Skip to content
OpenAdvisories

Archive

20 May 2026

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-5950 Public exploit

    Unbounded resend loop in BIND 9 resolver

    An unbounded resend loop vulnerability exists in the BIND 9 resolver state machine during bad-server handling, enabling a remote unauthenticated attacker to cause severe resource exhaustion by sending queries that trigger specific retry conditions. This issue…

  • Medium 4.0
    CVE-2026-45498 Exploited Public exploit EPSS 63%

    Microsoft Defender Denial of Service Vulnerability

    Microsoft Defender Denial of Service Vulnerability

    KEV May 20, 2026
  • Medium 6.1
    CVE-2026-30691 Public exploit

    @cyntler/react-doc-viewer's TXTRenderer fails to sanitize file content and explicitly casts raw data as a ReactNode

    Cross-Site Scripting (XSS) vulnerability in @cyntler/react-doc-viewer v1.17.1 allows remote attackers to execute arbitrary JavaScript via a crafted .txt file. The TXTRenderer component fails to sanitize file content and explicitly casts raw data as a ReactNode