648317 matches found
PT-2026-88126
🚨 CVE-2026-83978 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. 🎖@cveNotify...
PT-2026-88119
🚨 CVE-2026-83971 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. 🎖@cveNotify...
PT-2026-87684
🚨 CVE-2026-69727 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network. 🎖@cveNotify...
PT-2026-88121
🚨 CVE-2026-83973 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. 🎖@cveNotify...
Vulnerability of the unix_gc() component. Igor, MSG_PEEK. Let’s talk about the kernels of the Linux operating system, which allow attackers to cause a service failure.
Vulnerability of the unixgc component. Igor, MSGPEEK. The kernels of the Linux operating system are vulnerable to pointer dereferencing when the pointer has reached its expiration time. Exploiting this vulnerability can allow an attacker to cause a service failure...
PT-2026-87992
🚨 CVE-2026-78448 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. 🎖@cveNotify...
CVE-2026-52486
CVE-2026-52486 affects OpenDDS 3.33.x , where a local attacker with low privileges can cause a denial of service via the verify function in the SignedDocument module. The CVSS 3.1 score is 6.6 (Medium) , reflecting local attack vector, low complexity, and high availability impact alongside low co...
PT-2026-87904
🚨 CVE-2026-72994 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. 🎖@cveNotify...
EUVD-2026-72777
A heap overflow in the a2dpdecodersbc.cpp component of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a Denial of Service DoS via sending a crafted L2CAP packet...
CVE-2026-79376
CVE-2026-79376 affects the l2cap_handle_data() function in Bestechnic BES2300 Bluetooth Audio SoC firmware v3.x and earlier. An attacker can trigger a Denial of Service by sending a crafted L2CAP packet. The CVSS 3.1 score is 8.8 (HIGH) with an adjacent-network attack vector, no privileges requir...
PT-2026-87035
If a namespaced CR can mint cluster identity, that operator is a CA. If a namespaced CR can mint cluster identity, that operator is a CA. CVE-2026-78234, hawtio-operator. it reads the OpenShift Service CA private key, then issues a client cert with whatever CN you put on the Hawtio CR. the operat...
PT-2026-86949
SAP Process Integration SOAP Adapter allows a privileged user to send specially crafted requests containing deeply nested entity definitions, which under certain conditions could temporarily increase processor load and degrade system responsiveness. Successful exploitation results in low impact o...
PT-2026-88128
🚨 CVE-2026-83980 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. 🎖@cveNotify...
PT-2026-88120
🚨 CVE-2026-83972 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. 🎖@cveNotify...
PT-2026-88512
Impact The Git node's clone operation matched the destination path against the default N8N BLOCK FILE PATTERNS expression, which was written so that a crafted path caused catastrophic backtracking. Evaluation runs synchronously in the main n8n process, so an authenticated user could freeze the...
PT-2026-87345
CVE-2026-69298 scores 7.8. Integer overflow in Windows Biometric Service lets authorized local attackers gain SYSTEM privileges. Exploitation unlikely; no public disclosure or in-the-wild use yet. Patch now for Windows 10 1607 and others. https://t.co/Vsem3XKkvS https://t.co/Pahr2IXjiN...
PT-2026-87157
A security issue in MongoDB Server allows an unauthenticated network user to cause a denial of service on a specific type of replica set member. The server contains an assertion in its read concern processing logic that can be reached without authentication, and the assertion's assumptions about...
PT-2026-87893
Something to consider when ranking vulnerabilities CVE-2026-72982 has been public for a couple of days, so why aren’t attackers already using it to pop shells on DCs? Everyone has LLMs now, right? Finding a bug and producing a crash is not the same as building reliable RCE. https://t.co/HCBIKjO6N...
EulerOS 2.0 SP12 : perl-DBI (EulerOS-SA-2026-3291)
According to the versions of the perl-DBI packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : DBI::ProfileData versions before 1.651 for Perl do not limit the path index. The path index column of profile dump files is used to allocate an...