312841 matches found
CVE-2026-69763
Use after free in Windows Storage allows an authorized attacker to elevate privileges locally...
CVE-2026-69721
Out-of-bounds read in Windows iSCSI allows an authorized attacker to disclose information locally...
CVE-2026-69736
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Credential Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-69718
Improper neutralization of special elements used in a command 'command injection' in Windows Update allows an authorized attacker to elevate privileges locally...
CVE-2026-69705
Out-of-bounds write in Windows iSCSI allows an unauthorized attacker to execute code over a network...
CVE-2026-69650
Improper verification of cryptographic signature in Windows Key Distribution Center allows an authorized attacker to elevate privileges locally...
CVE-2026-69644
Exposure of sensitive system information to an unauthorized control sphere in Windows iSCSI allows an authorized attacker to disclose information locally...
CVE-2026-69633
Heap-based buffer overflow in Windows Update allows an authorized attacker to elevate privileges locally...
CVE-2026-69635
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges with a physical attack...
CVE-2026-69506
Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally...
CVE-2026-49785
Improper resource shutdown or release in Windows UEFI allows an authorized attacker to bypass a security feature locally...
DEBIAN-CVE-2026-110237
Vifm 0.8.1-beta through 0.14.4 reuses a pre-existing IPC FIFO in the shared temporary directory without checking ownership, allowing local users to execute commands as another user. Attackers can pre-create a world-writable vifm-ipc-vifm FIFO and write IPC packets with -c and ! shell commands tha...
CVE-2026-110234
Elio through 1.13.0 contains an insecure temporary file vulnerability that allows local users to overwrite another user's files by pre-creating symbolic links at predictable capture paths. Attackers who know the victim's Elio process ID can plant a symlink so previewing media, fonts or archives...
CVE-2026-110237
Vifm 0.8.1-beta through 0.14.4 reuses a pre-existing IPC FIFO in the shared temporary directory without checking ownership, allowing local users to execute commands as another user. Attackers can pre-create a world-writable vifm-ipc-vifm FIFO and write IPC packets with -c and ! shell commands tha...
CVE-2026-110036
A flaw was found in device-mapper-persistent-data. A local attacker can cause a Denial of Service DoS by inducing a user or system tool to process crafted device metadata containing an excessively large block index. An arithmetic error in the synchronous block reading logic causes the application...
CVE-2026-108468
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-108462
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally...
CVE-2026-108466
Out-of-bounds read in Windows Kernel allows an unauthorized attacker to deny service over a network...