2171 matches found
CVE-2026-40405 Windows TCP/IP Denial of Service Vulnerability
...
CVE-2026-34333
CVE-2026-34333 describes a use-after-free in Windows Win32K GRFX that enables a locally authenticated user to elevate privileges. The CVSSv3.1 base score is 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, LOW privileges required, and no user interaction, affecting confidentiality, int...
Win32k Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...
Windows Win32k Elevation of Privilege Vulnerability
Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...
PT-2026-40130
Name of the Vulnerable Software and Affected Versions Windows Native WiFi Miniport Driver versions prior to Server 2025 Description A race condition exists in the Windows Native WiFi Miniport Driver due to improper synchronization when using a shared resource. This allows an unauthorized remote...
Microsoft ASP.NET Core 安全漏洞
Microsoft ASP.NET Core is a cross-platform open-source framework developed by Microsoft. This framework is used to build cloud-based applications such as web applications, IoT applications, and mobile backends. There are security vulnerabilities in Microsoft ASP.NET Core. Attackers can exploit...
Microsoft Windows TCP/IP 代码问题漏洞
Microsoft Windows TCP/IP is a component provided by Microsoft Corporation that offers TCP/IP configuration functions for Windows. There are code-related vulnerabilities in Microsoft Windows TCP/IP. Attackers can exploit these vulnerabilities to cause system denial-of-service attacks. The followin...
Display Virtualization for Windows OS Advisory
Summary: A potential security vulnerability in some Display Virtualization for Windows OS driver software may allow denial of service. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-36510 Description: Improper buffer restrictio...
Microsoft Windows TCP/IP 代码问题漏洞
Microsoft Windows TCP/IP is a component provided by Microsoft Corporation that offers TCP/IP configuration functions for Windows. There are code-related vulnerabilities in Microsoft Windows TCP/IP. Attackers can exploit these vulnerabilities to cause system denial-of-service attacks. The followin...
PT-2026-40092
Unchecked return value for some IntelR QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result ma...
CVE-2026-7716 code-projects Gym Management System In PHP/Windows NT index.php sql injection
A vulnerability was found in code-projects Gym Management System In PHP and Windows NT 1.0. This vulnerability affects unknown code of the file /index.php. Performing a manipulation of the argument day results in sql injection. The attack can be initiated remotely. The exploit has been made publi...
EUVD-2026-26867
A vulnerability was found in code-projects Gym Management System In PHP and Windows NT 1.0. This vulnerability affects unknown code of the file /index.php. Performing a manipulation of the argument day results in sql injection. The attack can be initiated remotely. The exploit has been made publi...
EUVD-2026-25125
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows includes Db2 Connect Server could allow an authenticated user to cause a denial of service due to improper neutralization of special elements in data query logic...
The vulnerability of the Microsoft Component Object Model (COM) in Windows operating systems, which allows attackers to exploit their privileges.
The vulnerability of the Microsoft Component Object Model COM in Windows operating systems is related to access to resources through incompatible types. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the window manager for desktop window managers in Windows operating systems allows attackers to escalate their privileges.
The vulnerability of the Desktop Window Manager DWM on Windows operating systems relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Active Directory catalog service for Windows operating systems allows a perpetrator to execute arbitrary code.
The vulnerability of the Active Directory catalog service for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability in the implementation of the Secure Boot protocol for operating systems with Windows, which allows attackers to bypass existing security mechanisms
The vulnerability of the Secure Boot protocol for operating systems running Windows lies in the absence of a necessary encryption step. Exploiting this vulnerability could allow an attacker to bypass existing security mechanisms...
The vulnerability of the Microsoft Windows Search component on Windows operating systems allows attackers to escalate their privileges.
The vulnerability of the Microsoft Windows Search component in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain elevated privileges...
(0Day) Microsoft Windows library-ms NTLM Response Information Disclosure Vulnerability
This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must view a folder containing malicious content. The specific flaw exists within the...
