306264 matches found
Microsoft Windows: CVE-2026-69736: Windows Credential Manager Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Credential Manager allows an authorized attacker to elevate privileges locally...
PT-2026-112075
Name of the Vulnerable Software and Affected Versions Windows Credential Manager affected versions not specified Description An issue exists where concurrent execution using a shared resource with improper synchronization, known as a race condition, allows an authorized attacker to elevate...
Microsoft Windows: CVE-2026-70580: Windows Credential Guard Spoofing Vulnerability
Missing authentication for critical function in Windows Credential Guard allows an authorized attacker to perform spoofing locally...
Microsoft Windows: CVE-2026-96927: Windows NTFS Information Disclosure Vulnerability
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally...
CVE-2026-81964: Use of Hard-coded Credentials
Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker to bypass a security feature locally...
PT-2026-112070
Name of the Vulnerable Software and Affected Versions Windows Network File System affected versions not specified Description An out-of-bounds read in the Windows Network File System allows an authorized attacker to disclose sensitive information locally and affect the system. An out-of-bounds re...
CVE-2026-88147: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Secure Socket Tunneling Protocol SSTP allows an authorized attacker to elevate privileges locally...
CVE-2026-70013: Use After Free
Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network...
Fabric OS AAA Privilege Bypass
The vulnerability of the Fabric OS AAA component of the Brocade Fabric OS operating system is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
KLA91345 Multiple vulnerabilities in Microsoft System Center
Multiple vulnerabilities were found in Microsoft System Center. Malicious users can exploit these vulnerabilities to bypass security restrictions, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in Microsoft...
PT-2026-111379
Name of the Vulnerable Software and Affected Versions SIMATIC WinCC versions 7.5 SIMATIC WinCC versions prior to 8.0 Update 11 SIMATIC WinCC versions prior to 8.1 Update 7 Description The application does not sufficiently restrict permissions assigned to a database role. This flaw allows an...
Microsoft Windows: CVE-2026-83776: Windows Bluetooth Driver Elevation of Privilege Vulnerability
Out-of-bounds read in Microsoft Bluetooth Driver allows an unauthorized attacker to elevate privileges with a physical attack...
SUSE SLES15 Security Update : unbound (SUSE-SU-2026:4624-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4624-1 advisory. - CVE-2026-77860: 'serve-expired' can bypass Unbound 'wait-limit' bsc1280403. - CVE-2026-77955: Possible ZONEMD verification bypass...
PT-2026-111656
Name of the Vulnerable Software and Affected Versions Ivanti Connect Secure versions 25.1.1.1 through 25.1.1.1 Ivanti Connect Secure versions 25.1.2.2 through 25.1.2.2 Ivanti Connect Secure versions 22.8R2.4 through 22.8R2.4 Description An authentication bypass by spoofing allows a remote...
CVE-2026-58280
Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network...
CVE-2026-96958
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network...
CVE-2026-96225
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...
CVE-2026-96231
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...