302015 matches found
CVE-2026-69546: Use After Free
Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network...
CVE-2026-78510: Heap-based Buffer Overflow
A remote code execution vulnerability exists when Microsoft Office improperly validates input before loading dynamic link library DLL files. An attacker who successfully exploited this vulnerability could take control of an affected system. An attacker could then install programs; view, change, o...
CVE-2026-69724: Missing Authorization
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
CVE-2026-78507: Use After Free
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
Microsoft Windows IKEv2 AES-GCM Decryption Integer Underflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. Authentication is not required to exploit this vulnerability, but only systems with specific IPsec configurations are vulnerable. The specific flaw exists within the IKEEXT service...
Koha Eval Code Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Koha. Authentication is required to exploit this vulnerability. The specific flaw exists within the web service, which listens on TCP port 8081 by default. The issue results from the lack of proper...
ALSA-2026:64824 Important: redis security, bug fix, and enhancement update
Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, ...
KB5122876: Windows 10 version 1809 / Windows Server 2019 Security Update (September 2026)
The remote Windows host is missing security update 5122876. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. CVE-2026-68839 - Integer underflow wrap or...
CVE-2026-69465: Missing Authorization
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
ROS-20260908-73-0011
The vulnerability in Java 1.8.0-openjdk is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20260908-73-0012
The vulnerability in Java-11-openjdk is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...
Important: redis:6 security update
Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, ...
PT-2026-88712
Type confusion in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
PT-2026-88544
Memory corruption in Codecs in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
PT-2026-87716
Concurrent execution using shared resource with improper synchronization 'race condition' in DNS Server allows an unauthorized attacker to execute code over a network...
CVE-2026-69782: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent execution using shared resource with improper synchronization 'race condition' in DNS Server allows an unauthorized attacker to execute code over a network...
CVE-2026-65772: Deserialization of Untrusted Data
Deserialization of untrusted data in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network...
CVE-2026-72987: Use After Free
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network...