CVE-2026-57866

Server side request forgery in Apache Impala versions 4.4.x and 4.5.x. Authenticated Impala users with permissions to execute the aigeneratetext function can exfiltrate secrets provided by the credential providers configured in the hadoop.security.credential.provider.path property of...

CVE-2026-69814

Use after free in Windows Credential Providers allows an authorized attacker to elevate privileges locally...

CVE-2026-69790

Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to elevate privileges locally...

CVE-2026-69729

Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to execute code over a network...

CVE-2026-69814

CVE-2026-69814 is a use-after-free vulnerability in Windows Credential Providers that allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 score is 7.0 (HIGH) , with a local attack vector, high complexity, and low privileges required, resulting in high impact to conf...

EUVD-2026-73597

Use after free in Windows Credential Providers allows an authorized attacker to elevate privileges locally...

CVE-2026-69729

CVE-2026-69729 is a heap-based buffer overflow in Windows Credential Providers that allows an authorized attacker to achieve remote code execution over a network. The vulnerability requires low privileges and no user interaction , with an attack complexity of low and network attack vector, as sco...

EUVD-2026-73040

Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to execute code over a network...

CVE-2026-69790

CVE-2026-69790 is a heap-based buffer overflow in Windows Credential Providers that enables a local, low-privilege attacker to escalate privileges. The vulnerability requires local access with low privileges , no user interaction , and has low attack complexity , resulting in HIGH impact across c...

EUVD-2026-73035

Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to elevate privileges locally...

Windows Credential Providers Elevation of Privilege Vulnerability

Use after free in Windows Credential Providers allows an authorized attacker to elevate privileges locally...

Windows Credential Providers Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to execute code over a network...

Windows Credential Providers Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to elevate privileges locally...

CyberArk Credential File Insufficient Effective Key Space

Vulnerability Details Affected Vendor: CyberArk Affected Product: Application Access Manager/Credential Provider Affected Version: Prior to 12.1 Platform: Linux/Windows/zOS CWE Classification: CWE-326: Inadequate Encryption Strength CVE ID: CVE-2021-31796 2. Vulnerability Description CyberArk...

Vulnerabilities fixed in CyberArk

Vulnerabilities have been fixed in CyberArk products including several Credential Providers and The Vault. The vulnerabilities allow a malicious party to launch attacks that lead to the following categories of damage: Denial-of-Service DoS Circumvention of security measure Remote code execution...