306205 matches found
CVE-2026-109156: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability has been found in SeldonIO MLServer up to 1.6.1. Affected is the function extractenv of the file mlserver/env.py of the component environmenttarball Handler. Such manipulation leads to path traversal. The attack may be performed from remote. The vendor was contacted early about th...
CVE-2026-109519: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability was detected in YouTransfer up to 0.0.7/1.0.6/1.1.0. Affected is an unknown function of the file /settings/template of the component Template Rendering. The manipulation results in path traversal. The attack may be launched remotely. The exploit is now public and may be used. The...
Microsoft Windows: CVE-2026-70216: Windows Mobile Device Management Tampering Vulnerability
Insufficient granularity of access control in Windows Mobile Device Management allows an authorized attacker to perform tampering locally...
CVE-2026-83755: Use of Uninitialized Resource
Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally...
CVE-2026-83659: Improper Link Resolution Before File Access
Improper link resolution before file access 'link following' in Windows User Profile Service allows an authorized attacker to elevate privileges locally...
CVE-2026-109403: Server-Side Request Forgery (SSRF)
A vulnerability was determined in conductor-oss conductor up to 3.32.5. Affected by this vulnerability is the function A2AService.getAgentCard of the file ai/src/main/java/org/conductoross/conductor/ai/a2a/A2AService.java of the component Agent Card Fetching. Executing a manipulation of the...
CVE-2026-96863: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack...
CVE-2026-83798: Improper Verification of Cryptographic Signature
Improper verification of cryptographic signature in Windows Update Stack allows an authorized attacker to perform spoofing locally...
Microsoft Windows: CVE-2026-70160: Windows Kernel Elevation of Privilege Vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-96927: Out-of-bounds Read
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally...
CVE-2026-85371: Use After Free
Use after free in Network Policy Server NPS allows an unauthorized attacker to execute code over a network...
CVE-2026-85799: Use After Free
Use after free in Network Policy Server NPS allows an unauthorized attacker to execute code over a network...
PT-2026-111899
Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description An authorized attacker can locally disclose sensitive information due to the use of an uninitialized resource within the Windows Kernel. This issue allows attackers to obtain sensitive...
PT-2026-111898
Name of the Vulnerable Software and Affected Versions Windows Network File System affected versions not specified Description An untrusted pointer dereference in the Windows Network File System allows an authorized attacker to disclose sensitive information locally. Recommendations At the moment,...
PT-2026-111902
Name of the Vulnerable Software and Affected Versions Windows Storage affected versions not specified Description A heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program writes more data to a...
PT-2026-111900
Name of the Vulnerable Software and Affected Versions Windows Storage Port Driver affected versions not specified Description An untrusted pointer dereference allows an unauthorized attacker to elevate privileges. This issue can be exploited through a physical attack to affect the system...
PT-2026-111892
Name of the Vulnerable Software and Affected Versions Windows Group Policy affected versions not specified Description Improper privilege management allows an authorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendations At the moment, there is no...
CVE-2026-102217: Improper Resolution of Path Equivalence
Improper resolution of path equivalence in WebDAV allows an authorized attacker to elevate privileges over a network...
PT-2026-112805
Name of the Vulnerable Software and Affected Versions Windows Image Acquisition affected versions not specified Description The use of an externally-controlled format string allows an authorized attacker to elevate privileges locally on the system. Recommendations At the moment, there is no...