Lucene search
+L

752456 matches found

Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•4 views

PT-2026-113535

Libreswan in FIPS mode has a vulnerability where badly formed received certificates are rejected, but not deleted from the NSS cache. As a result, any real certificates with the same serial number are rejected as well. This can be abused to lock out legitimate peers from connecting. The add decod...

3.7CVSS5.7AI score0.00183EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•3 views

PT-2026-113522

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue...

7.5CVSS5.8AI score0.00636EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•6 views

PT-2026-113296

Dimension is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a...

5.5CVSS5.8AI score0.00148EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•2 views

Microsoft Windows: CVE-2026-83710: Windows Device Association Service Elevation of Privilege Vulnerability

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

7CVSS6.2AI score0.00252EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•5 views

Microsoft Windows: CVE-2026-83785: Windows COM+ Event System Service Elevation of Privilege Vulnerability

Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...

7CVSS6.2AI score0.00287EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•4 views

Microsoft Windows: CVE-2026-96933: Windows COM+ Event System Service Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...

7.8CVSS5.6AI score0.00318EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•5 views

PT-2026-113139

Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...

7.8CVSS5.6AI score0.00318EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/10/13 12:00 a.m.•7 views

7-Zip < 24.08 CopyCoder Infinite Loop DoS (ZDI-24-1606)

The version of 7-Zip installed on the remote host is prior to 24.08. It is, therefore, affected by a denial of service vulnerability as referenced in the ZDI-24-1606 advisory. - This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of 7-Zip...

6.5CVSS6.7AI score0.01775EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•3 views

Microsoft Windows: CVE-2026-96866: Network Device Enrollment Service (NDES) Denial of Service Vulnerability

Out-of-bounds read in Network Device Enrollment Service NDES allows an unauthorized attacker to deny service over a network...

7.5CVSS5.8AI score0.01149EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•3 views

Microsoft Windows: CVE-2026-96920: Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...

7.8CVSS6.1AI score0.00318EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•3 views

Microsoft Windows: CVE-2026-96912: Windows Client License Service Elevation of Privilege Vulnerability

Use after free in Windows Client License Service allows an authorized attacker to elevate privileges locally...

7.8CVSS6.2AI score0.00318EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•3 views

Microsoft Windows: CVE-2026-96861: Network Device Enrollment Service (NDES) Denial of Service Vulnerability

Out-of-bounds read in Network Device Enrollment Service NDES allows an unauthorized attacker to deny service over a network...

7.5CVSS5.8AI score0.01149EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•3 views

Microsoft Windows: CVE-2026-85884: Windows Health and Optimized Experiences Service Elevation of Privilege Vulnerability

Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.00394EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•3 views

Microsoft Windows: CVE-2026-83795: Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

Heap-based buffer overflow in Windows IKE Extension allows an unauthorized attacker to deny service over a network...

7.5CVSS6.2AI score0.01149EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•2 views

Microsoft Windows: CVE-2026-83764: Windows Clipboard User Service Information Disclosure Vulnerability

Incorrect authorization in Windows Clipboard User Service allows an authorized attacker to disclose information locally...

5.5CVSS5.6AI score0.00276EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•2 views

Microsoft Windows: CVE-2026-85332: Windows Device Association Service Elevation of Privilege Vulnerability

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

7.8CVSS6.2AI score0.00318EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•2 views

Microsoft Windows: CVE-2026-88133: Windows Portable Device Enumerator Service Elevation of Privilege Vulnerability

Improper authorization in Windows Portable Device Enumerator Service allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.0041EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•1 views

Microsoft Windows: CVE-2026-88118: Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows Background Intelligent Transfer Service BITS allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00369EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•2 views

Microsoft Windows: CVE-2026-85319: Active Directory Federation Services (AD FS) Denial of Service Vulnerability

Allocation of resources without limits or throttling in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...

7.5CVSS5.8AI score0.01103EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•2 views

Microsoft Windows: CVE-2026-84007: Remote Desktop Gateway Service Information Disclosure Vulnerability

Out-of-bounds read in Remote Desktop Gateway Service allows an authorized attacker to disclose information over a network...

6.5CVSS5.7AI score0.00994EPSS
SaveExploits0References2
Rows per page
Query Builder