35639 matches found
CVE-2026-62705 Microsoft Brokering File System Elevation of Privilege Vulnerability
...
CVE-2026-62702
CVE-2026-62702 is a denial-of-service vulnerability in the Windows Graphics Kernel caused by a null pointer dereference that can be triggered over a network. Per NVD, CVSS v3.1: AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H (base 8.6, HIGH) with impact on availability. Microsoft MSRC lists this vulnerabili...
CVE-2026-62693
Technical details beyond the brief description are not publicly provided in the supplied documents. No concrete information on affected components, root cause specifics, or remediation is available here; monitor for official updates.
CVE-2026-61934
CVE-2026-61934 details (from provided documents): A use-after-free bug in the Windows Bind Filter Driver enables a locally authenticated attacker to achieve privilege escalation. The vulnerability is associated with local attack vector and requires low attack complexity with low privileges, with ...
CVE-2026-61937 Windows HTTP.sys Elevation of Privilege Vulnerability
...
CVE-2026-61937 Windows HTTP.sys Elevation of Privilege Vulnerability
...
CVE-2026-61346 Windows Graphics Kernel Elevation of Privilege Vulnerability
...
CVE-2026-24911
Stack-based buffer overflow for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially...
CVE-2026-20752
Improper authentication for some IntelR PROSet/Wireless WiFi Software within Ring 0: Kernel may allow an information disclosure. System software adversary with a privileged user combined with a low complexity attack may enable data exposure. This result may potentially occur via local access when...
CVE-2026-73077
Vim is an open source, command line text editor. Prior to 9.2.0839, the runtime/ftplugin/sh.vim, runtime/ftplugin/zsh.vim, and runtime/ftplugin/ps1.vim filetype plugins pass attacker-controlled Visual-mode selections from K through keywordprg commands without safely separating shell arguments...
CVE-2026-73078
Vim is an open source, command line text editor. Prior to 9.2.0840, runtime/plugin/netrwPlugin.vim loads netrw and runtime/pack/dist/opt/netrw/autoload/netrw.vim constructs Bookmarks, History, and Targets menu entries by interpolating attacker-controlled directory paths into executed :menu...
EUVD-2026-56233
Vim is an open source, command line text editor. Prior to 9.2.0839, the runtime/ftplugin/sh.vim, runtime/ftplugin/zsh.vim, and runtime/ftplugin/ps1.vim filetype plugins pass attacker-controlled Visual-mode selections from K through keywordprg commands without safely separating shell arguments...
CVE-2026-73077
Vim is an open source, command line text editor. Prior to 9.2.0839, the runtime/ftplugin/sh.vim, runtime/ftplugin/zsh.vim, and runtime/ftplugin/ps1.vim filetype plugins pass attacker-controlled Visual-mode selections from K through keywordprg commands without safely separating shell arguments...
CVE-2026-66484
A flaw was found in GNU cpio. This vulnerability, known as Path Traversal, occurs during the extraction of tar archives in copy-in mode when the --no-absolute-filenames option is used. A remote attacker could craft a malicious tar archive containing a hard-link entry with an absolute path. This...
Windows HTTP.sys Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows HTTP.sys allows an authorized attacker to elevate privileges locally...
CVE-2026-68326
A flaw was found in the Linux kernel's mwifiex Wi-Fi driver. A malicious or malfunctioning mwifiex device, operating in Access Point AP or micro-AP uAP mode, can provide a crafted event with an invalid length value. This unchecked length can lead to an out-of-bounds read or integer underflow,...
CVE-2026-72559
A stored cross-site scripting vulnerability in HortusFox 5.9 allows authenticated workspace members to inject persistent JavaScript into plant notes via Parsedown rendered without safe mode. Notes are rendered unescaped in the browser of every user who views the affected plant. An attacker can us...
CVE-2026-72559 Daniel Brendel HortusFox - Cross-Site Scripting
A stored cross-site scripting vulnerability in HortusFox 5.9 allows authenticated workspace members to inject persistent JavaScript into plant notes via Parsedown rendered without safe mode. Notes are rendered unescaped in the browser of every user who views the affected plant. An attacker can us...
Security Bulletin: Vulnerability in OpenSSL affects IBM Netezza Appliance
Summary The OpenSSL package is used by IBM Netezza Appliance . IBM Netezza Appliance has addressed the applicable CVE CVE-2026-28386 Vulnerability Details CVEID:CVE-2026-28386 DESCRIPTION: Issue summary: Applications using AES-CFB128 encryption or decryption on systems with AVX-512 and VAES suppo...