313365 matches found
CVE-2026-88147: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Secure Socket Tunneling Protocol SSTP allows an authorized attacker to elevate privileges locally...
CVE-2026-87700: Use After Free
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-96859: Windows Imaging Component Information Disclosure Vulnerability
Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally...
Microsoft Windows: CVE-2026-97793: Windows Setup and Deployment Elevation of Privilege Vulnerability
Missing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-83644: Windows Audio Service Elevation of Privilege Vulnerability
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally...
Microsoft SQL Server: CVE-2026-88084: Microsoft SQL Server Denial of Service Vulnerability
Allocation of resources without limits or throttling in SQL Server allows an authorized attacker to deny service over a network...
CVE-2026-70045: Use After Free
Use after free in Windows Work Folders allows an authorized attacker to elevate privileges locally...
CVE-2026-83933: Improper Link Resolution Before File Access
Improper link resolution before file access 'link following' in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally...
PT-2026-112570
Name of the Vulnerable Software and Affected Versions Microsoft Bluetooth Driver affected versions not specified Description An out-of-bounds read occurs in the Microsoft Bluetooth Driver, which allows an unauthorized attacker to elevate privileges through a physical attack. An out-of-bounds read...
PT-2026-113037
Out-of-bounds write in Windows Local Security Authority Subsystem Service LSASS allows an unauthorized attacker to execute code over a network...
PT-2026-111275
Name of the Vulnerable Software and Affected Versions storyicon comfyui segment anything versions up to ab6395596399d5048639cdab7e44ec9fae857a93 Description Code injection is possible via remote attack in the GroundingDINO Model Loading component. The issue exists within the SLConfig. file2dict...
CVE-2026-83893: Exposure of Sensitive System Information to an Unauthorized Control Sphere
Exposure of sensitive system information to an unauthorized control sphere in Windows Clipboard User Service allows an authorized attacker to disclose information locally...
PT-2026-118154
Уязвимость функций get lists и delete list file платформы для мониторинга безопасности и обнаружения угроз Wazuh связана с неверным ограничением имени пути к каталогу. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить доступ на удаление произвольных файлов...
PT-2026-112898
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-83690: Use After Free
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-81969: Insufficient Granularity of Access Control
Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-70236: Windows Win32k Elevation of Privilege Vulnerability
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...
CVE-2026-70119: Out-of-bounds Read
Out-of-bounds read in Windows DNS allows an authorized attacker to execute code over a network...
CVE-2026-62840: Time-of-check Time-of-use (TOCTOU) Race Condition
Time-of-check time-of-use toctou race condition in Linux Kernel allows an authorized attacker to elevate privileges locally...