186680 matches found
CVE-2026-110210
Phase Console through 2.77.3 contains a missing authorization vulnerability that allows organisation members without Secrets read permission to read secret history via the secretHistory GraphQL query. Attackers holding an environment key can supply a known secret identifier to retrieve encrypted...
CVE-2026-108466
Out-of-bounds read in Windows Kernel allows an unauthorized attacker to deny service over a network...
CVE-2026-108127
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
CVE-2026-108128
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
CVE-2026-108129
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
CVE-2026-105726
Out-of-bounds read in Microsoft Defender allows an authorized attacker to disclose information locally...
CVE-2026-105718
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...
CVE-2026-105595
Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to execute code over a network...
CVE-2026-105004
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...
CVE-2026-103856
Adobe Framemaker is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2026-103857
Adobe Framemaker is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2026-103569
Out-of-bounds read in Windows IKE Extension allows an unauthorized attacker to disclose information over a network...
CVE-2026-103567
Buffer over-read in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally...
CVE-2026-102867
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...
CVE-2026-103553
Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-102225
Out-of-bounds read in Windows Text Shaping allows an unauthorized attacker to execute code over a network...
CVE-2026-102198
Out-of-bounds read in Windows Remote Desktop Protocol allows an authorized attacker to disclose information over a network...
CVE-2026-86016 VNote: Stored XSS via YAML Frontmatter Leading to Local File Read and Remote Exfiltration
VNote is a note-taking platform. Prior to 4.3.0, VNote uses the assignment preNode.innerHTML = pmetaData in src/data/extra/web/js/markdownit.js to insert YAML frontmatter metadata into a pre element before the protectFromXss sanitization path runs. Opening an attacker-supplied Markdown note can...
CVE-2026-86016
VNote, a note-taking platform, contains a Stored XSS vulnerability in versions prior to 4.3.0 . The root cause is located in src/data/extra/web/js/markdownit.js, where the application assigns p_metaData to preNode.innerHTML before the protectFromXss sanitization path executes. This allows an atta...
CVE-2026-86016 VNote: Stored XSS via YAML Frontmatter Leading to Local File Read and Remote Exfiltration
VNote is a note-taking platform. Prior to 4.3.0, VNote uses the assignment preNode.innerHTML = pmetaData in src/data/extra/web/js/markdownit.js to insert YAML frontmatter metadata into a pre element before the protectFromXss sanitization path runs. Opening an attacker-supplied Markdown note can...