CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Apache Tomcat EncryptInterceptor Bypass and Sensitive Data Exposure Vulnerability (CVE-2026-34486)
[Affected Scope] Apache Tomcat versions 11.0.20, 10.1.53, and 9.0.116 utilizing clustering with EncryptInterceptor enabled
[Impact] Incomplete fix for CVE-2026-29146 allows attackers to bypass the EncryptInterceptor, leading to the transmission of sensitive session data in plaintext across the network
[Mitigation] Immediately upgrade to patched Apache Tomcat versions 11.0.21, 10.1.54, or 9.0.117
Microsoft Office Word Security Feature Bypass Vulnerability (CVE-2026-21514) Analysis and Mitigation Guide
[Affected Scope] Microsoft Office Word and associated Office suites
[Impact] Unauthorized local attackers can bypass critical security controls, such as Protected View or macro execution blocks, to execute arbitrary code
[Mitigation] Apply the official Microsoft security updates immediately and restrict execution of untrusted document files (.docx, .docm)
Microsoft Office Security Feature Bypass Vulnerability (CVE-2026-21509) Analysis and Mitigation Guide
[Affected Scope] All Microsoft Office suites and local environments processing untrusted document inputs.
[Impact] Attackers can bypass local security decisions, leading to unauthorized macro execution and arbitrary code execution.
[Mitigation] Apply official Microsoft security patches immediately and enforce strict macro blocking policies for untrusted files.