306337 matches found
Microsoft Windows: CVE-2026-88180: Windows DWM Core Library Elevation of Privilege Vulnerability
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
CVE-2026-88147: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Secure Socket Tunneling Protocol SSTP allows an authorized attacker to elevate privileges locally...
CVE-2026-96852: Use After Free
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally...
PT-2026-112097
Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description An untrusted pointer dereference in Windows NTFS allows an authorized attacker to execute code locally. Additionally, the issue may allow remote attackers to execute arbitrary code and...
PT-2026-111676
Name of the Vulnerable Software and Affected Versions SourceCodester Online Exam System version 1.0 Description An issue exists in the Login Endpoint within the file adminpanel/admin/query/loginExe.php. Remote manipulation of the username and pass arguments allows for SQL injection, a technique...
CVE-2026-83793: Improper Link Resolution Before File Access
Improper link resolution before file access 'link following' in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally...
PT-2026-112042
Name of the Vulnerable Software and Affected Versions Microsoft.NETCore.App.Runtime.linux-arm versions 9.0.0 through 9.0.20 Microsoft.NETCore.App.Runtime.linux-arm64 versions 9.0.0 through 9.0.20 Microsoft.NETCore.App.Runtime.linux-musl-arm versions 9.0.0 through 9.0.20...
PT-2026-112068
Name of the Vulnerable Software and Affected Versions Microsoft.NETCore.App.Runtime.linux-arm versions 8.0.0 through 8.0.31 Microsoft.NETCore.App.Runtime.linux-arm versions 9.0.0 through 9.0.20 Microsoft.NETCore.App.Runtime.linux-arm versions 10.0.0 through 10.0.12...
PT-2026-112287
Name of the Vulnerable Software and Affected Versions Microsoft.AspNetCore.App.Runtime.linux-arm versions 8.0.0 through 8.0.31 Microsoft.AspNetCore.App.Runtime.linux-arm64 versions 8.0.0 through 8.0.31 Microsoft.AspNetCore.App.Runtime.linux-musl-arm versions 8.0.0 through 8.0.31...
CVE-2026-69651: Inefficient Algorithmic Complexity
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network...
CVE-2026-96225: Improper Link Resolution Before File Access
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...
CentOS Linux 8.4 [TuxCare] Security Update: rsyslog / rsyslog-crypto / rsyslog-doc / rsyslog-elasticsearch / etc (CENTOS8.4:CLSA-2026:1791918528)
The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1791918528 advisory. - A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript replace function by...
UBUNTU-CVE-2026-70179
Authentication bypass by spoofing in ASP.NET Core allows an authorized attacker to elevate privileges over a network...
CVE-2026-96231
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-70248: Windows Hyper-V Denial of Service Vulnerability
Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally...
CVE-2026-105729: Untrusted Pointer Dereference
Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally...
CVE-2026-96305: Use After Free
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-96247: Use of Uninitialized Resource
Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally...
CVE-2026-96220: Improper Control of Generation of Code
Improper control of generation of code 'code injection' in Windows Assigned Access allows an authorized attacker to elevate privileges locally...