CVE-2019-14530

CVE-2019-14530 Vulnerabilidad de path traversal y DoS en el proyecto OpenEMR Función vulnerable en el archivo: /openemr/custom/ajaxdownload.php Condiciones: 1. cualquier usuario autorizado 2. para el caso de DoS: debe existir el directorio "/sites/default/documents/cqmqrda/" en el servidor Debido...

Astra Linux – Vulnerability in Xen

Observable discrepancies in response times of some Intel processors may allow authorized users to potentially disclose information through local access...

CVE-2026-83986

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-83967

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-70564

Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...

EUVD-2026-73904

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69489

A heap-based buffer overflow in the Windows Biometric Service allows a low-privilege local attacker to escalate privileges. The flaw requires no user interaction and is rated CVSS 7.8 (HIGH) with high impact on confidentiality, integrity, and availability. No specific affected Windows version or ...

CVE-2026-69761

A use-after-free vulnerability in Windows TCP/IP allows an authorized attacker to elevate privileges over a network . The CVSS 3.1 score is 7.1 (HIGH) , with a vector of AV:N/AC:H/PR:L/UI:R, meaning exploitation requires network access , high attack complexity , low existing privileges , and user...

CVE-2026-69921

CVE-2026-69921 is a heap-based buffer overflow in Windows Print Spooler Components that allows a low-privilege local attacker to elevate privileges , with no user interaction required. The CVSS 3.1 score is 7.8 (HIGH) , reflecting local attack vector, low complexity, and high impact on confidenti...

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

PT-2026-88056

Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally...

PT-2026-87606

Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally...

SUSE CVE-2026-52797

Gogs is an open source self-hosted Git service. Prior to 0.14.0, as an authorized user, an intruder can dictate the value which is passed to the git diff command which, together with bypassing the filtering of the passed value, allows the user to bypass the target directory and write the result o...

UBUNTU-CVE-2026-13068

An authenticated user holding cursor termination privileges on one database may incorrectly be permitted to terminate active cursors on a separate database, disrupting ongoing query operations for other users. The behavior stems from an authorization check that does not correctly scope privileges...

CVE-2026-50526

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to perform tampering locally...

EUVD-2026-44166

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

PT-2026-58435

Name of the Vulnerable Software and Affected Versions Microsoft Brokering File System affected versions not specified Description A use-after-free UAF issue exists in the bfs.sys Windows kernel minifilter driver within the Brokering File System. This flaw is caused by synchronization errors when...

PT-2026-58309

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

PT-2026-56069

Name of the Vulnerable Software and Affected Versions coder versions prior to 2.34.2 coder versions prior to 2.33.8 coder versions prior to 2.32.7 coder versions prior to 2.29.17 Description An authenticated user can trigger a denial of service by sending a small message with an excessively large...

CVE-2026-52797

Gogs is an open source self-hosted Git service. Prior to 0.14.0, as an authorized user, an intruder can dictate the value which is passed to the git diff command which, together with bypassing the filtering of the passed value, allows the user to bypass the target directory and write the result o...