62858 matches found
CVE-2026-68133
A flaw was found in the Linux kernel's ice driver. A local attacker, by triggering a Physical Function PF reset while the Precision Time Protocol PTP state is uninitialized, could cause an invalid state transition. This could lead to a kernel bug and a system crash, resulting in a Denial of Servi...
CVE-2026-68128
A flaw was found in the Linux kernel's ice driver. A malicious virtual function VF can provide an out-of-range 'ptype' value through the VIRTCHNL interface. This can lead to a write past the end of an allocated memory region, causing a kernel page fault and resulting in a Denial of Service DoS...
CVE-2026-73226
electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.186, electerm allows an authenticated WebSocket client to invoke unintended internal functions through client-controlled func values in upgrade-func in src/app/server/dispatch-center.js and...
CVE-2026-68224
A flaw was found in the Linux kernel's mali-c55 driver. This vulnerability occurs because the mediapadremotepadunique function's error return value an ERRPTR was not properly checked before being dereferenced in the enablestreams function. A local attacker could exploit this oversight, potentiall...
CVE-2026-73226 Electerm WebSocket `upgrade-func` and `fs` handlers allow arbitrary method/function invocation due to missing method-name allowlist
electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.186, electerm allows an authenticated WebSocket client to invoke unintended internal functions through client-controlled func values in upgrade-func in src/app/server/dispatch-center.js and...
CVE-2026-70307
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...
CVE-2026-48767 Google Sheets OAuth access token disclosure to guest members via getAccessToken
TypeBot is a chatbot builder tool. Versions prior to 3.17.0 allow a low-privilege guest member of a workspace to obtain a live Google Sheets OAuth access token for that workspace by calling the Google Sheets helper getAccessToken. The vulnerable path checks only whether the caller has read access...
EUVD-2026-56617
Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...
EUVD-2026-56604
Missing authentication for critical function in Windows RPC API allows an authorized attacker to elevate privileges locally...
CVE-2026-42976
Missing authentication for critical function in Windows RPC API allows an authorized attacker to elevate privileges locally...
CVE-2026-70307 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
...
EUVD-2026-56564
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...
CVE-2026-70307
CVE-2026-70307 describes a use-after-free flaw in the Windows Ancillary Function Driver for WinSock that can allow an authorized local attacker to elevate privileges. Affected component is the Windows network stack’s Ancillary Function Driver used by WinSock; root cause is a use-after-free bug in...
CVE-2026-70307 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
...
CVE-2026-68820 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
...
CVE-2026-68820
CVE-2026-68820 is a local privilege escalation caused by a use-after-free in the Windows Ancillary Function Driver for WinSock (afd.sys). The vulnerability allows an attacker with code execution on the target to elevate to SYSTEM, as described in NVD/NVD-derived entries and echoed by Krebs/Automo...
EUVD-2026-56468
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...
CVE-2026-68820 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
...
CVE-2026-61348
This CVE (CVE-2026-61348) is a local privilege escalation in the Windows Ancillary Function Driver for WinSock. The issue is a use-after-free in the driver component, enabling an authenticated attacker to elevate privileges on the affected system. The provided materials indicate a high-severity i...