News & Sicurezza

Adobe Experience Manager Forms JEE versions LTS SP1, 6.5.24.0 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access or control over the victim's account or session. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page. Scope is changed.

Adobe Experience Manager Forms JEE versions LTS SP1, 6.5.24.0 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field, potentially gaining elevated access or control over the victim's account or session. Scope is changed.

CVE ID :CVE-2026-28237 Published : June 9, 2026, 6:16 p.m. | 20 minutes ago Description :Unrestricted resource allocation in AMD uProf may be exploitable to consume excessive system resources, potentially leading to a loss of availability. Severity: 6.8 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

The June 2026 Security Update Review CVE Title Severity CVSS Public Exploited XI Type CVE-2026-41091 Microsoft Defender Elevation of Privilege Vulnerability Important 7.8 Yes Yes 0 EoP CVE-2026-49160 HTTP.sys Denial of Service Vulnerabil ... Read more Published Date: Jun 09, 2026 (1 day, 17 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-8863 CVE-2026-50508 CVE-2026-50507 CVE-2026-49161 CVE-2026-49160 CVE-2026-48583 CVE-2026-48578 CVE-2026-48576 CVE-2026-48575 CVE-2026-48574 CVE-2026-48573 CVE-2026-48570 CVE-2026-48569 CVE-2026-48568 CVE-2026-48566 CVE-2026-48565 CVE-2026-48563 CVE-2026-48562 CVE-2026-48560 CVE-2026-47656 CVE-2026-47654 CVE-2026-47653 CVE-2026-47652 CVE-2026-47648 CVE-2026-47643 CVE-2026-47641 CVE-2026-47640 CVE-2026-47639 CVE-2026-47638 CVE-2026-47637 CVE-2026-47636 CVE-2026-47635 CVE-2026-47634 CVE-2026-47631 CVE-2026-47298 CVE-2026-47293 CVE-2026-47292 CVE-2026-47291 CVE-2026-47289 CVE-2026-47288 CVE-2026-47287 CVE-2026-47284 CVE-2026-47281 CVE-2026-45658 CVE-2026-45657 CVE-2026-45656 CVE-2026-45655 CVE-2026-45654 CVE-2026-45653 CVE-2026-45650 CVE-2026-45649 CVE-2026-45648 CVE-2026-45647 CVE-2026-45645 CVE-2026-45644 CVE-2026-45643 CVE-2026-45642 CVE-2026-45641 CVE-2026-45640 CVE-2026-45639 CVE-2026-45638 CVE-2026-45637 CVE-2026-45636 CVE-2026-45635 CVE-2026-45634 CVE-2026-45608 CVE-2026-45607 CVE-2026-45606 CVE-2026-45605 CVE-2026-45604 CVE-2026-45603 CVE-2026-45602 CVE-2026-45601 CVE-2026-45600 CVE-2026-45599 CVE-2026-45598 CVE-2026-45597 CVE-2026-45596 CVE-2026-45595 CVE-2026-45594 CVE-2026-45593 CVE-2026-45592 CVE-2026-45591 CVE-2026-45588 CVE-2026-45586 CVE-2026-45583 CVE-2026-45504 CVE-2026-45503 CVE-2026-45502 CVE-2026-45501 CVE-2026-45500 CVE-2026-45491 CVE-2026-45490 CVE-2026-45487 CVE-2026-45486 CVE-2026-45485 CVE-2026-45484 CVE-2026-45483 CVE-2026-45482 CVE-2026-45481 CVE-2026-45479 CVE-2026-45476 CVE-2026-45475 CVE-2026-45474 CVE-2026-45472 CVE-2026-45471 CVE-2026-45469 CVE-2026-45468 CVE-2026-45467 CVE-2026...

External control of file name or path in Azure Stack Edge allows an unauthorized attacker to execute code over a network.

Integer overflow or wraparound in Windows HTTP.sys allows an unauthorized attacker to execute code over a network.

Improper input validation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network.

Use after free in Windows Kernel allows an unauthorized attacker to execute code over a network.

No cwe for this issue in Windows DHCP Server allows an unauthorized attacker to perform tampering over a network.

Stack-based buffer overflow in Windows DHCP Client allows an unauthorized attacker to execute code over a network.

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

Improper authentication in Windows Cryptographic Services allows an unauthorized attacker to elevate privileges locally.