CVE CyberSecurity Database News (Page 6)

Apr 17, 2026 Java

CVE-2026-40478 - Breaking Down The Thymeleaf SSTI Security Bypass Vulnerability (With Code & Exploit Details)

On April 2026, a new vulnerability was published for Thymeleaf, a popular Java template engine used by thousands of web applications: CVE-2026-40478. This issue allows

Apr 17, 2026 API Exploit

CVE-2026-5052 - Vault PKI ACME Validation Bypass – Local Network Danger Explained

A newly disclosed vulnerability, CVE-2026-5052, impacts HashiCorp Vault's Public Key Infrastructure (PKI) engine, particularly when using the Automatic Certificate Management Environment (ACME) protocol.

Apr 15, 2026 CSS Windows Exploit Google Chrome

CVE-2026-6298 - Heap Buffer Overflow in Skia (Google Chrome) – Critical InfoLeak Exploit Explained

Chrome has long been known for its emphasis on security, but occasionally, critical vulnerabilities still slip through the cracks. One such bug, CVE-2026-6298, was discovered

Apr 14, 2026 Windows Microsoft

CVE-2026-33825 - Elevate Privileges Using Access Control Flaws in Microsoft Defender

A newly identified security vulnerability — CVE-2026-33825 — has recently shaken the cybersecurity community. This issue reveals that Microsoft Defender, the default security tool in Windows, has

Apr 11, 2026

CVE-2026-34621 - Prototype Pollution in Adobe Acrobat Reader—Details, Exploit, and Mitigation

In June 2026, a severe vulnerability labeled CVE-2026-34621 was identified in several versions of Adobe Acrobat Reader, including 24.001.30356, 26.001.21367, and