Lucene search
+L

24106 matches found

CVE
CVE
added 2026/06/09 5:4 p.m.141 views

CVE-2026-40404

CVE-2026-40404 concerns a Windows Universal Disk Format (UDFS) File System Driver Elevation of Privilege. The vulnerability affects the UDFS component, with a local attack vector, requiring low privileges and no user interaction, and yields high impact to confidentiality, integrity, and availabil...

7.8CVSS5.4AI score0.00339EPSS
SaveExploits0References1Affected Software13
Vulnrichment
Vulnrichment
added 2026/06/09 5:4 p.m.13 views

CVE-2026-40404 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

...

7.8CVSS5.4AI score0.00339EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/06/09 5:4 p.m.13 views

CVE-2026-40409 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

...

7.8CVSS5.4AI score0.00298EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/06/09 5:4 p.m.44 views

CVE-2026-40409 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

...

7.8CVSS0.00298EPSS
SaveExploits0References1
CVE
CVE
added 2026/06/09 5:4 p.m.41 views

CVE-2026-40409

Technical details for CVE-2026-40409 are not publicly available in the provided documents. Monitor for updates from Microsoft/NVD for affected products, root cause, impact, and remediation.

7.8CVSS5.4AI score0.00298EPSS
SaveExploits0References1Affected Software13
CVE
CVE
added 2026/06/09 4:3 p.m.78 views

CVE-2026-42767

The CVE-2026-42767 issue affects the OpenSSL CMP client: processing a CRMF CertRepMessage with EncryptedValue where symmAlg has an OID but no parameters can trigger a NULL pointer dereference, crashing the CMP client and enabling DoS. The vulnerability is due to improper handling during CMP respo...

5.9CVSS5.6AI score0.00557EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2026/06/09 3:51 p.m.9 views

CVE-2026-45771 Freeswitch Denial-of-Service in SIP PUBLISH Requests via XML Entity Expansion

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to version 1.11.0, FreeSWITCH's bundled XML parser expands nested declarations without a depth or count boun...

7.5CVSS5.9AI score
SaveExploits0References4
Microsoft CVE
Microsoft CVE
added 2026/06/09 2:0 p.m.12 views

Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

...

7.8CVSS5.4AI score0.00339EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2026/06/09 2:0 p.m.15 views

Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

...

7.8CVSS5.4AI score0.00298EPSS
SaveExploits0
CVE
CVE
added 2026/06/09 12:57 p.m.52 views

CVE-2026-11786

CVE-2026-11786 affects the 389 Directory Server (389-ds-base). The issue is a heap-out-of-bounds read in the LDIF parser when processing attribute types with trailing semicolons during database import, traced to ldif parser function str2entry_state_information_from_type(). Consequences are descri...

6.5CVSS5.6AI score0.0016EPSS
SaveExploits0References2Affected Software3
Github Security Blog
Github Security Blog
added 2026/06/09 9:32 a.m.6 views

Apache Answer has an Unrestricted Upload of File with Dangerous Type vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. A crafted TIFF image could trigger excessive memory allocation during image decoding, allowing an authenticated user to cause the server process to crash. Users are...

6.5CVSS5.4AI score0.00479EPSS
SaveExploits0References6Affected Software1
NVD
NVD
added 2026/06/09 5:16 a.m.16 views

CVE-2026-41006

Spring HATEOAS's internal PropertyUtils.createObjectFromProperties method, used by the Collection+JSON and UBER media type deserializers, performs bean property binding via reflection without consulting Jackson access-control annotations. Affected versions: Spring HATEOAS 1.5.0 through 1.5.6; 2.3...

7.5CVSS0.00276EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/06/09 12:33 a.m.15 views

EUVD-2026-35270

Use after free in PDF in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. Chromium security severity: High...

8.8CVSS6AI score0.00224EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/06/09 12:0 a.m.21 views

PT-2026-47871

Name of the Vulnerable Software and Affected Versions Windows Universal Disk Format File System Driver UDFS affected versions not specified Description An elevation-of-privilege issue exists in the Windows Universal Disk Format File System Driver UDFS, which allows attackers to gain higher...

7.8CVSS5.2AI score0.00298EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/06/09 12:0 a.m.18 views

PT-2026-47870

Name of the Vulnerable Software and Affected Versions Windows Universal Disk Format File System Driver UDFS affected versions not specified Description An elevation of privilege issue exists in the Windows Universal Disk Format File System Driver UDFS related to a legacy file-system problem where...

7.8CVSS5.2AI score0.00339EPSS
SaveExploits0References6
Packet Storm News
Packet Storm News
added 2026/06/09 12:0 a.m.14 views

FreeBSD Security Advisory - FreeBSD-SA-26:32.elf

FreeBSD Security Advisory - The ELF image activator cleared per-process ASLR preference flags for setuid binaries after the code that computes the PIE base address, rather than before. As a result, a user-requested ASLR disable was still in effect at the point where the base address was chosen...

5.5AI score0.00106EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/06/09 12:0 a.m.22 views

PT-2026-47776

Name of the Vulnerable Software and Affected Versions 389 Directory Server affected versions not specified Description A flaw exists in the LDIF parser where it reads past the end of a heap buffer when processing attribute types that contain trailing semicolons during a database import. This...

6.5CVSS5.5AI score0.00291EPSS
SaveExploits0References46
CNNVD
CNNVD
added 2026/06/09 12:0 a.m.18 views

Adobe Format Plugins 安全漏洞

Adobe Format Plugins is a format plugin developed by Adobe Inc. Versions of Adobe Format Plugins prior to 1.1.2 contained security vulnerabilities; these vulnerabilities were caused by heap buffer overflows, which could allow arbitrary code to be executed in the current user environment...

7.8CVSS7.8AI score0.00281EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/06/09 12:0 a.m.24 views

GPAC MP4Box 处理逻辑错误漏洞

GPAC is an open-source multimedia framework developed by GPAC. Version 2.4 of GPAC contains a security vulnerability. This vulnerability stems from a floating-point exception in the gfopusparsepacketheader function, which could allow attackers to cause denial-of-service attacks through specially...

6.5CVSS5.9AI score0.00296EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2026/06/09 12:0 a.m.27 views

Apache Answer 代码问题漏洞

Apache Answer is a community platform of the Apache Foundation in the United States. Versions of Apache Answer 2.0.0 and earlier had code vulnerabilities. These vulnerabilities stemmed from insufficient restrictions on the upload of dangerous types of files. Custom TIFF images might trigger...

6.5CVSS5.4AI score0.00479EPSS
SaveExploits0References2
Rows per page
Query Builder