313360 matches found
Microsoft Windows: CVE-2026-83655: Network Policy Server (NPS) Denial of Service Vulnerability
Out-of-bounds read in Network Policy Server NPS allows an unauthorized attacker to deny service over a network...
Microsoft Windows: CVE-2026-70280: Windows Hello Security Feature Bypass Vulnerability
Incorrect authorization in Windows Hello allows an authorized attacker to bypass a security feature locally...
CVE-2026-102188: Untrusted Pointer Dereference
Untrusted pointer dereference in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack...
CVE-2026-96927: Out-of-bounds Read
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally...
CVE-2026-96300: Allocation of Resources Without Limits or Throttling
Uncontrolled resource consumption in RPC Endpoint Mapper Service allows an unauthorized attacker to deny service over a network...
CVE-2026-88126: Untrusted Pointer Dereference
Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally...
CVE-2026-85906: Use After Free
Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally...
CVE-2026-83899: Concurrent Execution using Shared Resource with Improper Synchronization
Improper privilege management in Windows Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-83788: Buffer Over-read
Buffer over-read in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack...
CVE-2026-83566: Use After Free
Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally...
CVE-2026-85945: Use After Free
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-85821: Out-of-bounds Read
Out-of-bounds read in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to disclose information locally...
CVE-2026-83922: Use After Free
Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally...
CVE-2026-83864: Authentication Bypass by Spoofing
Improper access control in Windows NTFS allows an authorized attacker to disclose information locally...
CVE-2026-69969: Improper Link Resolution Before File Access
Improper link resolution before file access 'link following' in Windows AppX Deployment Service allows an authorized attacker to disclose information locally...
PT-2026-111273
A vulnerability was detected in Tiiny-AI PowerInfer up to 8bd56d69906c9d2dba4d3bf6899763401e01a9a4. Affected is the function create striped mat to gpu of the file smallthinker/ggml/src/ggml-cuda/ggml-cuda.cu of the component FFN GPU-split Loader. The manipulation results in out-of-bounds read. Th...
PT-2026-111274
A flaw has been found in PaddlePaddle PaddleX up to 3.7.2. Affected by this vulnerability is the function NormalizeImage. init of the file paddlex/inference/models/text detection/processors.py of the component Preprocessor. This manipulation of the argument scale causes code injection. It is...
CVE-2026-69721: Out-of-bounds Read
Out-of-bounds read in Windows iSCSI allows an authorized attacker to disclose information locally...
PT-2026-111209
Name of the Vulnerable Software and Affected Versions fail2ban versions 0.10.5 through 1.1.1 Description The sshd filter located at 'config/filter.d/sshd.conf' incorrectly accepts an "on " suffix following the host address. Since OpenSSH logs usernames exactly as provided, a remote unauthenticate...