Microsoft Windows Cloud Files Mini Filter Driver CldiStreamCompleteRequest use-after-free vulnerability

Summary A use-after-free vulnerability exists in the CldiStreamCompleteRequest functionality of Windows Cloud Files Mini Filter Driver versions: 10.0.26100.8457 WinBuild.160101.0800. A specially crafted sequence of Cloud Filter API calls can lead to privilege escalation. An attacker can execute a...

Microsoft Windows Cloud Files Mini Filter Driver CldiStreamPrepareRequestForMoreProcessing Type Confusion vulnerability

Summary A type confusion vulnerability exists in the CldiStreamPrepareRequestForMoreProcessing functionality of Windows Cloud Files Mini Filter Driver versions: 10.0.26100.8457 WinBuild.160101.0800 and 10.0.26100.8655 WinBuild.160101.0800. A specially crafted sequence of Cloud Filter API calls ca...

Exploit for CVE-2026-102428

CVE-2026-102428 — OrdaSoft OS CCK comoscck unauthenticated...

Exploit for CVE-2026-108592

CVE-2026-108592 — Environment Variable Exposure PoC A proof o...

CVE-2026-98291

A flaw was found in the Linux kernel's Intel Bluetooth PCIe driver btintelpcie. An off-by-one bounds checking error during receive queue handling allows an index to reference one element past the allocated array boundaries. A local user could exploit this flaw to cause a Denial of Service DoS...

CVE-2026-104841

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2026-98290

A flaw was found in the Linux kernel's Bluetooth RFCOMM Radio Frequency Communication subsystem. A local user can cause a Denial of Service DoS by triggering a kernel deadlock that hangs the system. This issue occurs during the cleanup of listening sockets, where child socket locks and internal...

CVE-2026-98288

A flaw was found in the Linux kernel's stmmac network driver. A local attacker could exploit this vulnerability to cause a Denial of Service DoS by transmitting specially crafted IPv6 packets with large header options. This issue occurs because the driver stores TCP Segmentation Offload TSO...

CVE-2026-98286

A flaw was found in the Linux kernel's dropmonitor subsystem. A local user can trigger this issue during monitor teardown under memory pressure, where a race condition allows a timer to be re-armed after it has been cancelled. When the module is subsequently unloaded, the active timer executes...

CVE-2026-98285

A flaw was found in the Linux kernel's network bridge component. When removing Virtual Local Area Network VLAN configurations, errors returned by hardware offload devices prevent the kernel from completing software cleanup. A local user could exploit this vulnerability to trigger memory leaks or ...

CVE-2026-98284

A flaw was found in the Linux kernel's Netlink network communication subsystem. A timing issue race condition during socket group memory reallocation allows memory to be freed while concurrent read operations are still accessing it. A local user could exploit this flaw to cause a Denial of Servic...

CVE-2026-98283

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine subsystem for PowerPC. A race condition occurs during memory management emulation when nested guest virtual machine structures are freed while still in use by another virtual processor. A malicious guest virtual machine can...

CVE-2026-108680

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to send template notifications by calling POST /sys/api/sendTemplateAnnouncement. Low-privileged attackers can supply forged sender, recipients, title, and template parameters to deliver...

CVE-2026-108679

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the sendBusAnnouncement handler of SystemApiController that allows any authenticated user to send announcements without the required permissions. Low-privileged attackers can POST crafted bodies to...

CVE-2026-108677

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in GET /sys/api/getUserByName that allows low-privileged authenticated users to retrieve any user's stored password value. Attackers can decrypt the AES-CBC protected response using the hard-coded key exposed by...

CVE-2026-108678

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the queryUserRoles handler of SystemApiController that lets authenticated users read any user's role codes. Low-privileged attackers can send GET requests to /sys/api/queryUserRoles with an arbitrary username to enumerate...

CVE-2026-108673

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragPromptsController exportXls handler that allows any authenticated user to export all AI prompts. Low-privileged attackers can request /airag/prompts/exportXls to download every user's prompts, including prompt...

CVE-2026-108674

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the OpenApiController queryById handler that allows low-privileged authenticated users to read OpenAPI definitions without openapi permissions. Attackers can request GET /openapi/queryById with an entry id to obtain interna...

CVE-2026-108672

JeecgBoot through 3.9.5 contains an authorization bypass vulnerability in the getVideoRecords handler of VideoGenerationController that allows authenticated users to read other users' records via the userId parameter. Low-privileged attackers can supply another user id to retrieve their AI video...

CVE-2026-108675

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysAnnouncementController editIzTop handler that allows low-privileged authenticated users to change announcement pin status. Attackers can send POST or PUT requests with any announcement id to pin or unpin system notic...