373719 matches found
CVE-2026-97838: Out-of-bounds Read
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
CVE-2026-67628: Out-of-bounds Read
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...
CVE-2026-70133: Allocation of Resources Without Limits or Throttling
Allocation of resources without limits or throttling in Windows SMB Server allows an unauthorized attacker to deny service over a network...
CVE-2026-97829: Out-of-bounds Read
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
CVE-2026-105009: Incorrect Default Permissions
Incorrect default permissions in Windows Server Update Service allows an authorized attacker to elevate privileges locally...
CVE-2026-97839: Out-of-bounds Read
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
CVE-2026-65674: Deserialization of Untrusted Data
Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-83665: Windows DHCP Server Denial of Service Vulnerability
Null pointer dereference in Windows DHCP Server allows an unauthorized attacker to deny service over a network...
PT-2026-112634
Name of the Vulnerable Software and Affected Versions DNS Server affected versions not specified Description An integer underflow wrap or wraparound occurs in the DNS Server, which allows an unauthorized remote attacker to execute arbitrary code over a network and affect the system. Recommendatio...
CVE-2026-109954: Concurrent Execution using Shared Resource with Improper Synchronization
Parse Server 5.4.0 before 8.6.96 and 9.0.0 before 9.10.2-alpha.5 shares transactional batch state across concurrent requests, letting any client's transactional batch request interfere with other clients' database writes. On PostgreSQL or MongoDB replica sets and sharded clusters, other clients'...
Microsoft Windows: CVE-2026-85810: Windows Telephony Server Elevation of Privilege Vulnerability
Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally...
PT-2026-111549
Name of the Vulnerable Software and Affected Versions Parse Server versions 5.4.0 through 8.6.95 Parse Server versions 9.0.0 through 9.10.2-alpha.4 Description Transactional batch state is shared across concurrent requests, allowing a transactional batch request from one client to interfere with...
PT-2026-111668
šØ CVE-2026-96297 Use of freed memory in the aggregation feature of MongoDB Server can cause the server to read data from a memory area after it has been released. When an internal aggregation stage is combined with a batch size of 0, the server may read from memory that is no longer in use. Becau...
CVE-2026-97843: Out-of-bounds Read
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
Microsoft Exchange: CVE-2026-87695: Microsoft Exchange Server Elevation of Privilege Vulnerability
Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally...
CVE-2026-88112: Untrusted Pointer Dereference
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network...
PT-2026-112842
Name of the Vulnerable Software and Affected Versions DNS Server affected versions not specified Description An untrusted pointer dereference allows an unauthorized remote attacker to execute arbitrary code over a network, potentially compromising the system. Recommendations At the moment, there ...
CVE-2026-70189: Heap-based Buffer Overflow
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally...