752456 matches found
Microsoft Windows: CVE-2026-88103: Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-87707: Windows Fax and Scan Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Fax and Scan Service allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-96306: Windows Sysmain Service Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Sysmain Service allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-96316: Windows Routing and Remote Access Service (RRAS) Tampering Vulnerability
Improper access control in Windows Routing and Remote Access Service RRAS allows an authorized attacker to perform tampering locally...
Microsoft Windows: CVE-2026-83647: Windows Active Directory Domain Services Denial of Service Vulnerability
Out-of-bounds read in Active Directory Domain Services allows an unauthorized attacker to deny service over a network...
Microsoft Windows: CVE-2026-83586: Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability
Weak authentication in Windows Resilient File System ReFS Deduplication Service allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-83580: Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Client-Side Caching CSC Service allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-83703: Windows Wi-Fi Driver Denial of Service Vulnerability
Out-of-bounds read in Windows Wi-Fi Driver allows an unauthorized attacker to deny service over an adjacent network...
Microsoft Windows: CVE-2026-83870: Windows Aggregated Data Platform Service Information Disclosure Vulnerability
Out-of-bounds read in Windows Aggregated Data Platform Service allows an authorized attacker to disclose information locally...
Microsoft Windows: CVE-2026-95904: Windows Event Logging Service Information Disclosure Vulnerability
Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally...
Microsoft Windows: CVE-2026-88173: Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability
Use after free in Windows Background Intelligent Transfer Service BITS allows an unauthorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-72934: Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability
Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...
PT-2026-112837
Name of the Vulnerable Software and Affected Versions Windows 11 Version 24H2 Windows 11 Version 25H2 Windows 11 version 26H1 Windows 11 Version 26H2 Description Missing authentication for a critical function in the Windows Health and Optimized Experiences Service allows an authorized attacker to...
Microsoft Windows: CVE-2026-97812: Windows Update Orchestrator Service Elevation of Privilege Vulnerability
Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally...
UBUNTU-CVE-2026-107651
A flaw was found in Eye of GNOME eog. A heap-based buffer overflow exists in the PNG metadata reader due to improper state handling when parsing split metadata chunks. A remote attacker could exploit this flaw by enticing a user into opening a specially crafted PNG file, potentially leading to...
Microsoft Windows: CVE-2026-70008: Windows IP Over USB Service Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows IP Over USB Service allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-83655: Network Policy Server (NPS) Denial of Service Vulnerability
Out-of-bounds read in Network Policy Server NPS allows an unauthorized attacker to deny service over a network...
Microsoft Windows: CVE-2026-83644: Windows Audio Service Elevation of Privilege Vulnerability
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally...
UBUNTU-CVE-2026-107325
Improper validation of a BSON array length in the MongoDB Go Driver can cause an out-of-bounds index and runtime panic when an application calls bson.RawArray.Validate or bsoncore.Array.Validate on a malformed four-byte array. An unauthenticated actor who can supply raw BSON array data to an...