Lucene search
+L

24107 matches found

Cvelist
Cvelist
added 2026/06/09 5:4 p.m.42 views

CVE-2026-40404 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

...

7.8CVSS0.00339EPSS
SaveExploits0References1
CVE
CVE
added 2026/06/09 5:4 p.m.141 views

CVE-2026-40404

CVE-2026-40404 concerns a Windows Universal Disk Format (UDFS) File System Driver Elevation of Privilege. The vulnerability affects the UDFS component, with a local attack vector, requiring low privileges and no user interaction, and yields high impact to confidentiality, integrity, and availabil...

7.8CVSS5.4AI score0.00339EPSS
SaveExploits0References1Affected Software13
Vulnrichment
Vulnrichment
added 2026/06/09 5:4 p.m.13 views

CVE-2026-40404 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

...

7.8CVSS5.4AI score0.00339EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/06/09 5:4 p.m.13 views

CVE-2026-40409 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

...

7.8CVSS5.4AI score0.00298EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/06/09 5:4 p.m.44 views

CVE-2026-40409 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

...

7.8CVSS0.00298EPSS
SaveExploits0References1
CVE
CVE
added 2026/06/09 5:4 p.m.41 views

CVE-2026-40409

Technical details for CVE-2026-40409 are not publicly available in the provided documents. Monitor for updates from Microsoft/NVD for affected products, root cause, impact, and remediation.

7.8CVSS5.4AI score0.00298EPSS
SaveExploits0References1Affected Software13
CVE
CVE
added 2026/06/09 4:3 p.m.78 views

CVE-2026-42767

The CVE-2026-42767 issue affects the OpenSSL CMP client: processing a CRMF CertRepMessage with EncryptedValue where symmAlg has an OID but no parameters can trigger a NULL pointer dereference, crashing the CMP client and enabling DoS. The vulnerability is due to improper handling during CMP respo...

5.9CVSS5.6AI score0.00557EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2026/06/09 3:51 p.m.9 views

CVE-2026-45771 Freeswitch Denial-of-Service in SIP PUBLISH Requests via XML Entity Expansion

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to version 1.11.0, FreeSWITCH's bundled XML parser expands nested declarations without a depth or count boun...

7.5CVSS5.9AI score
SaveExploits0References4
Microsoft CVE
Microsoft CVE
added 2026/06/09 2:0 p.m.12 views

Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

...

7.8CVSS5.4AI score0.00339EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2026/06/09 2:0 p.m.16 views

Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

...

7.8CVSS5.4AI score0.00298EPSS
SaveExploits0
CVE
CVE
added 2026/06/09 12:57 p.m.52 views

CVE-2026-11786

CVE-2026-11786 affects the 389 Directory Server (389-ds-base). The issue is a heap-out-of-bounds read in the LDIF parser when processing attribute types with trailing semicolons during database import, traced to ldif parser function str2entry_state_information_from_type(). Consequences are descri...

6.5CVSS5.6AI score0.0016EPSS
SaveExploits0References2Affected Software3
Github Security Blog
Github Security Blog
added 2026/06/09 9:32 a.m.6 views

Apache Answer has an Unrestricted Upload of File with Dangerous Type vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. A crafted TIFF image could trigger excessive memory allocation during image decoding, allowing an authenticated user to cause the server process to crash. Users are...

6.5CVSS5.4AI score0.00479EPSS
SaveExploits0References6Affected Software1
NVD
NVD
added 2026/06/09 5:16 a.m.16 views

CVE-2026-41006

Spring HATEOAS's internal PropertyUtils.createObjectFromProperties method, used by the Collection+JSON and UBER media type deserializers, performs bean property binding via reflection without consulting Jackson access-control annotations. Affected versions: Spring HATEOAS 1.5.0 through 1.5.6; 2.3...

7.5CVSS0.00276EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/06/09 12:33 a.m.15 views

EUVD-2026-35270

Use after free in PDF in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. Chromium security severity: High...

8.8CVSS6AI score0.00224EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/06/09 12:0 a.m.21 views

PT-2026-47871

Name of the Vulnerable Software and Affected Versions Windows Universal Disk Format File System Driver UDFS affected versions not specified Description An elevation-of-privilege issue exists in the Windows Universal Disk Format File System Driver UDFS, which allows attackers to gain higher...

7.8CVSS5.2AI score0.00298EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/06/09 12:0 a.m.18 views

PT-2026-47870

Name of the Vulnerable Software and Affected Versions Windows Universal Disk Format File System Driver UDFS affected versions not specified Description An elevation of privilege issue exists in the Windows Universal Disk Format File System Driver UDFS related to a legacy file-system problem where...

7.8CVSS5.2AI score0.00339EPSS
SaveExploits0References6
Packet Storm News
Packet Storm News
added 2026/06/09 12:0 a.m.14 views

FreeBSD Security Advisory - FreeBSD-SA-26:32.elf

FreeBSD Security Advisory - The ELF image activator cleared per-process ASLR preference flags for setuid binaries after the code that computes the PIE base address, rather than before. As a result, a user-requested ASLR disable was still in effect at the point where the base address was chosen...

5.5AI score0.00106EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/06/09 12:0 a.m.22 views

PT-2026-47776

Name of the Vulnerable Software and Affected Versions 389 Directory Server affected versions not specified Description A flaw exists in the LDIF parser where it reads past the end of a heap buffer when processing attribute types that contain trailing semicolons during a database import. This...

6.5CVSS5.5AI score0.00291EPSS
SaveExploits0References46
Tenable Nessus
Tenable Nessus
added 2026/06/09 12:0 a.m.16 views

EulerOS 2.0 SP11 : libarchive (EulerOS-SA-2026-2210)

According to the versions of the libarchive packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was identified in the RAR5 archive decompression logic of the libarchive library, specifically within the archivereaddata processing...

7.5CVSS7.1AI score0.00693EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
added 2026/06/09 12:0 a.m.21 views

Adobe USD-Fileformat-plugins Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe USD-Fileformat-plugins. Interaction with the USD library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within t...

7.8CVSS6AI score0.00281EPSS
SaveExploits0References1
Rows per page
Query Builder