29254 matches found
CVE-2026-83836
A Heap-based buffer overflow exists in Windows Event Tracing which could allow an unauthorized attacker to execute code locally . The vulnerability involves a CWE-122 (Heap-based Buffer Overflow) and CWE-191 (Integer Underflow) condition. The Base Severity is High (7.8), with the attack vector be...
CVE-2026-83848
A vulnerability exists in the Windows COM+ Event System Service due to an untrusted pointer dereference . This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit details or versions are provided in the documents, though the issue is confirmed with a HIG...
EUVD-2026-99346
Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally...
CVE-2026-83723
A use of uninitialized resource vulnerability in the Windows Event Logging Service allows an authorized attacker to disclose information locally. The vulnerability is associated with CWE-908 and has a CVSS 3.1 base score of 5.5 (Medium) . No specific exploit details or information regarding parti...
CVE-2026-83707
A Use after free vulnerability exists in Windows Event Tracing . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is characterized by a high CVSS 3.1 base score of 7.0, impacting confidentiality, integrity, and availability. Official remediation is ...
EUVD-2026-99339
Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally...
EUVD-2026-99077
Improper authentication in Windows Event Tracing allows an authorized attacker to perform spoofing locally...
CVE-2026-70235
A vulnerability in Windows Event Tracing due to improper authentication allows an authorized attacker to perform spoofing locally . The security impact is categorized as high integrity with a CVSS 3.1 base score of 5.5 . Official remediation is available via Microsoft updates.
CVE-2026-109898
Missing Authorization vulnerability in Arraytics WP Event Solution wp-event-solution allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Event Solution: from n/a through 4.1.25...
CVE-2026-109898 WordPress WP Event Solution plugin <= 4.1.25 - Broken Access Control vulnerability
Missing Authorization vulnerability in Arraytics WP Event Solution wp-event-solution allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Event Solution: from n/a through 4.1.25...
EUVD-2026-98914
Missing Authorization vulnerability in Arraytics WP Event Solution wp-event-solution allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Event Solution: from n/a through 4.1.25...
CVE-2026-109898 WordPress WP Event Solution plugin <= 4.1.25 - Broken Access Control vulnerability
Missing Authorization vulnerability in Arraytics WP Event Solution wp-event-solution allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Event Solution: from n/a through 4.1.25...
CVE-2026-109898
The WP Event Solution plugin for WordPress (versions up to and including 4.1.25 ) is vulnerable to a Broken Access Control issue. The root cause is a Missing Authorization flaw (CWE-862), which allows for the exploitation of incorrectly configured access control security levels . This vulnerabili...
WordPress WP Event Solution plugin <= 4.1.25 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Charles Vosburgh in WordPress Plugin WP Event Solution versions = 4.1.25...
CVE-2026-53711
MCP Context Forge provides an MCP Admin UI for managing gateway resources. From 0.2.0 until 0.3.1, the Global Prompts feature stores a prompt template without sufficient output encoding before the MCP Admin UI renders it. An authenticated attacker can save markup containing script-capable event...
CVE-2026-90249
A flaw was found in the Linux kernel's Industrial I/O IIO core, specifically within the gp2ap002 light sensor driver. A local attacker with appropriate permissions could exploit this by repeatedly writing the same value to the event enable attribute. This can lead to an unbalanced runtime Power...
CVE-2026-90309
A flaw was found in the Linux kernel's RDMA/erdma component. This vulnerability stems from improper management of Completion Queue CQ references during Event Queue EQ event processing. This can lead to a situation where a CQ is deallocated while still in use by an EQ handler, resulting in memory...
EUVD-2026-98770
MCP Context Forge provides an MCP Admin UI for managing gateway resources. From 0.2.0 until 0.3.1, the Global Prompts feature stores a prompt template without sufficient output encoding before the MCP Admin UI renders it. An authenticated attacker can save markup containing script-capable event...
