21255 matches found
CVE-2026-75998: Improper Access Control
ColdFusion is affected by an Improper Access Control vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue does not require user interaction...
CVE-2026-69573: Use After Free
Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...
CVE-2026-69841: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Encrypting File System EFS allows an authorized attacker to elevate privileges locally...
CVE-2026-69688: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Encrypting File System EFS allows an authorized attacker to elevate privileges over a network...
CVE-2026-83999: Improper Link Resolution Before File Access
Improper link resolution before file access 'link following' in Windows Resilient File System ReFS Deduplication Service allows an authorized attacker to elevate privileges locally...
PT-2026-87709
Heap-based buffer overflow in Windows Network File System allows an unauthorized attacker to execute code over a network...
PT-2026-87621
w00t! Microsoft Patch Tuesday included my CVE-2026-69619. https://t.co/a5Rwpo3N0d infosec https://t.co/wVdqMCmSvR...
CVE-2026-69772: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Network File System allows an unauthorized attacker to execute code over a network...
CVE-2026-69592: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...
PT-2026-88493
Acrobat Reader is affected by an Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access...
CVE-2026-69372: Out-of-bounds Read
Out-of-bounds read in Windows Network File System allows an authorized attacker to deny service over a network...
PT-2026-87410
Out-of-bounds read in Windows Network File System allows an authorized attacker to deny service over a network...
PT-2026-87698
Name of the Vulnerable Software and Affected Versions Windows Universal Disk Format File System Driver UDFS affected versions not specified Description A heap-based buffer overflow occurs in the Windows Universal Disk Format File System Driver UDFS. This issue allows an authorized attacker to...
CVE-2026-69794: Buffer Over-read
Buffer over-read in Windows Encrypting File System EFS allows an authorized attacker to disclose information locally...
CVE-2026-69617: Out-of-bounds Read
Out-of-bounds read in Windows Resilient File System ReFS allows an authorized attacker to elevate privileges locally...
CVE-2026-78446: Use After Free
Use after free in Windows Distributed File System DFS allows an authorized attacker to execute code over a network...
PT-2026-88307
ColdFusion is affected by an Improper Access Control vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue does not require user interaction...
CVE-2026-69424: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Distributed File System DFS allows an authorized attacker to elevate privileges locally...
APSB26-119 : Security updates available for Adobe ColdFusion
Adobe has released a security update for ColdFusion versions 2025 and 2023. This update resolves critical and important vulnerabilities that could result in arbitrary code execution, privilege escalation, arbitrary file system read, and application denial-of-service. Adobe is not aware of any...
APSB26-141 : Security update available for Adobe Acrobat Reader
Adobe has released a security update for Adobe Acrobat and Reader for Windows and macOS. This update addresses critical, important, and moderate vulnerabilities that could result in arbitrary code execution, privilege escalation, arbitrary file system read, arbitrary file system write, memory...