CVE-2026-65787

The CVE-2026-65787 entry describes a heap-based buffer overflow in Desktop Window Manager that allows an authorized attacker to elevate privileges locally. Documented impact is local privilege escalation with a high severity (CVSS 3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). The vulnerability affec...

CVE-2026-65785 Windows DHCP Client Denial of Service Vulnerability

...

CVE-2026-62912

Microsoft Exchange Server is affected by CVE-2026-62912, describing a deserialization of untrusted data vulnerability that allows an authorized attacker to trigger a denial of service over the network. The CVSS 3.1 base score is 6.5 (Medium) with network attack vector, low attack complexity, priv...

CVE-2026-62912 Microsoft Exchange Server Denial of Service Vulnerability

...

CVE-2026-62702 Windows Graphics Kernel Denial of Service Vulnerability

...

CVE-2026-61937

CVE-2026-61937 is a Windows HTTP.sys elevation-of-privilege vulnerability caused by an integer overflow/wraparound. An authenticated, local attacker could exploit this to gain elevated privileges on affected systems. The available documents identify the vulnerable component as Windows HTTP.sys an...

CVE-2026-59138 Microsoft Remote Registry Service Denial of Service Vulnerability

...

CVE-2026-59138

Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network...

CVE-2026-48434 CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue...

CVE-2026-68421

A flaw was found in the Linux kernel's schedext component. The putprevtaskscx function incorrectly issues a warning when a runnable task transitions to an idle state due to core scheduling. This occurs because the core scheduling mechanism bypasses certain checks, leading to a misleading warning...

CVE-2026-68167

A flaw was found in the Linux kernel's btrfs filesystem. A local user could trigger a kernel panic by performing specific filesystem operations that involve data relocation. This occurs because the system attempts to compress and inline data for relocation inodes, which are not designed for such...

CVE-2026-68320

A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP implementation. This vulnerability occurs because the sctpauthepaddchunkid function allows more data to be written than the allocated buffer can hold during the initialization of an SCTP association. A remote attacke...

CVE-2026-68387

A flaw was found in the Linux kernel's Controller Area Network CAN raw socket implementation. A local attacker could exploit a race condition in the rawsetsockopt function. This occurs due to insufficient locking during read-modify-write operations on a shared bitfield when modifying socket flags...

CVE-2026-73086

CVE-2026-73086 affects the nanoid JavaScript library. Prior to versions 3.3.12 and 5.1.11 , nanoid’s nanoid(size) coerces the user-provided size to a signed 32-bit int, which can wrap 2147483648 to -2147483648. This corrupts the process-wide CSPRNG poolOffset in fillPool(), causing subsequent ses...

CVE-2026-68404

A flaw was found in the Linux kernel's cfg80211 wireless subsystem. This vulnerability involves a race condition during the process of disconnecting a wireless device, where a work item can be improperly queued after it has been cancelled. This could allow a local attacker to trigger a system...

CVE-2026-68254

A flaw was found in the Linux kernel's drm/i915/vrr component. An attacker could provide a specially crafted Extended Display Identification Data EDID with a zero minimum vertical refresh rate minvfreq. This could lead to a division-by-zero error in the intelvrrcomputevmax function, resulting in ...

CVE-2026-68270

A flaw was found in the Linux kernel's drm/sysfb component. This flaw occurs when calculating the visible size of the system framebuffer. The calculation uses 32-bit arithmetic, which can overflow if the values for height and stride are excessively large. This overflow leads to truncation of the...

CVE-2026-68300

A flaw was found in the Stream Control Transmission Protocol SCTP authentication mechanism within the Linux kernel. The sctpauthchunkverify function incorrectly processes authentication chunks, leading to authentication requirements being silently bypassed. This can occur under specific condition...

CVE-2026-68317

A flaw was found in the Linux kernel's pdscore component. A race condition exists during the addition and deletion of auxiliary devices, where concurrent operations can lead to a resource leak or a null pointer dereference. This vulnerability could allow a local attacker to cause a system crash,...

CVE-2026-68412

A flaw was found in the Linux kernel's Wi-Fi subsystem, specifically within the cfg80211 component. This vulnerability, located in the cfg80211wextsiwscan function, can lead to a memory leak. A local attacker could exploit this by sending a crafted Wi-Fi scan request with an Extended Service Set...