36386 matches found
CVE-2026-109950
FreeRDP versions 3.0.0 through 3.31.x are vulnerable to a heap out-of-bounds read vulnerability when processing RD Gateway messages. The root cause is a mismatch in message lengths where an attacker controlling the gateway can set MsgBytes significantly larger than the NDR string ActualCount with...
EUVD-2026-98393
A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API All versions V3.3.62. Affected applications do not properly redact PLC restore passwords from HTTP error exception messages. This could allow an attacker with access to logs or other diagnostic output to obtai...
EUVD-2026-98043
Frappe ERPNext before 15.119.1 and 16.x before 16.32.0 contains a server-side template injection vulnerability because user-controlled message fields are not validated before template rendering, allowing expressions to run in an unrestricted context. Authenticated attackers holding a common...
CVE-2026-85860: Use After Free
Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-100202: Use After Free
Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network...
CVE-2026-85334: Out-of-bounds Read
Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network...
CVE-2026-108460: Use After Free
Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network...
CVE-2026-96921: Access of Resource Using Incompatible Type
Access of resource using incompatible type 'type confusion' in Windows Message Queuing Queue Manager allows an authorized attacker to disclose information locally...
CVE-2026-85874: Use After Free
Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to execute code locally...
PT-2026-111630
Name of the Vulnerable Software and Affected Versions SFTPGo versions prior to 2.7.5 Description An authenticated SSH user can send a malformed protocol message during the channel opening process. This action triggers an unhandled error that terminates the server process, resulting in a denial of...
PT-2026-112724
Name of the Vulnerable Software and Affected Versions Windows Message Queuing Queue Manager affected versions not specified Description An out-of-bounds read in the Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network. An out-of-bounds read...
Microsoft Windows: CVE-2026-100202: Windows Message Queuing Queue Manager Remote Code Execution Vulnerability
Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-96921: Windows Message Queuing Queue Manager Information Disclosure Vulnerability
Access of resource using incompatible type 'type confusion' in Windows Message Queuing Queue Manager allows an authorized attacker to disclose information locally...
Microsoft Windows: CVE-2026-85874: Windows Message Queuing Queue Manager Remote Code Execution Vulnerability
Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to execute code locally...
PT-2026-112834
Name of the Vulnerable Software and Affected Versions Windows Message Queuing Queue Manager affected versions not specified Description A use after free issue in the Windows Message Queuing Queue Manager allows an authorized attacker to execute code locally. This flaw can also be leveraged by...
Microsoft Windows: CVE-2026-85860: Windows Message Queuing Queue Manager Elevation of Privilege Vulnerability
Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to elevate privileges locally...
PT-2026-112820
Name of the Vulnerable Software and Affected Versions Windows Message Queuing Queue Manager affected versions not specified Description A null pointer dereference in the Windows Message Queuing Queue Manager allows an authorized attacker to cause a denial of service over a network. A null pointer...
PT-2026-112821
Name of the Vulnerable Software and Affected Versions Windows Message Queuing Queue Manager affected versions not specified Description A use-after-free condition in the Windows Message Queuing Queue Manager allows an authorized attacker to elevate privileges locally. Use-after-free is a memory...
PT-2026-112022
Name of the Vulnerable Software and Affected Versions Windows Message Queuing affected versions not specified Description A use after free issue in Windows Message Queuing allows an unauthorized attacker to execute code over a network. Use after free is a memory corruption flaw that occurs when a...
PT-2026-116237
Уязвимость очереди сообщений Message Queuing операционных систем Windows связана с использованием памяти после освобождения. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код...