311273 matches found
CVE-2026-96217: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally...
CVE-2026-81969: Insufficient Granularity of Access Control
Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally...
CVE-2026-102202: Improper Link Resolution Before File Access
Improper access control in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to elevate privileges locally...
PT-2026-111164
A vulnerability has been found in code-projects Online Reviewer System 1.0. This vulnerability affects unknown code of the file /reviewer/system/system/admins/manage/users/btn functions.php of the component User Profile Update Handler. The manipulation of the argument usertype id leads to...
PT-2026-113240
Name of the Vulnerable Software and Affected Versions OpenSSH for Windows affected versions not specified Description A double free issue exists that allows an authorized attacker to elevate privileges locally. A double free occurs when the program attempts to free the same memory location twice,...
PT-2026-113117
Untrusted pointer dereference in Microsoft Windows Search Component allows an authorized attacker to disclose information locally...
CVE-2026-110036: Integer Overflow or Wraparound
A flaw was found in device-mapper-persistent-data. A local attacker can cause a Denial of Service DoS by inducing a user or system tool to process crafted device metadata containing an excessively large block index. An arithmetic error in the synchronous block reading logic causes the application...
CVE-2026-102231: Improper Resolution of Path Equivalence
Improper resolution of path equivalence in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...
CVE-2026-105004: Out-of-bounds Read
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...
CVE-2026-105007: Out-of-bounds Read
An elevation of privilege vulnerability exists in the Network Driver Interface Specification NDIS when ndis.sys fails to check the length of a buffer prior to copying memory to it. To exploit the vulnerability, in a local attack scenario, an attacker could run a specially crafted application to...
CVE-2026-109403: Server-Side Request Forgery (SSRF)
A vulnerability was determined in conductor-oss conductor up to 3.32.5. Affected by this vulnerability is the function A2AService.getAgentCard of the file ai/src/main/java/org/conductoross/conductor/ai/a2a/A2AService.java of the component Agent Card Fetching. Executing a manipulation of the...
CVE-2026-109409: Improper Neutralization of Special Elements used in a Command
A flaw has been found in HBAI-Ltd Toonflow-app up to 1.1.8. The affected element is the function childprocess.exec of the file src/routes/setting/fileManagement/openFolder.ts of the component Open Folder Endpoint. Executing a manipulation of the argument path can lead to command injection. The...
CVE-2026-102186: Untrusted Pointer Dereference
Untrusted pointer dereference in Windows Network File System allows an authorized attacker to disclose information locally...
CVE-2026-102232: Incorrect Authorization
Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...
CVE-2026-105006: Use After Free
Use after free in HID class driver allows an unauthorized attacker to elevate privileges with a physical attack...
CVE-2026-108467: Heap-based Buffer Overflow
Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an authorized attacker to execute code over a network...
CVE-2026-109149: Memory Allocation with Excessive Size Value
A weakness has been identified in beautifier js-beautify up to 1.15.1/2.0.3. The affected element is an unknown function. Executing a manipulation can lead to uncontrolled memory allocation. The attack may be launched remotely. The vendor was contacted early about this disclosure but did not...
CVE-2026-109155: Improper Limitation of a Pathname to a Restricted Directory
A flaw has been found in DeepPavlov up to 1.7.0. This impacts the function untar of the component Model Download Handler. This manipulation causes path traversal. The attack is possible to be carried out remotely. The project was informed of the problem early through an issue report but has not...
Microsoft Windows: CVE-2026-96215: Windows Autopilot Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Autopilot allows an authorized attacker to elevate privileges locally...