373728 matches found
CVE-2026-70571: Stack-based Buffer Overflow
Stack-based buffer overflow in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network...
CVE-2026-107612
Incorrect permission assignment in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to read or overwrite the inter-process communication handles used between the TightVNC service and its desktop server process. The named shared memory segment in the Global...
CVE-2026-83722: Use After Free
Use after free in Microsoft Local Security Authority Server lsasrv allows an authorized attacker to elevate privileges locally...
PT-2026-111131
Name of the Vulnerable Software and Affected Versions SAP NetWeaver Application Server ABAP affected versions not specified Description Applications based on SAP GUI for HTML do not sufficiently sanitize user-supplied content in certain functionality. This allows an authenticated attacker to send...
CVE-2026-97840: Out-of-bounds Read
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
CVE-2026-97841: Out-of-bounds Read
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
CVE-2026-97837: Out-of-bounds Read
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
CVE-2026-97842: Out-of-bounds Read
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
CVE-2026-97824: Out-of-bounds Read
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
CVE-2026-107614
An integer underflow in WinCursorShapeUtils::trimTransparent in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to crash the server, and potentially read out-of-bounds memory, by causing a cursor shape with a width or height of zero to be processed on the DXGI...
Microsoft Windows: CVE-2026-83771: Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability
Use after free in Windows Camera Frame Server Monitor allows an unauthorized attacker to elevate privileges over an adjacent network...
CVE-2026-110131: Missing Authorization
ThriveX-Server through 4.0 contains a missing authorization vulnerability in the GET /api/article and /api/article/id endpoints that allows unauthenticated attackers to read unpublished draft and soft-deleted articles. Attackers can request sequential article ids or supply isDraft=true or...
CVE-2026-110100: Missing Authorization
Jorani before 1.0.4 contains a missing authorization vulnerability in Contracts::import that allows any authenticated user to import days off into any contract from an arbitrary URL. Attackers can submit a contract id and URL via POST to overwrite non-working-day calendars and abuse getheaders an...
CVE-2026-97819: Out-of-bounds Read
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
CVE-2026-87710: Concurrent Execution using Shared Resource with Improper Synchronization
Improper access control in Microsoft Local Security Authority Server lsasrv allows an authorized attacker to elevate privileges locally...
CVE-2026-97823: Out-of-bounds Read
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
CVE-2026-69830: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows DHCP Server allows an unauthorized attacker to execute code over a network...
PT-2026-113255
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
Microsoft Windows: CVE-2026-70244: Windows DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an unauthorized attacker to disclose information over a network...