35204 matches found
EUVD-2026-121789
Use after free in Windows Connection Manager Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-121460
Use after free in Windows Connection Manager Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-121591
Issue summary: QUIC, when performing automated peer detection, may allow uninitialized stack data to leak into the received address which is then used as the destination for outgoing packets. Impact summary: Applications using QUIC's automated peer detection mechanism may receive an invalid...
EUVD-2026-122501
Heap-based buffer overflow in Windows Internet Connection Sharing ICS allows an authorized attacker to elevate privileges locally...
CVE-2026-119861
Heap-based buffer overflow in Windows Internet Connection Sharing ICS allows an authorized attacker to elevate privileges locally...
CVE-2026-119860
Use after free in Windows Internet Connection Sharing ICS allows an authorized attacker to elevate privileges locally...
CVE-2026-119859
Use after free in Windows Internet Connection Sharing ICS allows an authorized attacker to elevate privileges locally...
CVE-2026-119821
Improper authorization in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally...
CVE-2026-118124
Out-of-bounds read in Windows Internet Connection Sharing ICS allows an authorized attacker to elevate privileges locally...
CVE-2026-113843
Improper authentication in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-108406
Use after free in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally...
CVE-2026-105525
Integer overflow or wraparound in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally...
CVE-2026-126136
Thunderbird is vulnerable to an issue where OAuth2 access tokens are sent over unencrypted HTTP connections when using Exchange accounts with EWS or Microsoft Graph authentication. An attacker monitoring network traffic can intercept these tokens to gain unauthorized access to a user's mailbox un...
CVE-2026-126136 OAuth2 access token could be sent over an unencrypted connection with Exchange accounts
For Exchange accounts using EWS or Microsoft Graph with OAuth2 authentication, Thunderbird sent the OAuth2 access token to the server even when the configured server URL used unencrypted HTTP. An attacker able to observe network traffic could obtain the token and use it to access the user's mailb...
CVE-2026-122179
Heap-based buffer overflow in Windows Internet Connection Sharing ICS allows an authorized attacker to elevate privileges locally...
CVE-2026-119861
Heap-based buffer overflow in Windows Internet Connection Sharing ICS allows an authorized attacker to elevate privileges locally...
EUVD-2026-122374
Heap-based buffer overflow in Windows Internet Connection Sharing ICS allows an authorized attacker to elevate privileges locally...
CVE-2026-119860
Use after free in Windows Internet Connection Sharing ICS allows an authorized attacker to elevate privileges locally...