313366 matches found
PT-2026-112221
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...
Application Development Environment Angular XSS
The vulnerability of the application development environment and the Angular single-page application platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...
ReactPHP react/http DoS
The vulnerability of the handleData function in the ReactPHP library’s react/http package, which handles streaming HTTP messages, is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
Cisco License On-Prem Unauthorized Access
The vulnerability in the web interface for managing Cisco License On-Prem previously known as Cisco Smart Software Manager On-Prem is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized...
DevTools Suite DoS
The vulnerability in Google Chrome and Microsoft Edge DevTools web development tools is related to insufficient input validation. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...
CVE-2026-70232: Exposure of Sensitive System Information to an Unauthorized Control Sphere
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally...
CVE-2026-108941: Improper Control of Generation of Code
A vulnerability was identified in Linketic CityGaussian up to 2.0. This affects the function parsecfgargs of the file internal/utils/common.py of the component Sidecar Parsing. The manipulation of the argument cfgargs leads to code injection. The attack can only be performed from a local...
PT-2026-112206
Name of the Vulnerable Software and Affected Versions Windows Projected File System affected versions not specified Description Improper access control in the Windows Projected File System allows an authorized attacker to locally disclose sensitive information, which can affect the system...
PT-2026-111925
Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description Improper resolution of path equivalence in WebDAV allows an authorized attacker to elevate privileges over a network. WebDAV is an extension of the HTTP protoco...
PT-2026-112005
Name of the Vulnerable Software and Affected Versions Windows Hyper-V affected versions not specified Description Improper access control in Windows Hyper-V allows an authorized attacker to execute code locally. Recommendations At the moment, there is no information about a newer version that...
PT-2026-112089
Out-of-bounds read in SQLite allows an authorized attacker to elevate privileges locally...
PT-2026-112608
Double free in Windows TCP/IP allows an authorized attacker to elevate privileges locally...
PT-2026-113100
Name of the Vulnerable Software and Affected Versions Windows Win32 Kernel Subsystem affected versions not specified Description A time-of-check time-of-use toctou race condition exists in the Windows Win32 Kernel Subsystem. This occurs when a program checks the state of a resource before using i...
PT-2026-113226
Name of the Vulnerable Software and Affected Versions Windows Setup and Deployment affected versions not specified Description A missing authentication requirement for a critical function allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no...
CVE-2026-83798: Improper Verification of Cryptographic Signature
Improper verification of cryptographic signature in Windows Update Stack allows an authorized attacker to perform spoofing locally...
CVE-2026-70149: Heap-based Buffer Overflow
Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver csc.sys allows an authorized attacker to disclose information locally...
Microsoft Windows: CVE-2026-105007: Windows NDIS Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in the Network Driver Interface Specification NDIS when ndis.sys fails to check the length of a buffer prior to copying memory to it. To exploit the vulnerability, in a local attack scenario, an attacker could run a specially crafted application to...
CVE-2026-70082: Uncaught Exception
Uncaught exception in Windows DNS allows an unauthorized attacker to deny service over a network...
PT-2026-112325
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description Improper authentication in Windows Event Tracing allows an authorized attacker to perform spoofing locally. Recommendations At the moment, there is no information about a newer version that...