CVE-2026-96959

The .NET framework is vulnerable to a Denial-of-Service attack due to the allocation of resources without limits or throttling . An unauthorized attacker can exploit this flaw over a network to disrupt service. This vulnerability is part of a broader set of issues identified in Microsoft Develope...

EUVD-2026-100280

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network...

CVE-2026-96850

A vulnerability in Windows Modern Device Management (MDM) involving the use of uninitialized resource (CWE-908) and improper null termination (CWE-170) allows an authorized attacker to disclose information locally . The vulnerability has a CVSS 3.1 base score of 5.5 with a local attack vector and...

CVE-2026-87702

A vulnerability in Windows Resource Management (MRM) involving an integer overflow or wraparound allows an authorized attacker to achieve local privilege elevation . The vulnerability is characterized by a high base severity score of 7.8. No specific patch versions, workarounds, or exploit detail...

CVE-2026-83695

A vulnerability in the Windows Event Logging Service involves the use of uninitialized resource (CWE-908). This flaw allows an authorized attacker to perform a local information disclosure , potentially revealing sensitive data on the system. The CVSS 3.1 score is 5.5 (Medium). No specific exploi...

CVE-2026-70072

A vulnerability in Windows Netlogon allows an authorized attacker to perform a denial of service over a network. The root cause is the allocation of resources without limits or throttling (CWE-770). The impact is high availability disruption. Remediation via an official fix is available through M...

CVE-2026-96849

A use of uninitialized resource vulnerability in Windows Kernel-Mode Drivers allows an authorized attacker to perform a local information disclosure . The vulnerability is associated with CWE-904 . No specific software versions, root cause details, or exploit links are provided in the documentati...

CVE-2026-96236

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...

CVE-2026-96236

A Denial of Service vulnerability exists in ASP.NET Core due to the allocation of resources without limits or throttling . An unauthorized attacker can exploit this flaw over a network to disrupt service availability. Remediation is provided via an official fix .

EUVD-2026-99753

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...

EUVD-2026-99691

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...

EUVD-2026-99697

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...

CVE-2026-70159

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...

CVE-2026-85843

The Windows Background Intelligent Transfer Service (BITS) is vulnerable to a local privilege escalation flaw due to the use of uninitialized resource (CWE-908). This vulnerability allows an authorized attacker to elevate their privileges on the local system. No specific details regarding affecte...

CVE-2026-85322

A use of uninitialized resource vulnerability exists in the Windows Routing and Remote Access Service (RRAS) . This flaw allows an unauthorized attacker to disclose information over a network. The vulnerability has been assigned a CVSS v3.1 base score of 7.5 (High) . No specific exploit details o...

CVE-2026-70284

The Windows Win32 Kernel Subsystem contains a vulnerability involving the use of uninitialized resource (CWE-908). This flaw allows an authorized attacker to perform a local information disclosure attack. While the impact is classified as high for confidentiality, it does not affect integrity or ...

cve-2024-38821

cve-2024-38821 Analysis: https://www.deep-kondah.com/spring-webflux-static-resource-access-vulnerability-cve-2024-38821-explained/...

CVE-2026-77459

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.10.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, Argo CD creates PostDelete resource hooks without applying the AppProject destination and resource authorization checks used during ordinary synchronization. The omitt...

CVE-2026-95502

Grafana's Git Sync (provisioning) is vulnerable to memory exhaustion due to uncontrolled resource consumption. A malicious Git server can trigger this by returning oversized or highly compressed responses . Exploitation requires an administrator to have configured Git Sync to communicate with the...

CVE-2026-93294

The Azure Monitor data source contains a vulnerability where a user with query access can leverage its resource proxy as an unintended proxy. This allows the user to call Azure Resource Manager APIs beyond the scope required by Grafana , performing actions using the data source's Azure identity ....