68754 matches found
CVE-2026-70307: Use After Free
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...
CVE-2026-72779: Incomplete List of Disallowed Inputs
Craft CMS 5.0.0-RC1 before 5.10.6 and 4.0.0-RC1 before 4.18.2 contain an arbitrary file read vulnerability. The create Twig function restricts class instantiation using a 5-entry blocklist that does not include SplFileObject, allowing an authenticated administrator with allowAdminChanges=true to...
PT-2026-70984
Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels RAS Client. An attacker must first obtain the ability to execute low-privileged cod...
PT-2026-70387
Name of the Vulnerable Software and Affected Versions Microsoft Azure Kubernetes Service affected versions not specified Description Missing authentication for a critical function allows an unauthorized attacker to elevate privileges over a network. Recommendations At the moment, there is no...
VulnCheck KEV: CVE-2026-68820
Microsoft Windows Ancillary Function Driver for WinSock contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally...
CVE-2026-68820: Use After Free
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...
PT-2026-70746
Name of the Vulnerable Software and Affected Versions Windows Ancillary Function Driver for WinSock affected versions not specified Description A use-after-free condition in the Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. Use-after-fr...
CVE-2026-53415: Use After Free
Use after Free in the annotator function of Zoom Clients may allow a meeting participant to achieve remote code execution of another participant via network access...
PT-2026-70261
Name of the Vulnerable Software and Affected Versions Zoom Clients affected versions not specified Description A Use after Free issue exists in the annotator function. This flaw allows a meeting participant to achieve remote code execution on another participant's system via network access. Use...
CVE-2026-53414: Buffer Over-read
Missing bounds check in the annotator function of Zoom Clients allows buffer over-read, which may allow a meeting participant to conduct a denial of service on another participant via network access...
Linux Distros Unpatched Vulnerability : CVE-2026-71218
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in iperf3. A remote unauthenticated attacker can exploit a vulnerability in the JSONread function, which accepts a peer-controlled message leng...
Zoom Workplace < 7.0.6 / 7.1.0 Vulnerability (ZSB-26016)
The version of Zoom Workplace installed on the remote host is prior to 7.0.6 / 7.1.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-26016 advisory. - Missing bounds check in the annotator function of Zoom Clients allows buffer over-read, which may allow a meeting...
Zoom Workplace < 7.0.6 / 7.1.0 Vulnerability (ZSB-26015)
The version of Zoom Workplace installed on the remote host is prior to 7.0.6 / 7.1.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-26015 advisory. - Missing bounds check in the annotator function of Zoom Clients allows buffer over-write, which may allow a meeting...
CVE-2026-53413: Out-of-bounds Write
Missing bounds check in the annotator function of Zoom Clients allows buffer over-write, which may allow a meeting participant to achieve remote code execution of another participant via network access...
PT-2026-70259
Name of the Vulnerable Software and Affected Versions Zoom Clients affected versions not specified Description A missing bounds check in the annotator function allows a buffer over-write. This issue occurs due to a 32-bit width x height overflow in a native video receive worker. A meeting...
PT-2026-70982
Name of the Vulnerable Software and Affected Versions Parallels RAS Client affected versions not specified Description A local privilege escalation issue exists in the RAS RDP Backend Service due to an exposed dangerous function. An attacker who has already obtained the ability to execute...
PT-2026-70983
Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels RAS Client. An attacker must first obtain the ability to execute low-privileged cod...
PT-2026-70250
Name of the Vulnerable Software and Affected Versions Vim versions 9.2.0469 through 9.2.0842 Description The popup mark opacity zindex function in src/popupwin.c can use a negative w winrow for a text-property-anchored popup with clipwindow and opacity. This leads to indexing before the screen...
Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability
Microsoft Windows Ancillary Function Driver for WinSock contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally...
Zoom Workplace < 7.0.6 / 7.1.5 Vulnerability (ZSB-26017)
The version of Zoom Workplace installed on the remote host is prior to 7.0.6 / 7.1.5. It is, therefore, affected by a vulnerability as referenced in the ZSB-26017 advisory. - Use after Free in the annotator function of Zoom Clients may allow a meeting participant to achieve remote code execution ...