373684 matches found
PT-2026-113448
Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description A stack-based buffer overflow allows an unauthorized remote attacker to execute arbitrary code over a network, which can affect the system. A stack-based buffer overflow occurs when a...
UBUNTU-CVE-2026-107614
An integer underflow in WinCursorShapeUtils::trimTransparent in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to crash the server, and potentially read out-of-bounds memory, by causing a cursor shape with a width or height of zero to be processed on the DXGI...
PT-2026-113450
Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description A heap-based buffer overflow allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program writes more data to a heap memory buffer than i...
KB5126651: Windows 10 version 1809 / Windows Server 2019 Security Update (October 2026)
The remote Windows host is missing security update 5126651. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. CVE-2026-100202 - Heap-based buffer overflow in Network Poli...
KB5126868: Windows 10 Version 1607 / Windows Server 2016 Security Update (October 2026)
The remote Windows host is missing security update 5126868. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. CVE-2026-100202 - Heap-based buffer overflow in Network Poli...
Security Updates for Microsoft Office Online Server (October 2026)
The Microsoft Office Online Server or Office Web Apps installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...
PT-2026-111976
Name of the Vulnerable Software and Affected Versions Windows Server Update Service affected versions not specified Description Incorrect default permissions in the service allow an authorized attacker to elevate privileges locally, which enables them to affect the system. Recommendations At the...
PT-2026-113270
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
Microsoft Windows: CVE-2026-83771: Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability
Use after free in Windows Camera Frame Server Monitor allows an unauthorized attacker to elevate privileges over an adjacent network...
CVE-2026-110131: Missing Authorization
ThriveX-Server through 4.0 contains a missing authorization vulnerability in the GET /api/article and /api/article/id endpoints that allows unauthenticated attackers to read unpublished draft and soft-deleted articles. Attackers can request sequential article ids or supply isDraft=true or...
CVE-2026-70244: Out-of-bounds Read
Out-of-bounds read in DNS Server allows an unauthorized attacker to disclose information over a network...
python313-jupyter-server-2.20.0-1.3 on GA media (moderate)
python313-jupyter-server-2.20.0-1.3 on GA media Announcement ID: openSUSE-SU-2026:12012-1 Rating: moderate Cross-References: CVE-2020-26232 CVE-2023-39968 CVE-2023-40170 CVE-2023-49080 CVSS scores: CVE-2023-39968 SUSE : 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N CVE-2023-40170 SUSE : 4.6...
CVE-2026-96113: Heap-based Buffer Overflow
Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network...
CVE-2026-85806: Integer Underflow (Wrap or Wraparound)
Integer underflow wrap or wraparound in Network Policy Server NPS allows an unauthorized attacker to execute code over a network...
PT-2026-111131
Name of the Vulnerable Software and Affected Versions SAP NetWeaver Application Server ABAP affected versions not specified Description Applications based on SAP GUI for HTML do not sufficiently sanitize user-supplied content in certain functionality. This allows an authenticated attacker to send...
CVE-2026-97840: Out-of-bounds Read
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
CVE-2026-97841: Out-of-bounds Read
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
CVE-2026-97837: Out-of-bounds Read
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...