166 matches found
CVE-2021-1675
CVE-2021-1675 Fix without disabling Print Spooler Script checks the existance of de CVE-2021-1675 fix from Microsoft and removes members from the "Pre-Windows 2000 Compatible Access" group on the domain. Issues: With an empty "Pre-Windows 2000 Compatible Access" group the following things stop...
Security Bulletin:Vulnerabilities exists in IBM Netezza Appliance
Summary Vulnerabilities identified in IBM Netezza Appliance have been addressed in the latest security patch release of NPS. Vulnerability Details CVEID:CVE-2026-11940 DESCRIPTION: tarfile.extractall with the 'data' or 'tar' filter could be bypassed by a crafted archive where a hardlink reference...
CVE-2026-96246
Out-of-bounds read in Network Policy Server NPS allows an unauthorized attacker to disclose information over a network...
CVE-2026-85811
Use after free in Network Policy Server NPS allows an unauthorized attacker to execute code over an adjacent network...
CVE-2026-85806
Integer underflow wrap or wraparound in Network Policy Server NPS allows an unauthorized attacker to execute code over a network...
CVE-2026-85799
Use after free in Network Policy Server NPS allows an unauthorized attacker to execute code over a network...
CVE-2026-85371
Use after free in Network Policy Server NPS allows an unauthorized attacker to execute code over a network...
CVE-2026-83655
Out-of-bounds read in Network Policy Server NPS allows an unauthorized attacker to deny service over a network...
CVE-2026-70207
Heap-based buffer overflow in Network Policy Server NPS allows an authorized attacker to execute code over a network...
CVE-2026-100222
Heap-based buffer overflow in Network Policy Server NPS allows an unauthorized attacker to execute code over a network...
CVE-2026-100222
A heap-based buffer overflow vulnerability exists in the Network Policy Server (NPS) component of Microsoft Windows. This flaw allows an unauthorized attacker to execute arbitrary code over a network. The vulnerability is associated with a CVSS score of 9.8, indicating a critical risk level where...
CVE-2026-70207
A heap-based buffer overflow vulnerability exists in Network Policy Server (NPS) . This flaw allows an authorized attacker to achieve remote code execution over a network. The vulnerability is classified with a CVSS 3.1 base score of 7.5 (High) , indicating significant impact on confidentiality, ...
CVE-2026-96246
An out-of-bounds read vulnerability exists in Network Policy Server (NPS) . This flaw allows an unauthorized attacker to disclose information over a network. The vulnerability is associated with CWE-125 and has a HIGH CVSSv3.1 severity score of 7.5 . No specific root cause, affected versions, or ...
CVE-2026-85811
A Use after free vulnerability exists in Network Policy Server (NPS) , which could allow an unauthorized attacker to execute code over an adjacent network. The vulnerability is classified as having a High severity base score of 7.5. No specific versions, affected components, or remediation steps ...
CVE-2026-85806
A critical integer underflow (wrap or wraparound) vulnerability exists in the Network Policy Server (NPS) . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is rated as CRITICAL with a CVSS 3.1 score of 9.80 . While the documents confirm...
CVE-2026-85799
A Use after free vulnerability exists in the Network Policy Server (NPS) . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is confirmed with a CVSS 3.1 base score of 8.1 (High) , indicating significant potential impact on confidentialit...
CVE-2026-85371
A Use after free vulnerability exists in Network Policy Server (NPS) , which could allow an unauthorized attacker to execute code over a network . The vulnerability is associated with CWE-416 and has a CVSS 3.1 base score of 8.1 . No specific affected versions, root causes, or exploit links are p...
CVE-2026-83655
The Network Policy Server (NPS) is affected by an out-of-bounds read vulnerability (CWE-125). This flaw allows an unauthorized attacker to cause a denial of service (DoS) over a network. The vulnerability has a High severity rating with a CVSS 3.1 score of 7.5 . No specific exploit details or inf...
