21231 matches found
CVE-2026-69372
CVE-2026-69372 is an out-of-bounds read in Windows Network File System (NFS) that allows an authorized attacker (low privileges) to trigger a denial of service over a network. The attack vector is network-based with low complexity, but user interaction is required . CVSS v3.1 base score is 5.7 (M...
EUVD-2026-73474
Out-of-bounds read in Windows Network File System allows an authorized attacker to deny service over a network...
CVE-2026-69265
CVE-2026-69265 is an out-of-bounds read vulnerability in Windows NTFS that allows an authorized attacker with low privileges to perform local privilege escalation . The CVSS v3.1 score is 7.8 (High) , with low attack complexity, no user interaction, and high impact across confidentiality, integri...
CVE-2026-69573
CVE-2026-69573 is a use-after-free vulnerability in the Windows Universal Disk Format File System Driver (UDFS) . An authorized local attacker can exploit it to achieve privilege escalation , potentially gaining full control over confidentiality, integrity, and availability (CVSS 3.1 score 7.0 HI...
CVE-2026-69772
CVE-2026-69772 is a heap-based buffer overflow in Windows Network File System (NFS) that allows an unauthorized attacker to execute code over a network, achieving full remote code execution. The Microsoft-assigned CVSS 3.1 score is 8.8 (HIGH) with vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indic...
Security Bulletin: Langflow is vulnerable to unauthorized file system access due to path traversal and missing storage path validation
Summary Langflow uses a local and S3-backed storage service to manage files uploaded by users and referenced by flow components. The flow execution runtime accepts attacker-controlled file paths through the tweaks API without invoking the path containment guard, allowing traversal sequences to...
Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability
Improper link resolution before file access 'link following' in Windows Resilient File System ReFS Deduplication Service allows an authorized attacker to elevate privileges locally...
Windows Network File System Denial of Service Vulnerability
Out-of-bounds read in Windows Network File System allows an authorized attacker to deny service over a network...
Windows exFAT File System Elevation of Privilege Vulnerability
Out-of-bounds read in Windows exFAT File System allows an authorized attacker to elevate privileges over a network...
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...
Windows Network File System Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Network File System allows an unauthorized attacker to execute code over a network...
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...
CVE-2026-69758: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...
CVE-2026-83952: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Resilient File System ReFS allows an authorized attacker to elevate privileges locally...
CVE-2026-69619: Out-of-bounds Read
Out-of-bounds read in Windows exFAT File System allows an authorized attacker to elevate privileges over a network...
CVE-2026-81994: Improperly Controlled Modification of Object Prototype Attributes
Acrobat Reader is affected by an Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access...
CVE-2026-75998: Improper Access Control
ColdFusion is affected by an Improper Access Control vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue does not require user interaction...
CVE-2026-69573: Use After Free
Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...