CVE-2026-69455

CVE-2026-69455 is a heap-based buffer overflow in Windows Remote Access Connection Manager that allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 score is 7.8 (HIGH) with a local attack vector, low complexity, and low required privileges, resulting in high impact ...

EUVD-2026-72979

Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...

Windows Remote Access Connection Manager Tampering Vulnerability

Missing authorization in Windows Remote Access Connection Manager allows an authorized attacker to perform tampering locally...

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Remote Code Execution in Windows Routing and Remote Access Service RRAS allows attacker to gain an unauthorized access to victim's machine...

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Remote Code Execution in Windows Routing and Remote Access Service RRAS allows attacker to gain an unauthorized access to victim's machine...

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Remote Code Execution in Windows Routing and Remote Access Service RRAS allows attacker to gain an unauthorized access to victim's machine...

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...

Microsoft Windows SCSI Class System File Information Disclosure Vulnerability

Integer underflow wrap or wraparound in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information over a network...

PowerJob List - Authorization Bypass

PowerJob = 5.1.2 contains a broken access control caused by missing authorization in /user/list function, letting remote attackers access unauthorized resources, exploit requires no special privileges. id: CVE-2025-11580 info: name: PowerJob List - Authorization Bypass author: DhiyaneshDk severit...

NETworkManager v2026.9.7.0

NETworkManager A powerful open-source tool for managing networks and troubleshooting network problems! Streamline and simplify your network administration and troubleshooting with NETworkManager. Connect, monitor, and troubleshoot your network and server infrastructure using built-in tools like...

PT-2026-87372

Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...

ROS-20260908-73-0092

The vulnerability of the Repo.blame and Repo.blameincremental functions in the GitPython library’s unsafegitrevisionoptions protection mechanism is related to the implementation or modification of arguments. Exploiting this vulnerability could allow an attacker, operating remotely, to gain...

CVE-2026-71343: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to execute code locally...

PT-2026-87092

Ivanti Patches 10 Flaws Across EPMM, Neurons ITSM and Sentry Including Unauthenticated RCE https://t.co/gNAWhXgUsO "The EPMM advisory addresses CVE-2026-18851, a high-severity missing authorization vulnerability with a CVSS score of 8.8. Classified as CWE-862…"...

The vulnerability of the freerdp-proxy RDP client component, FreeRDP, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the freerdp-proxy RDP client component, FreeRDP, is related to the disclosure of information. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

ROS-20260908-73-0024

The vulnerability in perl-Convert-PEM is related to the use of insufficiently random values. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

CVE-2026-71351: Double Free

Double free in Windows Routing and Remote Access Service RRAS allows an authorized attacker to elevate privileges locally...

CVE-2026-70570: Use After Free

Remote Code Execution in Windows Routing and Remote Access Service RRAS allows attacker to gain an unauthorized access to victim's machine...

PT-2026-87881

Missing authorization in Windows Remote Access Connection Manager allows an authorized attacker to perform tampering locally...

PT-2026-87856

Name of the Vulnerable Software and Affected Versions Windows Routing and Remote Access Service RRAS affected versions not specified Description A null pointer dereference occurs in the Windows Routing and Remote Access Service RRAS, which allows an authorized attacker to cause a denial-of-servic...