CVE-2026-58249

SAP NetWeaver and SAP Web Dispatcher do not properly validate certain fields in specially crafted requests handled by an internal protocol component. An unauthenticated attacker could send a malicious request that triggers a memory-handling error, causing the affected process to crash. Successful...

EUVD-2026-97971

IBM Maximo Application Suite - IoT Component 9.2.0, 9.1.0, and 9.0.0 could allow a remote attacker to cause a denial of service due to uncontrolled recursion...

EUVD-2026-98184

SAP NetWeaver and SAP Web Dispatcher do not properly validate certain fields in specially crafted requests handled by an internal protocol component. An unauthenticated attacker could send a malicious request that triggers a memory-handling error, causing the affected process to crash. Successful...

CVE-2026-58249 Memory Corruption vulnerability in SAP NetWeaver and SAP Web Dispatcher (Internet Communication Manager)

SAP NetWeaver and SAP Web Dispatcher do not properly validate certain fields in specially crafted requests handled by an internal protocol component. An unauthenticated attacker could send a malicious request that triggers a memory-handling error, causing the affected process to crash. Successful...

PT-2026-112970

Name of the Vulnerable Software and Affected Versions Microsoft Windows Search Component affected versions not specified Description A race condition occurs in the Microsoft Windows Search Component due to improper synchronization when using a shared resource. This allows an authorized attacker t...

Microsoft Windows: CVE-2026-88160: Microsoft Windows Search Component Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

CVE-2026-108136: Use After Free

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

CVE-2026-70177: Numeric Truncation Error

Numeric truncation error in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

PT-2026-112236

Name of the Vulnerable Software and Affected Versions Microsoft Graphics Component affected versions not specified Description A numeric truncation error in the Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. Numeric truncation occurs when a value is too...

CVE-2026-102209: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-96937: Microsoft Windows Search Component Elevation of Privilege Vulnerability

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

CVE-2026-100215: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code locally...

CVE-2026-105731: Use of Uninitialized Resource

Use of uninitialized resource in Microsoft Graphics Component allows an authorized attacker to disclose information locally...

PT-2026-112508

Name of the Vulnerable Software and Affected Versions Microsoft Windows Search Component affected versions not specified Description Improper link resolution before file access, also known as link following, allows an authorized attacker to elevate privileges locally on the system. Recommendation...

CVE-2026-70123: Numeric Truncation Error

Numeric truncation error in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...

CVE-2026-85869: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

CVE-2026-109750: Undefined Security Weakness

Site isolation issue in the DOM: Web Authentication component. This vulnerability was fixed in Firefox 158 and Thunderbird 158...

CVE-2026-109780: Undefined Security Weakness

Mitigation bypass in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158 and Thunderbird 158...

CVE-2026-109774: Undefined Security Weakness

Invalid pointer, undefined behavior in the DOM: Notifications component. This vulnerability was fixed in Firefox 158 and Thunderbird 158...

CVE-2026-109773: Uncontrolled Resource Consumption

Denial-of-service in the Sync component. This vulnerability was fixed in Firefox 158 and Thunderbird 158...