21373 matches found
PT-2026-58490
Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description A race condition occurs in Windows NTFS due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate privileges locally. A race condition i...
PT-2026-58609
Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description A heap-based buffer overflow in the Windows Network File System NFS allows an authorized attacker to elevate privileges over a network. A heap-based buffer overflow occurs when a...
PT-2026-58310
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally...
PT-2026-58330
Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally...
PT-2026-58435
Name of the Vulnerable Software and Affected Versions Microsoft Brokering File System affected versions not specified Description A use-after-free UAF issue exists in the bfs.sys Windows kernel minifilter driver within the Brokering File System. This flaw is caused by synchronization errors when...
CVE-2026-48353: Improper Input Validation
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue requires user...
CVE-2026-53486: Improper Limitation of a Pathname to a Restricted Directory
The decompress package for Node.js extracts archives. Prior to 10.2.1 and 11.1.3, archive extraction can create files and links outside the target directory. When extracting an archive to a directory, a crafted archive can read or write files outside that directory because hardlink and symlink...
CVE-2026-48338: Improper Limitation of a Pathname to a Restricted Directory
ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope...
CVE-2026-47996: Incorrect Authorization
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could lead to arbitrary file system read. A high-privileged attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue does not requir...
CVE-2026-58530: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Resilient File System ReFS allows an unauthorized attacker to execute code locally...
CVE-2026-56650: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Network File System allows an authorized attacker to elevate privileges locally...
CVE-2026-56649: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Network File System allows an unauthorized attacker to execute code over a network...
CVE-2026-56194: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Network File System allows an authorized attacker to elevate privileges over a network...
CVE-2026-50492: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Resilient File System ReFS allows an unauthorized attacker to execute code with a physical attack...
CVE-2026-50501: Stack-based Buffer Overflow
Stack-based buffer overflow in Windows Resilient File System ReFS allows an unauthorized attacker to execute code locally...
CVE-2026-50498: Out-of-bounds Read
Windows Universal Disk Format File System Driver UDFS Elevation of Privilege Vulnerability...
CVE-2026-50458: Use After Free
Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...
CVE-2026-50362: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Resilient File System ReFS allows an unauthorized attacker to execute code locally...
CVE-2026-50441: Untrusted Pointer Dereference
Untrusted pointer dereference in Windows Resilient File System ReFS allows an authorized attacker to elevate privileges locally...