EUVD-2026-73482

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows TCP/IP allows an authorized attacker to elevate privileges locally...

EUVD-2026-73255

Use after free in IP Helper allows an unauthorized attacker to execute code over a network...

CVE-2026-72981

CVE-2026-72981 is a use-after-free vulnerability in Microsoft's IP Helper component that allows an unauthorized attacker to achieve remote code execution over a network. The Microsoft CNA assigns a CVSS 3.1 score of 8.1 (HIGH) with a vector of AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating that ...

CVE-2026-69757

CVE-2026-69757 is a use-after-free vulnerability in Windows TCP/IP that allows an authorized attacker to elevate privileges over a network. The attack requires low privileges and user interaction , with high complexity , yet yields high impact across confidentiality, integrity, and availability (...

EUVD-2026-73047

Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network...

EUVD-2026-73023

Missing release of memory after effective lifetime in Windows TCP/IP allows an unauthorized attacker to deny service over a network...

CVE-2026-69588

CVE-2026-69588 affects Windows TCP/IP and is caused by a missing release of memory after its effective lifetime (a memory leak). An unauthorized network-based attacker with no privileges and no user interaction can trigger a denial of service , rated CVSS 7.5 (High) with high availability impact....

EUVD-2026-73238

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows TCP/IP allows an authorized attacker to elevate privileges locally...

CVE-2026-69404

CVE-2026-69404 is a race condition in Windows TCP/IP caused by concurrent execution using a shared resource with improper synchronization, allowing an authorized local attacker (low privileges required) to elevate privileges . The CVSS 3.1 score is 7.0 (HIGH) with a local attack vector, high comp...

K000163233: BIND vulnerability CVE-2026-10822

Security Advisory Description If BIND encounters a particular invalid data structure in a DNS record, it will accept the invalid data, and may subsequently abort and exit. BIND will first need to store a DNS record for a key KEY, DNSKEY, etc.. That key must specify a PRIVATEDNS algorithm 253, and...

K000163234: BIND vulnerability CVE-2026-11331

Security Advisory Description An attacker who knows or guesses that a resolver uses RPZ with wildcard CNAME policies can craft query names long enough to trigger a NAMETOOLONG error condition during RPZ processing. This is not handled correctly and may lead to defeating the RPZ rule. It also may...

Windows TCP/IP Security Feature Bypass Vulnerability

Improper validation of consistency within input in Windows TCP/IP allows an unauthorized attacker to bypass a security feature over a network...

Windows TCP/IP Elevation of Privilege Vulnerability

Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network...

Windows TCP/IP Denial of Service Vulnerability

Missing release of memory after effective lifetime in Windows TCP/IP allows an unauthorized attacker to deny service over a network...

IP Helper Remote Code Execution Vulnerability

Use after free in IP Helper allows an unauthorized attacker to execute code over a network...

Windows TCP/IP Elevation of Privilege Vulnerability

Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network...

Windows TCP/IP Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows TCP/IP allows an authorized attacker to elevate privileges locally...

Windows TCP/IP Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows TCP/IP allows an authorized attacker to elevate privileges locally...

kernel: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu()

A flaw was found in the Linux kernel's Virtual Extensible LAN VXLAN module. This vulnerability occurs because a cached IP header pointer is improperly reused after a Path Maximum Transmission Unit PMTU check. When the packet's head is modified during the PMTU check, the old cached IP header point...

CareCam Pro IP Cameras

ADVISORY SUMMARY Successful exploitation of this vulnerability could allow an attacker to take full control of the device. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Minimize network exposure for all control...