CVE-2026-71337

Stack-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally...

CVE-2026-69389

Heap-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally...

EUVD-2026-73092

Stack-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally...

CVE-2026-71337

CVE-2026-71337 is a stack-based buffer overflow in the Windows Storage Management Provider that allows a locally authenticated attacker with low privileges to achieve local privilege escalation . The CVSS 3.1 score is 7.8 (HIGH) , reflecting local attack vector, low complexity, and high impact to...

EUVD-2026-73233

Heap-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally...

CVE-2026-69389

This CVE describes a heap-based buffer overflow in Windows Storage Management Provider that allows an authorized, low-privileged attacker to achieve local privilege escalation . The vulnerability requires no user interaction and carries a CVSS 3.1 base score of 7.8 (HIGH) with high impact across ...

Windows Storage Management Provider Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally...

Windows Storage Management Provider Elevation of Privilege Vulnerability

Stack-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally...

PT-2026-87829

Name of the Vulnerable Software and Affected Versions Windows Storage Management Provider affected versions not specified Description A stack-based buffer overflow occurs in the Windows Storage Management Provider. This issue allows an authorized attacker to elevate privileges locally on the...

CVE-2026-71337: Stack-based Buffer Overflow

Stack-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally...

PT-2026-87426

Name of the Vulnerable Software and Affected Versions Windows Storage Management Provider affected versions not specified Description A heap-based buffer overflow occurs in the Windows Storage Management Provider. This issue allows an authorized attacker to elevate privileges locally on the syste...

CVE-2026-69389: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally...

CVE-2026-42147

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.474, S3 storage endpoint validation only checks URL format and testConnection sends a server-side request to the configured endpoint, allowing an authenticated user with storage...

CVE-2026-37589

The SourceCodester Storage Unit Rental Management System v1.0 is vulnerable to SQL Injection due to the improper neutralization of special elements used in an SQL command. The flaw is located in the file /storage/admin/maintenance/manage_storage_unit.php. This vulnerability could allow an attacke...

CVE-2026-37590

SourceCodester Storage Unit Rental Management System v1.0 is vulnerable to SQL Injection in the file /storage/admin/rents/managerent.php...

SourceCodester Storage Unit Rental Management System 安全漏洞

The SourceCodester Storage Unit Rental Management System is an open-source system developed by SourceCodester, designed to help manage rental records for storage units and monitor those records. Version 1.0 of the SourceCodester Storage Unit Rental Management System contains a security...

CVE-2026-3750

A security vulnerability has been detected in ContiNew Admin up to 4.2.0. This issue affects the function URI.create of the file continew-system/src/main/java/top/continew/admin/system/factory/S3ClientFactory.java of the component Storage Management Module. The manipulation leads to server-side...

CVE-2026-3750

CVE-2026-3750 affects ContiNew Admin up to 4.2.0; the vulnerability lies in the function URI.create in continew-system/src/main/java/top/continew/admin/system/factory/S3ClientFactory.java of the Storage Management Module, enabling server-side request forgery. The issue can be exploited remotely (...

CVE-2026-3750

A security vulnerability has been detected in ContiNew Admin up to 4.2.0. This issue affects the function URI.create of the file continew-system/src/main/java/top/continew/admin/system/factory/S3ClientFactory.java of the component Storage Management Module. The manipulation leads to server-side...

CVE-2026-3750 ContiNew Admin Storage Management S3ClientFactory.java URI.create server-side request forgery

A security vulnerability has been detected in ContiNew Admin up to 4.2.0. This issue affects the function URI.create of the file continew-system/src/main/java/top/continew/admin/system/factory/S3ClientFactory.java of the component Storage Management Module. The manipulation leads to server-side...