340 matches found
CVE-2026-91461
A flaw was found in the Java Secure Socket Extension JSSE component. An unauthenticated remote attacker could exploit this vulnerability over Transport Layer Security TLS by sending crafted data to affected application programming interfaces APIs. A successful attack allows the attacker to cause...
CVE-2026-85926
Use after free in Windows Secure Socket Tunneling Protocol SSTP allows an unauthorized attacker to execute code over a network...
CVE-2026-88147
A heap-based buffer overflow exists in the Windows Secure Socket Tunneling Protocol (SSTP) . This vulnerability allows an authorized attacker to perform a local privilege escalation . The impact includes high levels of confidentiality, integrity, and availability loss as reported in the CVSS metr...
CVE-2026-85926
A Use after free vulnerability exists in the Windows Secure Socket Tunneling Protocol (SSTP) . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.1 (High) , with high impact across confidentiality, integrity, and availability. Docume...
Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Secure Socket Tunneling Protocol SSTP allows an authorized attacker to elevate privileges locally...
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
Use after free in Windows Secure Socket Tunneling Protocol SSTP allows an unauthorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-88147: Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Secure Socket Tunneling Protocol SSTP allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-85926: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
Use after free in Windows Secure Socket Tunneling Protocol SSTP allows an unauthorized attacker to execute code over a network...
CVE-2026-85926: Use After Free
Use after free in Windows Secure Socket Tunneling Protocol SSTP allows an unauthorized attacker to execute code over a network...
CVE-2026-73009: Use After Free
Use after free in Windows Secure Socket Tunneling Protocol SSTP allows an unauthorized attacker to execute code over a network...
CVE-2026-72931: Missing Release of Resource after Effective Lifetime
Missing release of resource after effective lifetime in Windows Secure Socket Tunneling Protocol SSTP allows an authorized attacker to deny service locally...
CVE-2026-71332: Use After Free
Use after free in Windows Secure Socket Tunneling Protocol SSTP allows an authorized attacker to elevate privileges locally...
CVE-2026-72930: Use After Free
Use after free in Windows Secure Socket Tunneling Protocol SSTP allows an authorized attacker to execute code locally...
CVE-2026-62889: Double Free
Double free in Windows Secure Socket Tunneling Protocol SSTP allows an unauthorized attacker to execute code over a network...
Apache Thrift: Python TSSLSocket Hostname Matcher Import
...
UBUNTU-CVE-2026-46968
Vulnerability in Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and 21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Difficult to exploit vulnerability allow...
PT-2026-60466
HCL DFXAnalytics is affected by a Missing Secure Attribute in Encrypted Session SSL Cookie vulnerability. The application fails to set the "secure" attribute on session cookies generated during authentication, which could allow a remote attacker to intercept network traffic and capture sensitive...
EUVD-2026-44046
Use after free in Windows Secure Socket Tunneling Protocol SSTP allows an unauthorized attacker to execute code over a network...
