9892 matches found
CVE-2026-101965
A Use of Externally-Controlled Format String vulnerability exists in the gRPC daemon of Juniper Networks Junos OS Evolved . An authenticated network attacker can send a crafted message to the gNMI service to trigger this flaw when network analytics telemetry is enabled. Potential impacts include ...
EUVD-2026-101425
A Use of Externally-Controlled Format String vulnerability in the jti-dialoutd of Juniper Networks Junos OS Evolved allows an authenticated network attacker to cause persistent telemetry dial-out denial of service via a crafted analytics sensor resource submitted through gNMI listener...
CVE-2026-101966
A Use of Externally-Controlled Format String vulnerability exists in the jti-dialoutd component of Juniper Networks Junos OS Evolved . An authenticated network attacker can exploit this by submitting a crafted analytics sensor resource through a gNMI listener . This flaw can lead to a persistent ...
PT-2026-113902
Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 23.2R2-S7.7 Junos OS versions prior to 23.4R2-S8.13 Junos OS versions prior to 24.2R2-S5.5 Junos OS versions prior to 24.4R2-S5 Junos OS versions prior to 25.2R2-S2 Junos OS versions prior to 25.4R1-S3 Junos OS...
CVE-2026-101965: Use of Externally-Controlled Format String
An Use of Externally-Controlled Format String vulnerability in the gRPC daemon of Juniper Networks Junos OS Evolved allows an authenticated network attacker to cause telemetry-service disruption, information disclosure, or potential root-level code execution via a crafted message to the gNMI...
PT-2026-113817
šØ CVE-2026-101965 An Use of Externally-Controlled Format String vulnerability in the gRPC daemon of Juniper Networks Junos OS Evolved allows an authenticated network attacker to cause telemetry-service disruption, information disclosure, or potential root-level code execution via a crafted messag...
CVE-2026-101966: Use of Externally-Controlled Format String
A Use of Externally-Controlled Format String vulnerability in the jti-dialoutd of Juniper Networks Junos OS Evolved allows an authenticated network attacker to cause persistent telemetry dial-out denial of service via a crafted analytics sensor resource submitted through gNMI listener...
CVE-2026-94520
Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network...
CVE-2026-94520
A use of an externally-controlled format string in Microsoft SQL Server allows an authorized attacker to perform a denial-of-service (DoS) attack over a network. Microsoft has released security updates to address this vulnerability, including updates for SQL Server 2019 (CU32, GDR) , SQL Server 2...
EUVD-2026-100620
Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network...
CVE-2026-85842
Use of externally-controlled format string in Windows Image Acquisition allows an authorized attacker to elevate privileges locally...
CVE-2026-83585
Use of externally-controlled format string in Windows NTFS allows an authorized attacker to elevate privileges locally...
CVE-2026-83585
The Windows NTFS file system is vulnerable to a local privilege escalation flaw caused by the use of externally-controlled format strings (CWE-134). An authorized attacker can exploit this issue to elevate their privileges on the local system. No specific exploit links or in-the-wild exploitation...
CVE-2026-85842
A vulnerability in Windows Image Acquisition allows an authorized attacker to achieve local privilege escalation . The root cause is the use of an externally-controlled format string (CWE-134). This flaw enables an attacker with existing local access to elevate their privileges on the system. No ...
Windows NTFS Elevation of Privilege Vulnerability
Use of externally-controlled format string in Windows NTFS allows an authorized attacker to elevate privileges locally...
Windows Image Acquisition Elevation of Privilege Vulnerability
Use of externally-controlled format string in Windows Image Acquisition allows an authorized attacker to elevate privileges locally...
Microsoft SQL Server Denial of Service Vulnerability
Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network...
PT-2026-113455
Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network...
CVE-2026-94520: Use of Externally-Controlled Format String
Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network...
CVE-2026-83585: Use of Externally-Controlled Format String
Use of externally-controlled format string in Windows NTFS allows an authorized attacker to elevate privileges locally...