27843 matches found
SUSE CVE-2026-85014
undici's experimental WebSocketStream client crashes the whole Node.js process when a remote peer closes the TCP connection without a WebSocket close handshake. On an unclean close the internal socket-close handler calls abort on the writable stream unconditionally and discards the returned...
CVE-2026-69793
Improper validation of consistency within input in Windows TCP/IP allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-69761
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network...
CVE-2026-69757
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network...
CVE-2026-69588
Missing release of memory after effective lifetime in Windows TCP/IP allows an unauthorized attacker to deny service over a network...
CVE-2026-69404
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows TCP/IP allows an authorized attacker to elevate privileges locally...
CVE-2026-69385
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows TCP/IP allows an authorized attacker to elevate privileges locally...
EUVD-2026-73612
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network...
CVE-2026-69761
A use-after-free vulnerability in Windows TCP/IP allows an authorized attacker to elevate privileges over a network . The CVSS 3.1 score is 7.1 (HIGH) , with a vector of AV:N/AC:H/PR:L/UI:R, meaning exploitation requires network access , high attack complexity , low existing privileges , and user...
CVE-2026-69793
CVE-2026-69793 is a security feature bypass vulnerability in Windows TCP/IP , caused by improper validation of consistency within input. An unauthorized, unauthenticated attacker can exploit it over a network with no user interaction to achieve high impact on integrity (no confidentiality or avai...
EUVD-2026-73604
Improper validation of consistency within input in Windows TCP/IP allows an unauthorized attacker to bypass a security feature over a network...
EUVD-2026-73482
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows TCP/IP allows an authorized attacker to elevate privileges locally...
CVE-2026-69385
CVE-2026-69385 is a local elevation of privilege vulnerability in Windows TCP/IP caused by a race condition (improper synchronization of a shared resource during concurrent execution). An authorized attacker with low privileges can exploit this to gain higher privileges on the target system. The ...
EUVD-2026-73047
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network...
CVE-2026-69757
CVE-2026-69757 is a use-after-free vulnerability in Windows TCP/IP that allows an authorized attacker to elevate privileges over a network. The attack requires low privileges and user interaction , with high complexity , yet yields high impact across confidentiality, integrity, and availability (...
EUVD-2026-73023
Missing release of memory after effective lifetime in Windows TCP/IP allows an unauthorized attacker to deny service over a network...
CVE-2026-69588
CVE-2026-69588 affects Windows TCP/IP and is caused by a missing release of memory after its effective lifetime (a memory leak). An unauthorized network-based attacker with no privileges and no user interaction can trigger a denial of service , rated CVSS 7.5 (High) with high availability impact....
EUVD-2026-73238
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows TCP/IP allows an authorized attacker to elevate privileges locally...
CVE-2026-69404
CVE-2026-69404 is a race condition in Windows TCP/IP caused by concurrent execution using a shared resource with improper synchronization, allowing an authorized local attacker (low privileges required) to elevate privileges . The CVSS 3.1 score is 7.0 (HIGH) with a local attack vector, high comp...
