34832 matches found
Windows Deployment Services Remote Code Execution Vulnerability
Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network...
Windows Management Services Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Management Services allows an authorized attacker to elevate privileges over a network...
Windows Deployment Services Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to execute code locally...
Windows Remote Desktop Services Information Disclosure Vulnerability
Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to disclose information locally...
Windows Deployment Services Remote Code Execution Vulnerability
Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network...
Remote Desktop Services Remote Code Execution Vulnerability
Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network...
Remote Desktop Services Remote Code Execution Vulnerability
Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network...
Windows Remote Desktop Services Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...
CVE-2026-86590
In Eclipse Che versions 7.79.0 through 7.121.0, the dashboard backend's POST /dashboard/api/data/resolver endpoint passes a caller-supplied URL directly to an outbound HTTP GET request with no host filtering. An authenticated user can exploit this server-side request forgery SSRF to read response...
PT-2026-87022
In Eclipse Che versions 7.79.0 through 7.121.0, the dashboard backend's POST /dashboard/api/data/resolver endpoint passes a caller-supplied URL directly to an outbound HTTP GET request with no host filtering. An authenticated user can exploit this server-side request forgery SSRF to read response...
PT-2026-87534
🚨 HIGH SEVERITY: CVE-2026-69514 CVSS 7.5 Heap buffer overflow in Windows Remote Desktop Services enables remote code execution by authenticated attackers. Patch immediately. CVE Vulnerability PatchNow ThreatIntel DFIR https://t.co/h112imW6bc...
CVE-2026-72957: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to execute code locally...
CVE-2026-86735: Server-Side Request Forgery (SSRF)
snipe-it versions before 8.7.0 contain a server-side request forgery vulnerability in the ExternalUrl validation rule that fails to detect IPv6 transition addresses encoding private IPv4 targets. Attackers with super-admin privileges can configure webhook URLs using NAT64, 6to4, or Teredo...
CVE-2026-73012: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Management Services allows an authorized attacker to elevate privileges over a network...
PT-2026-87921
Name of the Vulnerable Software and Affected Versions Windows Management Services affected versions not specified Description A heap-based buffer overflow occurs in Windows Management Services, which allows an authorized attacker to elevate privileges over a network. A heap-based buffer overflow ...
PT-2026-87618
Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Services affected versions not specified Description An out-of-bounds read occurs in Windows Remote Desktop Services, which allows an authorized attacker to disclose sensitive information locally. An out-of-bounds read i...
CVE-2026-69624: Incomplete List of Disallowed Inputs
Incomplete list of disallowed inputs in Active Directory Certificate Services AD CS allows an authorized attacker to perform tampering over a network...
CVE-2026-69395: Use of Externally-Controlled Format String
Use of externally-controlled format string in Active Directory Certificate Services AD CS allows an authorized attacker to disclose information over a network...