Microsoft Windows: CVE-2026-83750: Windows Error Reporting Elevation of Privilege Vulnerability

Time-of-check time-of-use toctou race condition in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83747: Windows Error Reporting Information Disclosure Vulnerability

Out-of-bounds read in Windows Error Reporting allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-83916: Windows Error Reporting Remote Code Execution Vulnerability

Double free in Windows Error Reporting allows an authorized attacker to execute code locally...

Microsoft .NET: CVE-2026-96238: .NET Security Feature Bypass Vulnerability

Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network...

Microsoft .NET: CVE-2026-96234: .NET Information Disclosure Vulnerability

Origin validation error in .NET allows an unauthorized attacker to disclose information over a network...

Microsoft Windows: CVE-2026-83643: Windows Error Reporting Remote Code Execution Vulnerability

Stack-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-83689: Windows Error Reporting Elevation of Privilege Vulnerability

Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83669: Windows Error Reporting Elevation of Privilege Vulnerability

Use of uninitialized resource in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83658: Windows Error Reporting Information Disclosure Vulnerability

Improper access control in Windows Error Reporting allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-97815: Windows Error Reporting Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-70177: Microsoft Windows Search Component Elevation of Privilege Vulnerability

Numeric truncation error in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85800: Windows Error Reporting Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-97798: Windows Error Reporting Service Elevation of Privilege Vulnerability

Improper neutralization of argument delimiters in a command 'argument injection' in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

PT-2026-111159

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with access to GitLab Pages log data to obtain access tokens and other secrets, due to...

PT-2026-113505

Name of the Vulnerable Software and Affected Versions Legacy Update versions 1.12.0 through 1.13.1 Description An origin validation error exists in the IsPermitted method of the ActiveX control. When the hosting document's hostname is not on the permitted list, the system fails to set E...

Microsoft Windows: CVE-2026-85354: Windows Error Reporting Elevation of Privilege Vulnerability

Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83715: Windows Error Reporting Tampering Vulnerability

Missing authentication for critical function in Windows Error Reporting allows an authorized attacker to perform tampering locally...

ROS-20261013-73-0442

The vulnerability in the kernel-lt is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges...

CVE-2023-54407

Frappe 14.x before 14.45.0 contains an information disclosure vulnerability that allows users with error log access to view secrets stored in local variables captured in tracebacks. Attackers who can read error logs can extract plaintext secrets such as credentials or keys exposed in traceback...

CVE-2021-41647

CVE-2021-41647 CVE-2021-41647 SQL Injection in Online-Food-Ordering-Web-App The Online-Food-Ordering-Web-App is vulnerable to un-authenticated error and time-based blind SQL Injection attacks. The username parameter on the /login.php page does not sanitize the user input, an attacker is able to...