373678 matches found
CVE-2026-96956: Stack-based Buffer Overflow
Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network...
Microsoft SQL Server: CVE-2026-96956: SQL Server Elevation of Privilege Vulnerability
Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network...
PT-2026-112339
Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Server-side request forgery SSRF allows an authorized attacker to elevate privileges over a network. SSRF is a flaw where a server is tricked into making requests to an...
PT-2026-113247
Name of the Vulnerable Software and Affected Versions DNS Server affected versions not specified Description An out-of-bounds read allows an authorized attacker to disclose sensitive information over a network, which can subsequently affect the system. Recommendations At the moment, there is no...
CVE-2026-88081: Out-of-bounds Read
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...
PT-2026-112880
Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally...
Apache HTTP Server mod_vhost_alias() Code Execution
The vulnerability of the modvhostalias function in the Apache HTTP Server is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure or execute arbitrary code by sending a specially crafted HTTP...
PT-2026-112778
Name of the Vulnerable Software and Affected Versions Network Policy Server affected versions not specified Description A use after free issue exists in the Network Policy Server NPS, which allows an unauthorized attacker to execute arbitrary code over an adjacent network, potentially affecting t...
CVE-2026-85811: Use After Free
Use after free in Network Policy Server NPS allows an unauthorized attacker to execute code over an adjacent network...
Microsoft Windows: CVE-2026-85811: Network Policy Server (NPS) Remote Code Execution Vulnerability
Use after free in Network Policy Server NPS allows an unauthorized attacker to execute code over an adjacent network...
CVE-2026-102989: Improper Neutralization of Input During Web Page Generation
TanStack Router is a client-first, server-capable, fully type-safe router and full-stack framework for the web. From 1.143.12 until 1.169.39 for @tanstack/start-server-core, 1.168.60 for @tanstack/react-start, 1.168.57 for @tanstack/solid-start, and 1.168.56 for @tanstack/vue-start, an...
CVE-2026-70058: Out-of-bounds Write
Out-of-bounds write in Windows DHCP Server allows an unauthorized attacker to execute code over a network...
CVE-2026-87710: Concurrent Execution using Shared Resource with Improper Synchronization
Improper access control in Microsoft Local Security Authority Server lsasrv allows an authorized attacker to elevate privileges locally...
PT-2026-113448
Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description A stack-based buffer overflow allows an unauthorized remote attacker to execute arbitrary code over a network, which can affect the system. A stack-based buffer overflow occurs when a...
CVE-2026-107614
An integer underflow in WinCursorShapeUtils::trimTransparent in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to crash the server, and potentially read out-of-bounds memory, by causing a cursor shape with a width or height of zero to be processed on the DXGI...
UBUNTU-CVE-2026-107614
An integer underflow in WinCursorShapeUtils::trimTransparent in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to crash the server, and potentially read out-of-bounds memory, by causing a cursor shape with a width or height of zero to be processed on the DXGI...
PT-2026-113450
Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description A heap-based buffer overflow allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program writes more data to a heap memory buffer than i...
KB5126651: Windows 10 version 1809 / Windows Server 2019 Security Update (October 2026)
The remote Windows host is missing security update 5126651. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. CVE-2026-100202 - Heap-based buffer overflow in Network Poli...
KB5126868: Windows 10 Version 1607 / Windows Server 2016 Security Update (October 2026)
The remote Windows host is missing security update 5126868. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. CVE-2026-100202 - Heap-based buffer overflow in Network Poli...
Security Updates for Microsoft Office Online Server (October 2026)
The Microsoft Office Online Server or Office Web Apps installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...