23131 matches found
PT-2026-58482
Name of the Vulnerable Software and Affected Versions Windows DHCP Server affected versions not specified Description A heap-based buffer overflow occurs in the Windows DHCP Server, which allows an unauthorized remote attacker to execute arbitrary code over a network and affect the system. A...
CVE-2026-50364: Improper Link Resolution Before File Access
Improper link resolution before file access 'link following' in Windows Server Backup allows an authorized attacker to elevate privileges locally...
CVE-2026-50311: Improper Access Control
Improper access control in Windows Server allows an authorized attacker to elevate privileges locally...
CVE-2026-50328: Uncaught Exception
Uncaught exception in Windows Server Update Service allows an unauthorized attacker to perform tampering over a network...
CVE-2026-50444: Missing Authentication for Critical Function
Missing authentication for critical function in Windows Server Update Service allows an authorized attacker to elevate privileges over a network...
KB5106414: Servicing stack update for Windows Server 2012: July 14, 2026
None None...
KB5099535: Windows 10 Version 1607 / Windows Server 2016 Security Update (July 2026)
The remote Windows host is missing security update 5099535. It is, therefore, affected by multiple vulnerabilities - Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to execute code over a network. CVE-2026-58594 - Heap-based buffer overflow in Windows FTP Service...
KB5099444: Windows Server 2012 R2 Security Update (July 2026)
The remote Windows host is missing security update 5099444. It is, therefore, affected by multiple vulnerabilities - Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to execute code over a network. CVE-2026-58594 - Heap-based buffer overflow in Windows Message Queuing...
KB5099538: Windows 10 version 1809 / Windows Server 2019 Security Update (July 2026)
The remote Windows host is missing security update 5099538. It is, therefore, affected by multiple vulnerabilities - Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to execute code over a network. CVE-2026-58594 - Heap-based buffer overflow in Windows FTP Service...
Exploit for Stack-based Buffer Overflow in Microsoft
LongLogon · CVE-2026-41089 !CVE-2026-41089 · NVDhttps://i...
📄 HTTP.sys HTTP/2 Denial of Service
This advisory provides simple proof of concept details to trigger the HTTP/2 denial of service condition related to malformed Accept-Encoding headers. Titles: CVE-2026-49160 - HTTP.sys HTTP/2 Denial of Service DoS Vulnerability Author: nu11secur1ty Date: 06/24/2026 Vendor: Microsoft Corporation...
CVE-2026-53779
WebP Server Go 0.14.4 is affected by a path traversal flaw on Windows. Attackers can exploit percent-encoded backslashes (%5C) to bypass path.Clean() in handler/router.go, taking advantage of Go’s forward-slash normalization vs Windows path APIs to read files outside IMG_PATH. CVE records indicat...
ThreatsDay Bulletin: Claude Chat Abuse, NastyC2 npm Packages, Device-Code Phishing + 25 More Stories
The internet did not break this week. It got used exactly as designed, which is worse. Searches were siphoned through shady browser add-ons. AI chat links turned into malware delivery paths. macOS attacks ran in memory and left almost nothing behind. Cloud agents looked like helpers until attacke...
CVE-2026-55201 Evil-WinRM - Path Traversal in download_dir() Function
Evil-WinRM through 3.9, fixed in commit 6ecd570, contains a path traversal vulnerability in the downloaddir function that allows a rogue or compromised remote Windows server to write files outside the intended download directory by returning filenames with traversal sequences from Get-ChildItem...
CVE-2026-55201
CVE-2026-55201 affects Evil-WinRM (up to version 3.9). A path traversal in download_dir() can cause the server to generate filenames with traversal sequences from Get-ChildItem output, which are passed unsanitized to File.join(), enabling writes outside the intended download directory. Attackers ...
CVE-2026-55201: Improper Limitation of a Pathname to a Restricted Directory
Evil-WinRM through 3.9, fixed in commit 6ecd570, contains a path traversal vulnerability in the downloaddir function that allows a rogue or compromised remote Windows server to write files outside the intended download directory by returning filenames with traversal sequences from Get-ChildItem...
The vulnerability of the Active Directory Domain Services service on the Microsoft Windows Server operating system allows a perpetrator to execute arbitrary code.
The vulnerability of Active Directory Domain Services is related to the execution of operations outside the buffer in memory. Exploitation of this vulnerability could allow a malicious actor to execute arbitrary code remotely...
The vulnerability of the Azure Network Adapter for Windows Server operating systems allows attackers to escalate their privileges.
The vulnerability of the Azure Network Adapter for Windows Server operating systems relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to increase their privileges...
