CVE-2026-78403 Unauthenticated Stack Buffer Overflow in Sentinel Keys Server

Stack-based buffer overflow and missing authorization vulnerability in Thales Sentinel Keys Server on Windows allows Overflow Buffers. Sentinel Keys Server does not check the length of the first field in the HTTP request. An attacker may craft an HTTP request and send it to Sentinel Keys Server. ...

CVE-2026-78403 Unauthenticated Stack Buffer Overflow in Sentinel Keys Server

Stack-based buffer overflow and missing authorization vulnerability in Thales Sentinel Keys Server on Windows allows Overflow Buffers. Sentinel Keys Server does not check the length of the first field in the HTTP request. An attacker may craft an HTTP request and send it to Sentinel Keys Server. ...

CVE-2026-78402 Stack Buffer Overflow in Sentinel Keys Server

Stack-based buffer overflow and out-of-bounds write vulnerability in Thales Sentinel Keys Server on Windows allows Overflow Buffers. Sentinel Keys Server does not check the length of the first field in the input message. A local attacker may craft an input and send it to Sentinel Keys Server. It...

CVE-2026-78402

The Thales Sentinel Keys Server on Windows (versions lower than 1.3.8.0 ) is vulnerable to a stack-based buffer overflow and out-of-bounds write . The root cause is that the server fails to validate the length of the first field in an input message. A local attacker can craft a malicious input to...

EUVD-2026-114363

Stack-based buffer overflow and out-of-bounds write vulnerability in Thales Sentinel Keys Server on Windows allows Overflow Buffers. Sentinel Keys Server does not check the length of the first field in the input message. A local attacker may craft an input and send it to Sentinel Keys Server. It...

PT-2026-134135

Name of the Vulnerable Software and Affected Versions Thales Sentinel Keys Server versions prior to 1.3.8.0 Description A stack-based buffer overflow and missing authorization issue exists in the HTTP handler of the software on Windows. The server fails to validate the length of the first field i...

CVE-2026-78402: Thalesgroup Sentinel Keys Server: Stack-based buffer overflow and out-of-bounds write vulnerability in Thales Sentinel Keys Server on Windows allows…

Stack-based buffer overflow and out-of-bounds write vulnerability in Thales Sentinel Keys Server on Windows allows Overflow Buffers. Sentinel Keys Server does not check the length of the first field in the input message. A local attacker may craft an input and send it to Sentinel Keys Server. It...

PT-2026-134134

Stack-based buffer overflow and out-of-bounds write vulnerability in Thales Sentinel Keys Server on Windows allows Overflow Buffers. Sentinel Keys Server does not check the length of the first field in the input message. A local attacker may craft an input and send it to Sentinel Keys Server. It...

CVE-2026-78403: Thalesgroup Sentinel Keys Server: Stack-based buffer overflow and missing authorization vulnerability in Thales Sentinel Keys Server on Windows allows…

Stack-based buffer overflow and missing authorization vulnerability in Thales Sentinel Keys Server on Windows allows Overflow Buffers. Sentinel Keys Server does not check the length of the first field in the HTTP request. An attacker may craft an HTTP request and send it to Sentinel Keys Server. ...

Exploit for Argument Injection in Microsoft

CVE-2026-97798 — WER Time Travel Debugging argument injection...

CVE-2026-112357

GFI KerioConnect Kerio Connect Outlook Connector Offline Edition, 'KOFF', before 10.0.9 Patch 2 contains a local privilege escalation vulnerability caused by weak installer permissions that leave the product directory writable by the built-in Users group. A local non-administrative attacker can...

CVE-2026-112357 GFI KerioConnect KOFF < 10.0.9p2 Privilege Escalation

GFI KerioConnect Kerio Connect Outlook Connector Offline Edition, 'KOFF', before 10.0.9 Patch 2 contains a local privilege escalation vulnerability caused by weak installer permissions that leave the product directory writable by the built-in Users group. A local non-administrative attacker can...

EUVD-2026-112140

GFI KerioConnect Kerio Connect Outlook Connector Offline Edition, 'KOFF', before 10.0.9 Patch 2 contains a local privilege escalation vulnerability caused by weak installer permissions that leave the product directory writable by the built-in Users group. A local non-administrative attacker can...

CVE-2026-112357

GFI KerioConnect (Kerio Connect) Outlook Connector (Offline Edition) , 'KOFF', versions before 10.0.9 Patch 2 is vulnerable to a local privilege escalation flaw. The root cause is weak installer permissions that allow the built-in Users group to write to the product directory. A local non-adminis...

GFI KerioConnect permission and access control issue vulnerability

Versions prior to GFI KerioConnect Outlook Connector Offline Edition 10.0.9 Patch 2 contain a vulnerability related to permission and access control issues. This vulnerability stems from insufficient permissions in the installer, allowing the product directory to be written to by the built-in Use...

CVE-2026-112357: Incorrect Default Permissions

GFI KerioConnect Kerio Connect Outlook Connector Offline Edition, 'KOFF', before 10.0.9 Patch 2 contains a local privilege escalation vulnerability caused by weak installer permissions that leave the product directory writable by the built-in Users group. A local non-administrative attacker can...

PT-2026-128262

GFI KerioConnect Kerio Connect Outlook Connector Offline Edition, 'KOFF', before 10.0.9 Patch 2 contains a local privilege escalation vulnerability caused by weak installer permissions that leave the product directory writable by the built-in Users group. A local non-administrative attacker can...

CVE-2026-92376

Improper authentication in the inter-process communication IPC mechanism of TeamViewer Remote Management Monitoring for Windows prior to version 26.10.1 allows a local authenticated attacker with low privileges to impersonate the IPC broker and cause the Monitoring service to execute arbitrary co...

CVE-2026-92377

Improper access control in the Patch Management update mechanism of TeamViewer Full Client and Host for Windows prior to version 15.82 allows a local authenticated attacker with low privileges to supply a signed executable through a forged IPC response and cause it to load a malicious DLL from a...

CVE-2026-92377 Local Privilege Escalation via DLL Sideloading in TeamViewer Patch Management for Windows

Improper access control in the Patch Management update mechanism of TeamViewer Full Client and Host for Windows prior to version 15.82 allows a local authenticated attacker with low privileges to supply a signed executable through a forged IPC response and cause it to load a malicious DLL from a...