232742 matches found
CVE-2026-40144
A memory-corruption vulnerability exists in a kernel-mode component of BeyondTrust Endpoint Privilege Management Windows deployments prior to version 26.1.2. Insufficient validation of input processed by the component may result in memory being accessed outside its intended bounds...
CVE-2026-40144 Memory corruption vulnerability in Endpoint Privilege Management (Windows deployments)
A memory-corruption vulnerability exists in a kernel-mode component of BeyondTrust Endpoint Privilege Management Windows deployments prior to version 26.1.2. Insufficient validation of input processed by the component may result in memory being accessed outside its intended bounds...
EUVD-2026-60260
A memory-corruption vulnerability exists in a kernel-mode component of BeyondTrust Endpoint Privilege Management Windows deployments prior to version 26.1.2. Insufficient validation of input processed by the component may result in memory being accessed outside its intended bounds...
August "In the Trend of VM" (#30): vulnerabilities in ViPNet Client, the Microsoft Windows kernel, and Microsoft SharePoint
August "In the Trend of VM" 30: vulnerabilities in ViPNet Client, the Microsoft Windows kernel, and Microsoft SharePoint. I present the traditional monthly roundup of trending vulnerabilities according to Positive Technologies. In the previous July edition, there was just one vulnerability. This...
Zip Slip Path Traversal
org.springframework.data, spring-data-geode is vulnerable to a Zip Slip Path Traversal. The vulnerability is due to improper validation of file paths during ZIP archive extraction, which allows an attacker to craft a malicious archive containing traversal paths and write files outside the intende...
CVE-2026-63649
A flaw was found in the Windows interactive service of OpenVPN. A local authenticated user could exploit this vulnerability by crafting specific options to bypass whitelist checks. This bypass allows the user to load arbitrary configuration files, which could lead to privilege escalation or other...
CVE-2026-74801
SiYuan before 3.7.4 fails to escape workspace directory paths passed to the elevated elevator.exe helper. An attacker can create a directory containing command metacharacters, then trigger the Microsoft Defender exclusion flow to execute arbitrary commands as administrator after UAC approval. CVS...
BIT-GIT-2022-24765 Uncontrolled search for the Git directory in Git for Windows
Git for Windows is a fork of Git containing Windows-specific patches. This vulnerability affects users working on multi-user machines, where untrusted parties have write access to the same hard disk. Those untrusted parties could create the folder C:.git, which would be picked up by Git operation...
PT-2026-76713
A vulnerability exists in the interaction between a Endpoint Privilege Management Windows Deployment support utility and the agent's tamper protection controls. Under certain conditions, the protections applied to the utility process may not be enforced as intended...
The vulnerability of the Windows DNS service for Windows operating systems allows attackers to escalate their privileges.
The vulnerability of the Windows DNS service for Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
CVE-2026-40144: Out-of-bounds Read
A memory-corruption vulnerability exists in a kernel-mode component of BeyondTrust Endpoint Privilege Management Windows deployments prior to version 26.1.2. Insufficient validation of input processed by the component may result in memory being accessed outside its intended bounds...
UBUNTU-CVE-2026-63649
The Windows interactive service in OpenVPN 2.4.0 through 2.6.21 and 2.7alpha1 through 2.7.5 allows local authenticated users to bypass the trusted configuration directory constraint and load arbitrary configuration files via crafted options that bypass whitelist checks...
CVE-2026-40145: Insufficient Granularity of Access Control
A vulnerability exists in the interaction between a Endpoint Privilege Management Windows Deployment support utility and the agent's tamper protection controls. Under certain conditions, the protections applied to the utility process may not be enforced as intended...
The vulnerability of DHCP servers for Windows operating systems allows a perpetrator to trigger a service failure.
The vulnerability of DHCP servers for Windows operating systems is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of the Windows DNS service for Windows operating systems allows attackers to escalate their privileges.
The vulnerability of the Windows DNS service for Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
PT-2026-73289
Git for Windows is a fork of Git containing Windows-specific patches. This vulnerability affects users working on multi-user machines, where untrusted parties have write access to the same hard disk. Those untrusted parties could create the folder C:.git, which would be picked up by Git operation...
CVE-2026-17087
creationtimestamp| type| source ---|---|--- 2026-08-16 08:00:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mt6psdpf6i22 2026-08-16 10:16:12+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mt6xfvz76g2p...
MINI-3CXH-WWRF-5MRJ
Bulletin has no description...
MINI-WFP7-WQ69-V568
Bulletin has no description...
EUVD-2026-58812
The Windows interactive service in OpenVPN 2.4.0 through 2.6.21 and 2.7alpha1 through 2.7.5 allows local authenticated users to bypass the trusted configuration directory constraint and load arbitrary configuration files via crafted options that bypass whitelist checks...