373357 matches found
PT-2026-113264
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
PT-2026-111722
ThriveX-Server through 4.0 contains a missing authorization vulnerability in the GET /api/article and /api/article/id endpoints that allows unauthenticated attackers to read unpublished draft and soft-deleted articles. Attackers can request sequential article ids or supply isDraft=true or...
PT-2026-112877
Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally...
PT-2026-113269
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
PT-2026-113132
Missing authorization in DNS Server allows an authorized attacker to perform tampering locally...
PT-2026-111844
Kubeflow Model Registry through 0.3.17 contains a server-side request forgery vulnerability that allows namespace users to steal the controller ServiceAccount token via the modelregistry.kubeflow.org/url annotation. Attackers can create an InferenceService pointing the annotation at their server,...
CVE-2026-107615
An uncontrolled search path element vulnerability in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to execute arbitrary code with SYSTEM privileges. DynamicLibrary::init and ThemeLib load screenhooks32.dll / screenhooks64.dll with LoadLibrary using a bare fi...
PT-2026-112940
Name of the Vulnerable Software and Affected Versions Windows SMB Server affected versions not specified Description A use-after-free condition in the Windows SMB Server allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an...
PT-2026-112913
Name of the Vulnerable Software and Affected Versions Windows DCOM Server affected versions not specified Description A race condition occurs in the Windows DCOM Server due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate privileges locally. ...
PT-2026-113368
Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server - Liberty versions 17.0.0.3 through 26.0.0.9 Description A privilege escalation issue exists when the restConnector-2.0 feature is enabled. Recommendations At the moment, there is no information about a newer...
PT-2026-111402
Name of the Vulnerable Software and Affected Versions RUGGEDCOM CROSSBOW versions prior to V6.0 Description Insufficient server-side authorization checks for requests to schedule special operations allow an authenticated attacker with minimal privileges to schedule unauthorized operations on the...
PT-2026-112773
Name of the Vulnerable Software and Affected Versions Network Policy Server affected versions not specified Description An integer underflow wrap or wraparound occurs in the Network Policy Server NPS, which allows an unauthorized attacker to execute arbitrary code over a network and affect the...
CVE-2026-70087: Incorrect Authorization
Incorrect authorization in DNS Server allows an authorized attacker to bypass a security feature locally...
CVE-2026-70244: Out-of-bounds Read
Out-of-bounds read in DNS Server allows an unauthorized attacker to disclose information over a network...
Microsoft Windows: CVE-2026-69795: Windows Clipboard Server Elevation of Privilege Vulnerability
Null pointer dereference in Windows Clipboard Server allows an authorized attacker to elevate privileges locally...
Microsoft Exchange: CVE-2026-70279: Microsoft Exchange Server Spoofing Vulnerability
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-83787: Authentication Bypass Using an Alternate Path or Channel
Insufficient verification of data authenticity in Windows DHCP Server allows an authorized attacker to bypass a security feature locally...
CVE-2026-85810: Use After Free
Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally...