CVE-2019-14530

CVE-2019-14530 OpenEMR 项目中的路径遍历和拒绝服务（DoS）漏洞 文件中的易受影响函数： /openemr/custom/ajaxdownload.php 条件： 1. 任意已授权用户 2. 对于 DoS 情形：服务器上必须存在目录 "/sites/default/documents/cqmqrda/"（由于 "unlink" 函数的逻辑，文件路径必须仅由已存在的目录及其中的文件组成。） 受影响版本： 5.0.2，已在 5.0.2 版本中修复。 描述 此函数中的易受影响变量：fileName，攻击者可以控制该变量，且没有任何过滤和验证。...

Astra Linux – Vulnerability in Xen

Observable discrepancies in response times of some Intel processors may allow authorized users to potentially disclose information through local access...

CVE-2026-83986

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-83967

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-70564

Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...

EUVD-2026-73904

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69489

A heap-based buffer overflow in the Windows Biometric Service allows a low-privilege local attacker to escalate privileges. The flaw requires no user interaction and is rated CVSS 7.8 (HIGH) with high impact on confidentiality, integrity, and availability. No specific affected Windows version or ...

CVE-2026-69761

A use-after-free vulnerability in Windows TCP/IP allows an authorized attacker to elevate privileges over a network . The CVSS 3.1 score is 7.1 (HIGH) , with a vector of AV:N/AC:H/PR:L/UI:R, meaning exploitation requires network access , high attack complexity , low existing privileges , and user...

CVE-2026-69921

CVE-2026-69921 is a heap-based buffer overflow in Windows Print Spooler Components that allows a low-privilege local attacker to elevate privileges , with no user interaction required. The CVSS 3.1 score is 7.8 (HIGH) , reflecting local attack vector, low complexity, and high impact on confidenti...

Windows Biometric Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

PT-2026-88056

Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally...

PT-2026-87606

Name of the Vulnerable Software and Affected Versions Windows Audio Service affected versions not specified Description A heap-based buffer overflow in the Windows Audio Service allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program writes...

SUSE CVE-2026-52797

Gogs is an open source self-hosted Git service. Prior to 0.14.0, as an authorized user, an intruder can dictate the value which is passed to the git diff command which, together with bypassing the filtering of the passed value, allows the user to bypass the target directory and write the result o...

UBUNTU-CVE-2026-13068

An authenticated user holding cursor termination privileges on one database may incorrectly be permitted to terminate active cursors on a separate database, disrupting ongoing query operations for other users. The behavior stems from an authorization check that does not correctly scope privileges...

CVE-2026-50526

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to perform tampering locally...

EUVD-2026-44166

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

PT-2026-58435

Name of the Vulnerable Software and Affected Versions Microsoft Brokering File System affected versions not specified Description A use-after-free UAF issue exists in the bfs.sys Windows kernel minifilter driver within the Brokering File System. This flaw is caused by synchronization errors when...

PT-2026-58309

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

PT-2026-56069

Name of the Vulnerable Software and Affected Versions coder versions prior to 2.34.2 coder versions prior to 2.33.8 coder versions prior to 2.32.7 coder versions prior to 2.29.17 Description An authenticated user can trigger a denial of service by sending a small message with an excessively large...

CVE-2026-52797

Gogs is an open source self-hosted Git service. Prior to 0.14.0, as an authorized user, an intruder can dictate the value which is passed to the git diff command which, together with bypassing the filtering of the passed value, allows the user to bypass the target directory and write the result o...