CVE-2026-83785: Use After Free

Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...

CVE-2026-83874: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code over a network...

PT-2026-112243

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A use-after-free issue in Windows Event Tracing allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption flaw that occurs when an application continu...

PT-2026-111571

Name of the Vulnerable Software and Affected Versions Wazuh versions 3.12.0 through 4.14.7 Description A heap buffer overflow exists in the fim generate alert function. The issue occurs because the full log variable is sized based on input but written with a boundary defined by OS MAXSTR. An...

CVE-2026-95904: Buffer Over-read

Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-96933: Windows COM+ Event System Service Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-95904: Windows Event Logging Service Information Disclosure Vulnerability

Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally...

CVE-2026-96933: Untrusted Pointer Dereference

Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...

CVE-2026-109898: Missing Authorization

Missing Authorization vulnerability in Arraytics WP Event Solution wp-event-solution allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Event Solution: from n/a through 4.1.25...

PT-2026-112526

Name of the Vulnerable Software and Affected Versions Windows Event Logging Service affected versions not specified Description The use of an uninitialized resource in the Windows Event Logging Service allows an authorized attacker to disclose sensitive information locally and affect the system...

PT-2026-112614

Name of the Vulnerable Software and Affected Versions Windows COM+ Event System Service affected versions not specified Description An untrusted pointer dereference in the Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally. Recommendations At the moment,...

Microsoft Windows: CVE-2026-85840: Windows Event Viewer Information Disclosure Vulnerability

Files or directories accessible to external parties in Windows Event Viewer allows an authorized attacker to disclose information over a network...

PT-2026-112325

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description Improper authentication in Windows Event Tracing allows an authorized attacker to perform spoofing locally. Recommendations At the moment, there is no information about a newer version that...

CVE-2026-83695: Use of Uninitialized Resource

Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally...

CVE-2026-83707: Use After Free

Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally...

CVE-2026-83830: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...

CVE-2022-47529

CVE-2022-47529 RSA NetWitness Platform EDR Agent / Incorrect Access Control - Code Execution During a security audit of the EDR agent I discovered a novel vector to tamper with the service with only standard user rights by targeting an insecure Win32 memory event object. Hijacking the service...

DEBIAN-CVE-2026-109563

N3.js before 2.11.1 contains a regular expression denial of service vulnerability in the N3Lexer number pattern that backtracks quadratically on long digit runs. Attackers can supply untrusted Turtle or N3 input containing long runs of digits that do not end a number, blocking the Node.js event...

CVE-2026-109563

N3.js before 2.11.1 contains a regular expression denial of service vulnerability in the N3Lexer number pattern that backtracks quadratically on long digit runs. Attackers can supply untrusted Turtle or N3 input containing long runs of digits that do not end a number, blocking the Node.js event...

UBUNTU-CVE-2026-109563

N3.js before 2.11.1 contains a regular expression denial of service vulnerability in the N3Lexer number pattern that backtracks quadratically on long digit runs. Attackers can supply untrusted Turtle or N3 input containing long runs of digits that do not end a number, blocking the Node.js event...