313366 matches found
PT-2026-111838
Snowy 3.6.5 contains a hard-coded HMAC key vulnerability that allows unauthenticated attackers to forge download signatures for the /dev/file/download endpoint by using the published FILE DOWNLOAD SIGN SECRET constant. Attackers can compute HMAC-SHA256 signatures of guessed file ids offline to...
Microsoft Windows: CVE-2026-83791: Windows Virtual Input Elevation of Privilege Vulnerability
Improper authorization in Windows Virtual Input allows an authorized attacker to elevate privileges locally...
CVE-2026-70011: Out-of-bounds Read
Out-of-bounds read in Windows IP Over USB Service allows an authorized attacker to disclose information locally...
Microsoft Windows: CVE-2026-83736: Windows Kernel Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...
PT-2026-112698
Name of the Vulnerable Software and Affected Versions System.Security.Cryptography.Pkcs versions 10.0.0 through 10.0.12 System.Security.Cryptography.Pkcs versions 11.0.0-preview.1 through 11.0.0-rc.1 System.Security.Cryptography.Pkcs versions 8.0.0 through 8.0.1 System.Security.Cryptography.Pkcs...
CVE-2026-108398: Untrusted Search Path
Untrusted search path in .NET Framework allows an authorized attacker to bypass a security feature locally...
UBUNTU-CVE-2026-70186
Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network...
CVE-2026-70196
Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network...
CVE-2026-88135: Missing Authorization
Improper access control in WebDAV allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-88101: Microsoft Input Method Editor (IME) Elevation of Privilege Vulnerability
Weak authentication in Microsoft Input Method Editor IME allows an authorized attacker to elevate privileges locally...
CVE-2026-109620: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in SourceCodester Online Reviewer System 1.0. Affected by this vulnerability is the function PDO::prepare of the file login/index.php. Such manipulation of the argument username/password leads to sql injection. It is possible to launch the attack remotely. The explo...
PT-2026-113117
Untrusted pointer dereference in Microsoft Windows Search Component allows an authorized attacker to disclose information locally...
CVE-2026-85827: Heap-based Buffer Overflow
Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally...
CVE-2026-70222: Relative Path Traversal
Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally...
CVE-2026-83853: Use After Free
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...
PT-2026-112287
Name of the Vulnerable Software and Affected Versions Microsoft.AspNetCore.App.Runtime.linux-arm versions 8.0.0 through 8.0.31 Microsoft.AspNetCore.App.Runtime.linux-arm64 versions 8.0.0 through 8.0.31 Microsoft.AspNetCore.App.Runtime.linux-musl-arm versions 8.0.0 through 8.0.31...
PT-2026-112500
Name of the Vulnerable Software and Affected Versions Windows Cloud Files Mini Filter Driver affected versions not specified Description A use-after-free condition in the Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. Use-after-free is a memory...
Google Chrome Microsoft Edge Unauthorized Access
The vulnerability in the Downloads component of Google Chrome and Microsoft Edge is related to improper authorization. Exploiting this vulnerability enables a remote attacker to gain unauthorized access to protected information via a specially crafted HTML page...
Cisco Secure Workload protection Multi-cloud Data Centers Compromise Data Compromise
The vulnerability of the Cisco Secure Workload protection mechanism for multi-cloud data centers previously known as Tetration is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to compromise the accessibility of protected...