29734 matches found
CVE-2025-27852
The locally served web site on the Garmin WDU v1 1.4.6 and v2 5.0 allows a reflected cross site scripting XSS attack. This allows an attacker on the local network segment to execute arbitrary JavaScript code within the context of the WDU webpage. Full administrator level access to the device is...
CVE-2024-48519
Buffer Overflow vulnerability in Ardupilot rover commit v.c56439b045162058df0ff136afea3081fcd06d38 allows a local attacker to cause a denial of service via the APInertialSensorADIS1647x.cpp, ArduRover, ADIS1647x Sensor component...
CVE-2026-42191
OpenTelemetry.Exporter.OpenTelemetryProtocol is the OTLP OpenTelemetry Protocol exporter implementation. From 1.8.0 to 1.15.2, the OTLP disk retry feature in OpenTelemetry.Exporter.OpenTelemetryProtocol silently fell back to Path.GetTempPath when OTELDOTNETEXPERIMENTALOTLPRETRY=disk was set but...
EUVD-2026-29710
Untrusted search path in Azure Monitor Agent allows an authorized attacker to elevate privileges locally...
EUVD-2026-29711
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally...
EUVD-2026-29683
Use after free in Data Deduplication allows an authorized attacker to elevate privileges locally...
EUVD-2026-29685
Reliance on a component that is not updateable in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...
EUVD-2026-29659
Integer underflow wrap or wraparound in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...
EUVD-2026-29677
Improper access control in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally...
EUVD-2026-29627
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...
EUVD-2026-29626
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally...
EUVD-2026-29643
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...
EUVD-2026-29623
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...
EUVD-2026-29648
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...
EUVD-2026-29575
Improper access control in Windows Filtering Platform WFP allows an authorized attacker to bypass a security feature locally...
EUVD-2026-29584
Double free in Windows Message Queuing allows an authorized attacker to elevate privileges locally...
EUVD-2026-29602
Heap-based buffer overflow in Windows Application Identity AppID Subsystem allows an authorized attacker to elevate privileges locally...
EUVD-2026-29594
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows TCP/IP allows an authorized attacker to elevate privileges locally...
EUVD-2026-29534
Improper input validation for some IntelR QAT software drivers for Windows before version 2.6 within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result...