752456 matches found
UBUNTU-CVE-2026-107324
An integer overflow in BSON value-length handling in the MongoDB Go Driver can cause a runtime panic when an application validates or accesses a malformed BSON document. An unauthenticated actor who can supply BSON bytes to an affected application may terminate an unprotected application process,...
CVE-2026-95127
An issue in libass v.0.17.5 allows a remote attacker to cause a denial of service via the assoutlineconstruct in libass/assrender.c...
APSB26-144 : Security update available for Adobe ColdFusion
Adobe has released a priority 2 security update for Adobe ColdFusion. This update addresses vulnerabilities rated critical, high, and medium that could result in arbitrary code execution, security feature bypass, arbitrary file system write, privilege escalation, arbitrary file system read,...
APSB26-163 : Security update available for Adobe Content Credentials SDK
Adobe has released a priority 3 security update for Adobe Content Credentials SDK. This update addresses vulnerabilities rated high and medium that could result in security feature bypass, application denial-of-service, and arbitrary file system write. Adobe is not aware of any exploits in the wi...
Microsoft Windows: CVE-2026-88121: Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability
Use after free in Windows Background Intelligent Transfer Service BITS allows an unauthorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-88146: Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Background Intelligent Transfer Service BITS allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-83843: Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
Out-of-bounds read in Windows Internet Key Exchange IKE Protocol allows an unauthorized attacker to deny service over a network...
Microsoft Windows: CVE-2026-70158: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Remote Code Execution in Windows Routing and Remote Access Service RRAS allows attacker to gain an unauthorized access to victim's machine...
Microsoft Windows: CVE-2026-83751: Windows MIDI Service Module Elevation of Privileges Vulnerability
Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-85342: Windows Device Association Service Elevation of Privilege Vulnerability
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-83677: Windows DHCP Client Denial of Service Vulnerability
Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over a network...
PT-2026-113455
Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network...
Microsoft Windows: CVE-2026-88142: Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability
Use after free in Windows Background Intelligent Transfer Service BITS allows an unauthorized attacker to execute code over a network...
PT-2026-112442
Name of the Vulnerable Software and Affected Versions Windows Resilient File System ReFS Deduplication Service affected versions not specified Description Weak authentication in the Windows Resilient File System ReFS Deduplication Service allows an authorized attacker to elevate privileges locall...
Microsoft Windows: CVE-2026-83777: Windows Bluetooth Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Bluetooth Service allows an unauthorized attacker to elevate privileges over an adjacent network...
Microsoft Windows: CVE-2026-84016: Windows EAPHost Service Elevation of Privilege Vulnerability
Out-of-bounds write in Windows EAPHost Service allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-83773: Windows MIDI Service Module Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally...
KLA91344 Multiple vulnerabilities in Microsoft SQL Server
Multiple vulnerabilities were found in Microsoft SQL Server. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote...
PT-2026-113547
An integer underflow in OpenVPN version 2.7 alpha3 through 2.7.7 on Windows and Android allows remote authenticated servers to cause a denial of service or memory disclosure via crafted domain search options...
CVE-2026-103852: NULL Pointer Dereference
Substance3D - Stager is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction...