35421 matches found
CVE-2026-83997: Use After Free
Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network...
CVE-2026-69645: Use After Free
Use after free in Windows Message Queuing allows an authorized attacker to elevate privileges locally...
CVE-2026-79574: Improper Control of Generation of Code
An issue in the gateway server of mpush v0.8.1 allows attackers to execute arbitrary code via sending a crafted broadcast message...
CVE-2026-69579: Use After Free
Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network...
PT-2026-87232
Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description An authorized attacker can disclose sensitive information over a network due to the generation of error messages that contain sensitive data. Recommendations At the moment, there is no...
PT-2026-86950
Name of the Vulnerable Software and Affected Versions SAP NetWeaver Message Server affected versions not specified Description SAP NetWeaver Message Server fails to sufficiently validate the authenticity of internal application server components during the registration process. An unauthenticated...
PT-2026-88142
A new vulnerability with increased severity was disclosed for Microsoft Windows CVE-2026-83997 https://t.co/Di6uxnlzNX...
PT-2026-87582
Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network...
PT-2026-87301
Name of the Vulnerable Software and Affected Versions Windows Message Queuing Queue Manager affected versions not specified Description An out-of-bounds read occurs in the Windows Message Queuing Queue Manager, which allows an unauthorized attacker to cause a denial of service over a network. An...
PT-2026-87655
Generation of error message containing sensitive information in Windows Error Reporting allows an authorized attacker to disclose information locally...
PT-2026-87140
An unencrypted 'pause encryption request' message causes a denial of service in the in the RS9116W/SiWx917. See vulnerability B-E10 in the related paper below...
CVE-2026-86510: Out-of-bounds Write
A vulnerability has been found in D-Link DIR-822A A101. Affected is the function tunnelsetparams of the component L2TP Control Message Parser. Such manipulation leads to out-of-bounds write. The attack can be launched remotely. The exploit has been disclosed to the public and may be used...
PT-2026-87639
Name of the Vulnerable Software and Affected Versions Windows Message Queuing affected versions not specified Description A use-after-free condition in Windows Message Queuing allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when...
EUVD-2026-72911
An issue in the gateway server of mpush v0.8.1 allows attackers to execute arbitrary code via sending a crafted broadcast message...
PT-2026-87112
An issue in the gateway server of mpush v0.8.1 allows attackers to execute arbitrary code via sending a crafted broadcast message...
CVE-2026-69303: Out-of-bounds Read
Out-of-bounds read in Push Message Routing Service allows an authorized attacker to disclose information locally...
CVE-2026-76931: Improper Neutralization of Input During Web Page Generation
The Zephyr Project Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘message’ parameter in all versions up to, and including, 3.3.205 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Custom-level...
PT-2026-87341
Name of the Vulnerable Software and Affected Versions Microsoft COM for Windows affected versions not specified Description An issue in Microsoft COM for Windows allows an authorized attacker to locally disclose sensitive information through the generation of error messages. Recommendations At th...
PT-2026-87033
The Zephyr Project Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘message’ parameter in all versions up to, and including, 3.3.205 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Custom-level...