CVE-2026-85840: Files or Directories Accessible to External Parties

Files or directories accessible to external parties in Windows Event Viewer allows an authorized attacker to disclose information over a network...

CVE-2026-95904: Buffer Over-read

Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally...

PT-2026-112511

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A use-after-free issue in Windows Event Tracing allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption flaw that occurs when an application continu...

PT-2026-112499

Name of the Vulnerable Software and Affected Versions Windows Event Logging Service affected versions not specified Description The use of an uninitialized resource in the Windows Event Logging Service allows an authorized attacker to disclose information locally. Recommendations At the moment,...

PT-2026-112526

Name of the Vulnerable Software and Affected Versions Windows Event Logging Service affected versions not specified Description The use of an uninitialized resource in the Windows Event Logging Service allows an authorized attacker to disclose sensitive information locally and affect the system...

PT-2026-112602

Name of the Vulnerable Software and Affected Versions Windows Event Tracing affected versions not specified Description A heap-based buffer overflow occurs in Windows Event Tracing, which is a mechanism for logging system events. This flaw allows an unauthorized attacker to execute arbitrary code...

PT-2026-112579

Name of the Vulnerable Software and Affected Versions Windows COM+ Event System Service affected versions not specified Description A use-after-free condition in the Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruptio...

PT-2026-112622

Name of the Vulnerable Software and Affected Versions Windows Event Logging Service affected versions not specified Description An out-of-bounds read in the Windows Event Logging Service allows an unauthorized remote attacker to execute arbitrary code over a network and affect the system...

PT-2026-112614

Name of the Vulnerable Software and Affected Versions Windows COM+ Event System Service affected versions not specified Description An untrusted pointer dereference in the Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally. Recommendations At the moment,...

PT-2026-112639

Name of the Vulnerable Software and Affected Versions Windows Event Tracing affected versions not specified Description A heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute arbitrary code over a network, which can affect the system. A heap-based buffer...

PT-2026-112325

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description Improper authentication in Windows Event Tracing allows an authorized attacker to perform spoofing locally. Recommendations At the moment, there is no information about a newer version that...

CVE-2026-96933: Untrusted Pointer Dereference

Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83848: Windows COM+ Event System Service Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...

CVE-2026-109898: Missing Authorization

Missing Authorization vulnerability in Arraytics WP Event Solution wp-event-solution allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Event Solution: from n/a through 4.1.25...

DEBIAN-CVE-2026-109563

N3.js before 2.11.1 contains a regular expression denial of service vulnerability in the N3Lexer number pattern that backtracks quadratically on long digit runs. Attackers can supply untrusted Turtle or N3 input containing long runs of digits that do not end a number, blocking the Node.js event...

CVE-2026-109563

N3.js before 2.11.1 contains a regular expression denial of service vulnerability in the N3Lexer number pattern that backtracks quadratically on long digit runs. Attackers can supply untrusted Turtle or N3 input containing long runs of digits that do not end a number, blocking the Node.js event...

CVE-2026-109563

N3.js before 2.11.1 contains a regular expression denial of service vulnerability in the N3Lexer number pattern that backtracks quadratically on long digit runs. Attackers can supply untrusted Turtle or N3 input containing long runs of digits that do not end a number, blocking the Node.js event...

UBUNTU-CVE-2026-109563

N3.js before 2.11.1 contains a regular expression denial of service vulnerability in the N3Lexer number pattern that backtracks quadratically on long digit runs. Attackers can supply untrusted Turtle or N3 input containing long runs of digits that do not end a number, blocking the Node.js event...

EUVD-2026-97886

N3.js before 2.11.1 contains a regular expression denial of service vulnerability in the N3Lexer number pattern that backtracks quadratically on long digit runs. Attackers can supply untrusted Turtle or N3 input containing long runs of digits that do not end a number, blocking the Node.js event...

CVE-2026-109563

N3.js before 2.11.1 contains a regular expression denial of service vulnerability in the N3Lexer number pattern that backtracks quadratically on long digit runs. Attackers can supply untrusted Turtle or N3 input containing long runs of digits that do not end a number, blocking the Node.js event...