313366 matches found
PT-2026-111135
Name of the Vulnerable Software and Affected Versions SAP S/4HANA affected versions not specified Description Insufficient input validation in the rule definition functionality, which uses a domain-specific scripting language, allows an authenticated attacker with specific business privileges to...
PT-2026-111205
A vulnerability was identified in code-projects Online Reviewer System 1.0. The affected element is an unknown function of the file /reviewer/system/system/admins/manage/users/btn functions.php of the component User Update Handler. Such manipulation leads to sql injection. The attack may be...
Microsoft SharePoint: CVE-2026-70251: Microsoft Office SharePoint Elevation of Privilege Vulnerability
Server-side request forgery ssrf in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...
Microsoft Windows: CVE-2026-102192: Windows Failover Cluster Denial of Service Vulnerability
Integer underflow wrap or wraparound in Windows Failover Cluster allows an unauthorized attacker to deny service over a network...
PT-2026-111203
Name of the Vulnerable Software and Affected Versions k2-fsa sherpa-onnx versions prior to 1.13.9 Description A buffer overflow exists in the Offline Transducer Greedy Search Decoder component within the OfflineTransducerGreedySearchDecoder::Decode function. This issue occurs when the vocab size...
UBUNTU-CVE-2026-96224
Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network...
Microsoft ASP.NET: CVE-2026-70186: ASP.NET Core Denial of Service Vulnerability
Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network...
Microsoft Windows: CVE-2026-83508: Windows NTFS Elevation of Privilege Vulnerability
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally...
PT-2026-112603
Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally...
PT-2026-111585
A vulnerability was detected in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects an unknown function of the file changebookingstatus.php. Performing a manipulation of the argument dateselected results in sql injection. The attack may be...
Microsoft Windows: CVE-2026-83733: Windows Print Spooler Components Information Disclosure Vulnerability
Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally...
CVE-2026-69978: NULL Pointer Dereference
Null pointer dereference in Windows VMSwitch allows an authorized attacker to deny service locally...
CVE-2026-83873: Relative Path Traversal
Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally...
CVE-2026-83509: Untrusted Search Path
Untrusted search path in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally...
CVE-2026-83718: Use After Free
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...
PT-2026-112946
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-96918: Windows NTFS Elevation of Privilege Vulnerability
Improper access control in Windows NTFS allows an authorized attacker to elevate privileges locally...
PT-2026-112599
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-85369: Windows Hyper-V Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally...
PT-2026-112536
Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description An out-of-bounds read in Windows NTFS allows an authorized attacker to disclose sensitive information locally, which can affect the system. Recommendations At the moment, there is no...