239156 matches found
CVE-2026-56179
CVE-2026-56179 describes an origin validation error in Windows Network Address Translation (NAT) that enables spoofing on an adjacent network. The vulnerability has a CVSS v3.1 base score of 8.3 (HIGH) with attack vector Adjacent, high impact on confidentiality, integrity, and availability, and n...
CVE-2026-66802 Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability
...
CVE-2026-66802 Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability
...
CVE-2026-66802
CVE-2026-66802 describes a race condition in Microsoft Azure Attestation service and Device Health Attestation Service caused by improper synchronization of a shared resource. This concurrency issue allows an unauthenticated, network-based attacker to execute code on affected systems, with high i...
CVE-2026-65796 Windows iSCSI Target Service Remote Code Execution Vulnerability
...
CVE-2026-65796 Windows iSCSI Target Service Remote Code Execution Vulnerability
...
CVE-2026-65796
Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network...
CVE-2026-65798 Windows DNS Elevation of Privilege Vulnerability
...
EUVD-2026-56743
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally...
EUVD-2026-56744
Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to deny service over a network...
CVE-2026-65798 Windows DNS Elevation of Privilege Vulnerability
...
CVE-2026-65798
CVE-2026-65798 corresponds to a numeric truncation error in Windows DNS that enables an authorized attacker to perform local privilege escalation. Affected component: Windows DNS. Root cause: numeric truncation in DNS handling leading to elevated privileges. Impact is described as local elevation...
CVE-2026-65796
CVE-2026-65796: Windows iSCSI Target Service Remote Code Execution . A heap-based buffer overflow in the Windows iSCSI Target Service is the underlying vulnerability, enabling an unauthenticated attacker to execute code remotely over the network. Public sources consistently describe this as a rem...
CVE-2026-65797 Windows DNS Elevation of Privilege Vulnerability
...
CVE-2026-65797 Windows DNS Elevation of Privilege Vulnerability
...
CVE-2026-65797
CVE-2026-65797 involves a numeric truncation error in Windows DNS that can allow an authorized attacker to elevate privileges locally. The available documents confirm the affected component as Windows DNS and the root cause as a numeric truncation flaw. The impact is local privilege escalation wi...
CVE-2026-65799 Windows DNS Elevation of Privilege Vulnerability
...
CVE-2026-65799 Windows DNS Elevation of Privilege Vulnerability
...
CVE-2026-65799
CVE-2026-65799 is an integer overflow or wraparound vulnerability in the Windows DNS service that allows an authorized local attacker to elevate privileges . The FSTEC BDU further characterizes the root cause as a buffer overflow in dynamic memory . Microsoft rates it CVSS 6.7 (MEDIUM) with high ...