235177 matches found
CVE-2026-20737
Exposure of sensitive information to an unauthorized actor for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable...
CVE-2025-48506
Uncontrolled search paths in Vitis™ Unified installation path on local Windows machines could allow DLL injection into these install paths, potentially resulting in arbitrary code execution...
CVE-2025-48505
Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to achieve privileged escalation, potentially resulting in arbitrary code execution...
CVE-2025-61970
Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to create arbitrary code, potentially resulting in binary hijacking...
CVE-2025-0041
Uncontrolled search paths in the Vitis™ Embedded Single File Download SFD for local Windows installation could allow a low-privileged user to create arbitrary code execution...
CVE-2025-54512
A DLL hijacking vulnerability within the AMD Ryzen Master installation could allow a local user-privileged attacker to escalate privileges, potentially resulting in arbitrary code execution...
CVE-2026-62738 Windows Management Instrumentation Information Disclosure Vulnerability
...
EUVD-2026-56772
Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally...
CVE-2026-62738
The vulnerability CVE-2026-62738 affects Windows Management Instrumentation and enables an authorized, local attacker to disclose information through an out-of-bounds read. The available descriptions consistently state information disclosure as the impact; no details on specific vulnerable binari...
CVE-2026-62738 Windows Management Instrumentation Information Disclosure Vulnerability
...
CVE-2026-71331
The CVE-2026-71331 entry describes an Integer overflow or wraparound in the Microsoft Azure Attestation service and the Device Health Attestation Service . The underlying issue is a numeric overflow that can be triggered by an attacker over a network, allowing a remote code execution scenario. Af...
CVE-2026-71331 Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability
...
CVE-2026-71331 Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability
...
CVE-2026-70338
Microsoft PowerShell contains a code-injection style issue described as improper control of code generation, enabling a local attacker to bypass a built-in security feature. The CVSS 3.1 metrics from Microsoft indicate a high impact on confidentiality, integrity, and availability with local attac...
CVE-2026-56179 Windows Network Address Translation (NAT) Spoofing Vulnerability
...
CVE-2026-56179 Windows Network Address Translation (NAT) Spoofing Vulnerability
...
CVE-2026-56179
Origin validation error in Windows Network Address Translation NAT allows an unauthorized attacker to perform spoofing over an adjacent network...
EUVD-2026-56763
Origin validation error in Windows Network Address Translation NAT allows an unauthorized attacker to perform spoofing over an adjacent network...
CVE-2026-56179
CVE-2026-56179 describes an origin validation error in Windows Network Address Translation (NAT) that enables spoofing on an adjacent network. The vulnerability has a CVSS v3.1 base score of 8.3 (HIGH) with attack vector Adjacent, high impact on confidentiality, integrity, and availability, and n...