313366 matches found
CVE-2026-108947: Deserialization of Untrusted Data
A flaw has been found in yoshitomo-matsubara torchdistill up to 1.1.5. This affects the function loadckpt of the file torchdistill/common/mainutil.py. Executing a manipulation of the argument srcckpt can lead to deserialization. The attack needs to be launched locally. The exploit has been...
CVE-2026-108968: Improper Neutralization of Special Elements used in an SQL Command
A weakness has been identified in SourceCodester Performance Indicator System 1.0. The affected element is an unknown function of the file /opils/staff/saleshistory.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been...
PT-2026-111414
Name of the Vulnerable Software and Affected Versions conductor-oss conductor version 3.31.2 Description An issue exists in the API Tool Configuration component within the ListApiToolsTask.start function of the ListApiToolsTask.java file. Remote manipulation of the specUrl argument allows for...
PT-2026-111922
Name of the Vulnerable Software and Affected Versions Windows Hyper-V affected versions not specified Description A use after free issue exists in Windows Hyper-V, which allows an authorized attacker to execute code locally. Additionally, remote attackers may be able to execute arbitrary code and...
Microsoft Windows: CVE-2026-83728: Windows Hyper-V Spoofing Vulnerability
Improper validation of syntactic correctness of input in Windows Hyper-V allows an authorized attacker to perform spoofing locally...
CVE-2026-70134: Use After Free
Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally...
CVE-2026-83765: Out-of-bounds Read
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally...
CVE-2026-83793: Improper Link Resolution Before File Access
Improper link resolution before file access 'link following' in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally...
CVE-2026-70227: Out-of-bounds Read
Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally...
CVE-2026-68836: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows kernel32.dll allows an authorized attacker to elevate privileges locally...
PT-2026-112586
Name of the Vulnerable Software and Affected Versions Windows Device Install Service affected versions not specified Description Incorrect authorization in the Windows Device Install Service allows an authorized attacker to elevate privileges locally, which can lead to full system compromise...
CVE-2026-69999: Out-of-bounds Read
Out-of-bounds read in Windows Update allows an authorized attacker to disclose information locally...
CVE-2026-70128: Out-of-bounds Read
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally...
CVE-2026-83508: Out-of-bounds Read
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally...
CVE-2026-70299: Incorrect Authorization
Improper access control in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-83658: Missing Authorization
Improper access control in Windows Error Reporting allows an authorized attacker to disclose information locally...
PT-2026-112624
Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally...
CVE-2026-83892: Out-of-bounds Read
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally...
Microsoft Windows: CVE-2026-83569: HID Parser Library Elevation of Privilege Vulnerability
Heap-based buffer overflow in HID Parser Library allows an authorized attacker to elevate privileges locally...