53198 matches found
EUVD-2026-56825
Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.17.0, shutdownclientconnection in src/server/nsturnserver.c prematurely calls decquota and releases bandwidth accounting during the first-stage close of a mobility-enabled allocation while preserving the allocation,...
CVE-2026-73216 coturn: mobility disconnects bypass allocation quotas and exhaust relay capacity
Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.17.0, shutdownclientconnection in src/server/nsturnserver.c prematurely calls decquota and releases bandwidth accounting during the first-stage close of a mobility-enabled allocation while preserving the allocation,...
CVE-2026-70317
Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information locally...
CVE-2026-68803
Access of resource using incompatible type 'type confusion' in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2026-66802
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Device Health Attestation DHA allows an unauthorized attacker to execute code over a network...
CVE-2026-65785
Uncontrolled resource consumption in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network...
CVE-2026-62908
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Backup Engine allows an authorized attacker to elevate privileges locally...
CVE-2026-62910
Improper control of resource identifiers 'resource injection' in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-62820
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows DNS allows an unauthorized attacker to execute code over a network...
CVE-2026-62729
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Telephony Service allows an authorized attacker to elevate privileges locally...
CVE-2026-62709
Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally...
CVE-2026-62705
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-62690
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Push Notifications allows an authorized attacker to elevate privileges locally...
CVE-2026-62693
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...
CVE-2026-61920
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows DNS allows an authorized attacker to execute code over a network...
CVE-2026-61352
Concurrent execution using shared resource with improper synchronization 'race condition' in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
CVE-2026-59137
Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally...
CVE-2026-59136
Use of uninitialized resource in Microsoft COM for Windows allows an authorized attacker to disclose information locally...