373678 matches found
CVE-2026-83945: Heap-based Buffer Overflow
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...
CVE-2026-70066: Use After Free
Use after free in Windows DHCP Server allows an authorized attacker to elevate privileges locally...
CVE-2026-97831: Out-of-bounds Read
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
CVE-2026-97838: Out-of-bounds Read
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
CVE-2026-67628: Out-of-bounds Read
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...
CVE-2026-70133: Allocation of Resources Without Limits or Throttling
Allocation of resources without limits or throttling in Windows SMB Server allows an unauthorized attacker to deny service over a network...
CVE-2026-97829: Out-of-bounds Read
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
CVE-2026-105009: Incorrect Default Permissions
Incorrect default permissions in Windows Server Update Service allows an authorized attacker to elevate privileges locally...
CVE-2026-97839: Out-of-bounds Read
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
CVE-2026-65674: Deserialization of Untrusted Data
Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-83665: Windows DHCP Server Denial of Service Vulnerability
Null pointer dereference in Windows DHCP Server allows an unauthorized attacker to deny service over a network...
PT-2026-112634
Name of the Vulnerable Software and Affected Versions DNS Server affected versions not specified Description An integer underflow wrap or wraparound occurs in the DNS Server, which allows an unauthorized remote attacker to execute arbitrary code over a network and affect the system. Recommendatio...
CVE-2026-109954: Concurrent Execution using Shared Resource with Improper Synchronization
Parse Server 5.4.0 before 8.6.96 and 9.0.0 before 9.10.2-alpha.5 shares transactional batch state across concurrent requests, letting any client's transactional batch request interfere with other clients' database writes. On PostgreSQL or MongoDB replica sets and sharded clusters, other clients'...
Microsoft Windows: CVE-2026-85810: Windows Telephony Server Elevation of Privilege Vulnerability
Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally...
PT-2026-111549
Name of the Vulnerable Software and Affected Versions Parse Server versions 5.4.0 through 8.6.95 Parse Server versions 9.0.0 through 9.10.2-alpha.4 Description Transactional batch state is shared across concurrent requests, allowing a transactional batch request from one client to interfere with...
PT-2026-111668
šØ CVE-2026-96297 Use of freed memory in the aggregation feature of MongoDB Server can cause the server to read data from a memory area after it has been released. When an internal aggregation stage is combined with a batch size of 0, the server may read from memory that is no longer in use. Becau...
CVE-2026-85371: Use After Free
Use after free in Network Policy Server NPS allows an unauthorized attacker to execute code over a network...
CVE-2026-97843: Out-of-bounds Read
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
PT-2026-113268
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
Important: xorg-x11-server security update
X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. Security Fixes: xorg-x11-server: xorg-x11-server: Privilege escalation via crafted RandR provider property requests...