CVE-2026-69575

Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally...

CVE-2026-69568

Out-of-bounds read in Windows Storage Spaces Controller allows an authorized attacker to disclose information locally...

CVE-2026-69527

Out-of-bounds read in Windows USB Mass Storage Class Driver allows an authorized attacker to disclose information locally...

CVE-2026-69490

Out-of-bounds read in Windows USB Mass Storage Class Driver allows an unauthorized attacker to elevate privileges with a physical attack...

CVE-2026-69389

Heap-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally...

CVE-2026-69381

Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack...

CVE-2026-69328

Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally...

CVE-2026-69297

Storing passwords in a recoverable format in Windows DHCP Server allows an authorized attacker to disclose information over a network...

CVE-2026-69290

Stack-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally...

CVE-2026-68877

Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to execute code locally...

CVE-2026-68844

Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to execute code locally...

CVE-2026-68839

Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network...

EUVD-2026-73927

A flaw has been found in aircheng-org iWebShop-5 up to 5.15. This impacts an unknown function of the file controllers/admin.php of the component Authentication Storage. Executing a manipulation of the argument Password can lead to password hash with insufficient computational effort. It is possib...

CVE-2026-86670

aircheng-org iWebShop-5 versions up to 5.15 contain a vulnerability in the Authentication Storage component within the file controllers/admin.php . Manipulating the Password argument can result in a password hash with insufficient computational effort , effectively weakening credential protection...

CVE-2026-86670 aircheng-org iWebShop-5 Authentication Storage admin.php weak password hash

A flaw has been found in aircheng-org iWebShop-5 up to 5.15. This impacts an unknown function of the file controllers/admin.php of the component Authentication Storage. Executing a manipulation of the argument Password can lead to password hash with insufficient computational effort. It is possib...

CVE-2026-86670 aircheng-org iWebShop-5 Authentication Storage admin.php weak password hash

A flaw has been found in aircheng-org iWebShop-5 up to 5.15. This impacts an unknown function of the file controllers/admin.php of the component Authentication Storage. Executing a manipulation of the argument Password can lead to password hash with insufficient computational effort. It is possib...

CVE-2026-86670 aircheng-org iWebShop-5 Authentication Storage admin.php weak password hash

A flaw has been found in aircheng-org iWebShop-5 up to 5.15. This impacts an unknown function of the file controllers/admin.php of the component Authentication Storage. Executing a manipulation of the argument Password can lead to password hash with insufficient computational effort. It is possib...

EUVD-2026-73893

Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack...

CVE-2026-69381

CVE-2026-69381 is an out-of-bounds read in the Windows Storage Port Driver that allows an unauthorized attacker with physical access to disclose information. The vulnerability requires no prior privileges or user interaction, but the physical attack vector limits its practical exploitability. The...

CVE-2026-82071

Insufficient validation of storage engine configuration options in MongoDB Server allows an authenticated user with write privileges to supply crafted parameters during collection creation that override internal storage metadata. This results in an out-of-bounds memory write in the server process...