311023 matches found
PT-2026-112677
Double free in Windows Error Reporting allows an authorized attacker to execute code locally...
CVE-2026-109160: URL Redirection to Untrusted Site
A vulnerability was determined in PublicCMS up to 5.202608.a. Affected by this issue is the function SafeConfigComponent.getSafeUrl of the file publiccms-core/src/main/java/com/publiccms/logic/component/config/SafeConfigComponent.java of the component pay Endpoint. Executing a manipulation of the...
CVE-2026-83916: Double Free
Double free in Windows Error Reporting allows an authorized attacker to execute code locally...
Microsoft Windows: CVE-2026-83774: Windows Win32 Kernel Subsystem Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...
Microsoft Windows: CVE-2026-96950: Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...
CVE-2026-83500: URL Redirection to Untrusted Site
Url redirection to untrusted site 'open redirect' in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...
Microsoft Windows: CVE-2026-83918: Windows Kernel Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-83500: Windows BitLocker Security Feature Bypass Vulnerability
Url redirection to untrusted site 'open redirect' in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...
Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : OpenJDK 11 vulnerabilities (USN-8674-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8674-1 advisory. It was discovered that the JSSE component of OpenJDK 11 did not correctly authenticate users. A remote...
Microsoft Windows: CVE-2026-85864: Python Elevation of Privilege Vulnerability
Improper privilege management in Python allows an authorized attacker to elevate privileges locally...
CVE-2026-85864: Improper Restriction of Names for Files and Other Resources
Improper privilege management in Python allows an authorized attacker to elevate privileges locally...
PT-2026-112700
Name of the Vulnerable Software and Affected Versions Windows SMB Client affected versions not specified Description Incorrect authorization in the Windows SMB Client allows an authorized attacker to bypass a security feature locally. Recommendations At the moment, there is no information about a...
CVE-2026-83918: Integer Overflow or Wraparound
Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally...
VulnCheck KEV: CVE-2026-104935
Ivanti Connect Secure contains an authentication bypass by spoofing vulnerability that allows a remote unauthenticated attacker to execute arbitrary commands...
CVE-2026-109827: Out-of-bounds Write
A vulnerability has been found in GPAC up to 26.07.0. This vulnerability affects the function gfm2tsdecodeait of the file src/mediatools/ait.c of the component AIT Parser. Such manipulation leads to out-of-bounds write. The attack may be launched remotely. The exploit has been disclosed to the...
PT-2026-112500
Name of the Vulnerable Software and Affected Versions Windows Cloud Files Mini Filter Driver affected versions not specified Description A use-after-free condition in the Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. Use-after-free is a memory...
CVE-2026-96235: Out-of-bounds Write
Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network...
CVE-2026-109620: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in SourceCodester Online Reviewer System 1.0. Affected by this vulnerability is the function PDO::prepare of the file login/index.php. Such manipulation of the argument username/password leads to sql injection. It is possible to launch the attack remotely. The explo...
Microsoft Windows: CVE-2026-85859: Windows Message Queuing Queue Manager Denial of Service Vulnerability
Null pointer dereference in Windows Message Queuing Queue Manager allows an authorized attacker to deny service over a network...
PT-2026-112239
Name of the Vulnerable Software and Affected Versions Microsoft HID Parser Library affected versions not specified Description An out-of-bounds read in the HID Parser Library allows an authorized attacker to disclose information locally. An out-of-bounds read occurs when the software reads data...