsistent across sources.

Microsoft · Edge

Microsoft Edge (Chromium-based): Type confusion leads to information disclosure

A type confusion weakness (CWE-843) in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network. User interaction is required, so the victim must open crafted web content, for example via a link in an email or message. Only confidentiality is affected, with high impact, and the CVSS scope is changed, so the effect may reach beyond the browser.

Microsoft · Edge (Chromium-based)

IBM Langflow OSS: Authentication bypass due to improper authentication

IBM Langflow OSS 1.0.0 through 1.12.8, an open-source tool for building AI agents and workflows, contains an improper authentication flaw (CWE-287). According to IBM, a remote attacker without credentials can bypass security restrictions. IBM groups this issue with other Langflow vulnerabilities, including remote code execution, and a public Metasploit module is reported.

IBM · Langflow OSS

Research and translation in progress – available shortly.

Szafir: XML External Entity (XXE) injection

Szafir and Szafir Weryfikująca, Polish electronic signature applications from Krajowa Izba Rozliczeniowa, process external entities in XML files. When a user signs or verifies a crafted XML file with an external DTD reference, an attacker can read arbitrary files from the victim's system. Exploitation requires the victim to open the file, for example one received by email or download, and no network service is exposed.

Krajowa Izba Rozliczeniowa · Szafir

IBM Langflow OSS: Denial of service due to unlimited resource allocation

IBM Langflow OSS versions 1.0.0 through 1.12.4 allow a remote attacker with a valid user account to cause a denial of service. The cause is resource allocation without limits or throttling (CWE-770). An attacker can make the service unavailable by consuming resources, but cannot read or change data according to the CVSS vector. The vulnerable component and trigger are not described by IBM.

IBM · Langflow OSS

Progress WS_FTP Server: Code injection in Manager web console

A flaw in the Manager web console of WS_FTP Server on Windows allows injection of directives into dynamically evaluated code (CWE-94/CWE-95). An authenticated Manager administrator can execute arbitrary commands with the privileges of the WS_FTP Server IIS worker process. The attack requires valid Manager administrator credentials and network access to the console. The CVSS 3.1 base score is 6.6 (MEDIUM).

Progress Software · WS_FTP Server

Research and translation in progress – available shortly.

Research and translation in progress – available shortly.

Progress WS_FTP Server: Denial of service in SSH service

WS_FTP Server on Windows, versions prior to 2024.0.7 and 2025.0.4, contains a flaw in the shared SSH service. A remote attacker who knows a valid account's enrolled SSH public key can terminate the SSH service. The impact is limited to availability; no data exposure or code execution is described.

Progress Software · WS_FTP Server

Progress WS_FTP Server: OS command injection on Windows

An OS command injection vulnerability in Progress WS_FTP Server on Windows allows arbitrary command execution under certain configurations. The CVSS vector is network-reachable with low attack complexity, but it requires low privileges, so an attacker needs a valid account. The flaw is fixed in the same release as the more severe, unauthenticated CVE-2026-84295, so patching the server addresses both.

Progress Software · WS_FTP Server

Progress WS_FTP Server: Improper access control in Web Admin console

The Web Admin console of Progress WS_FTP Server on Windows, in versions before 2024.0.7 and 2025.0.4, contains an improper access control flaw. According to the CVE record, administrative functionality could be exposed to remote authentication attempts. The CVSS vector requires no privileges and no user interaction, but attack complexity is rated high. The exact trigger and reachable functions are not publicly described.

Progress Software · WS_FTP Server

Progress WS_FTP Server: Path traversal allows access outside delegated scope

A path traversal flaw in Progress WS_FTP Server on Windows allows a delegated Host Administrator to reach locations outside their authorized scope. The CNA states this could potentially enable remote code execution. The attacker needs a valid Host Administrator account, so the flaw is not exploitable without prior authentication.

Progress Software · WS_FTP Server

Progress WS_FTP Server: OS command injection allows command execution

WS_FTP Server on Windows contains an OS command injection vulnerability in versions before 2024.0.7 and 2025.0.4. Under certain configurations, an attacker can execute arbitrary commands with elevated privileges. The CNA scores the issue as critical (CVSS 9.0); the vector indicates network access without privileges or user interaction, but with high complexity.

Progress Software · WS_FTP Server

Progress WS_FTP Server: Path traversal by delegated Host Administrator

A path traversal vulnerability (CWE-22) in Progress WS_FTP Server on Windows allows a delegated Host Administrator to access or modify files outside their authorized scope. The attacker needs an existing Host Administrator delegation, which the CVSS vector rates as high privileges required (PR:H). Successful exploitation can affect the confidentiality, integrity and availability of files on the server.

Progress Software · WS_FTP Server

Progress Software WS_FTP Server: Privilege escalation via missing authorization

WS_FTP Server on Windows contains a missing authorization check in its administrative interface. A delegated Host Administrator can exceed their authorized scope, which may allow arbitrary command execution with elevated privileges and full compromise of the underlying server. The attacker needs a valid account with the delegated Host Administrator role, so the risk is mainly from compromised admin accounts, malicious insiders or chaining with another flaw.

Progress Software · WS_FTP Server

Research and translation in progress – available shortly.

Progress WS_FTP Server: Password disclosure in logs enables admin privilege escalation

WS_FTP Server on Windows before 2024.0.7 and 2025.0.4 may write a user's password in clear text to logs that another administrator can read. That administrator could use the password to gain broader administrative access to the server. Exploitation requires network access and existing high privileges, and the attack complexity is rated high.

Progress Software · WS_FTP Server

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Research and translation in progress – available shortly.

Microsoft Edge (Chromium-based) Spoofing Vulnerability

Research and translation in progress – available shortly.

Microsoft Edge (Chromium-based): Privilege escalation via integer overflow

Microsoft Edge (Chromium-based) contains an integer overflow or wraparound (CWE-190) that allows an unauthorized attacker to elevate privileges over a network. According to the CNA record, the CVSS vector requires user interaction (UI:R), so exploitation most likely requires a user to visit a malicious or compromised web page. The CVSS score is 8.8 (CNA) but VulDB rates it 6.3 (Medium), and public technical details are limited.

Microsoft · Edge (Chromium-based)

Microsoft Edge: Use-after-free allows elevation of privilege

Microsoft Edge (Chromium-based) contains a use-after-free memory flaw (CWE-416) that allows an authorized attacker to elevate privileges over the network. The CVSS vector rates the impact as high for integrity and availability, with no confidentiality impact. Exploitation requires an attacker who already holds low privileges (PR:L) and no user interaction is required according to the CVSS vector.

Microsoft · Edge (Chromium-based)