125 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-91838
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - network-manager-sstp - None Ubuntu Linux - profile data reaches root pppd pty shell CVE-2026-91838 Note that Nessus relies on the presence of the...
CVE-2026-73009
Use after free in Windows Secure Socket Tunneling Protocol SSTP allows an unauthorized attacker to execute code over a network...
CVE-2026-72930
Use after free in Windows Secure Socket Tunneling Protocol SSTP allows an authorized attacker to execute code locally...
CVE-2026-72931
Missing release of resource after effective lifetime in Windows Secure Socket Tunneling Protocol SSTP allows an authorized attacker to deny service locally...
CVE-2026-71332
Use after free in Windows Secure Socket Tunneling Protocol SSTP allows an authorized attacker to elevate privileges locally...
CVE-2026-73009
This use-after-free vulnerability affects Windows Secure Socket Tunneling Protocol (SSTP) , allowing an unauthorized attacker to achieve remote code execution over a network with low attack complexity and no required privileges or user interaction . The CVSS 3.1 score is 9.8 (Critical) with high ...
EUVD-2026-73773
Use after free in Windows Secure Socket Tunneling Protocol SSTP allows an unauthorized attacker to execute code over a network...
CVE-2026-72931
CVE-2026-72931 is a denial-of-service vulnerability in Windows Secure Socket Tunneling Protocol (SSTP) , caused by a missing release of a resource after its effective lifetime . An authorized local attacker with low privileges can trigger the condition, resulting in a high availability impact but...
EUVD-2026-73663
Missing release of resource after effective lifetime in Windows Secure Socket Tunneling Protocol SSTP allows an authorized attacker to deny service locally...
CVE-2026-72930
CVE-2026-72930 is a use-after-free vulnerability in Windows Secure Socket Tunneling Protocol (SSTP) that allows an authorized attacker to execute code locally. The CVSS 3.1 score is 7.0 (HIGH) , reflecting a local attack vector with high complexity, low privileges required, no user interaction, a...
EUVD-2026-73107
Use after free in Windows Secure Socket Tunneling Protocol SSTP allows an authorized attacker to execute code locally...
EUVD-2026-73093
Use after free in Windows Secure Socket Tunneling Protocol SSTP allows an authorized attacker to elevate privileges locally...
CVE-2026-71332
CVE-2026-71332 is a use-after-free vulnerability in Windows Secure Socket Tunneling Protocol (SSTP) that allows an authorized attacker to perform a local privilege escalation . The CVSS 3.1 score is 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a high-attack-complexi...
Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability
Use after free in Windows Secure Socket Tunneling Protocol SSTP allows an authorized attacker to elevate privileges locally...
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
Use after free in Windows Secure Socket Tunneling Protocol SSTP allows an unauthorized attacker to execute code over a network...
Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability
Missing release of resource after effective lifetime in Windows Secure Socket Tunneling Protocol SSTP allows an authorized attacker to deny service locally...
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
Use after free in Windows Secure Socket Tunneling Protocol SSTP allows an authorized attacker to execute code locally...
CVE-2026-62889
Double free in Windows Secure Socket Tunneling Protocol SSTP allows an unauthorized attacker to execute code over a network...
