311279 matches found
CVE-2026-83499: Insufficient Granularity of Access Control
Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally...
CVE-2026-83907: Exposure of Sensitive System Information to an Unauthorized Control Sphere
Exposure of sensitive system information to an unauthorized control sphere in Windows Hello allows an authorized attacker to disclose information locally...
CVE-2026-63161: Session Fixation
Omnispace Agora Project before 26.10.0 contains a session fixation vulnerability that allows remote attackers to hijack authenticated sessions by planting a known session identifier in a victim's browser prior to login. Attackers can exploit the application's failure to regenerate the session id...
CVE-2026-83845: Authentication Bypass by Spoofing
Improper privilege management in Windows Internet wininet.dll allows an authorized attacker to perform spoofing locally...
CVE-2026-83895: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an unauthorized attacker to elevate privileges with a physical attack...
CVE-2026-85368: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally...
CVE-2026-108266
Privasys rustls is a maintained fork of the rustls TLS library that adds RA-TLS challenge and channel-binding support. Prior to privasys-v0.8.1, the fork emitted RA-TLS challenge certificates whose quote ReportData was bound to the certificate public key and client nonce but not to the active TLS...
CVE-2026-96911: Improper Link Resolution Before File Access
Improper link resolution before file access 'link following' in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
CVE-2026-70067: Use After Free
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...
CVE-2026-70284: Use of Uninitialized Resource
Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...
CVE-2026-81971: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows NTFS allows an authorized attacker to elevate privileges locally...
EUVD-2026-98807
Buffer Overflow vulnerability in zserge jsmn jsmn HEAD 25647e6 allows a remote attacker to cause a denial of service via the jsmn.h, jsmnparse, example/jsondump.c, dump components...
PT-2026-116241
Уязвимость функции security.update user платформы для мониторинга безопасности и обнаружения угроз Wazuh связана с недостатками процедуры авторизации. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, обойти существующие механизмы безопасности...
CVE-2026-69673: Improper Link Resolution Before File Access
Improper link resolution before file access 'link following' in Windows Update allows an authorized attacker to elevate privileges locally...
CVE-2026-88073: Use After Free
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-96927: Out-of-bounds Read
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally...
CVE-2026-70083: Incorrect Authorization
Incorrect authorization in DNS Server allows an authorized attacker to perform tampering locally...
CVE-2026-88126: Untrusted Pointer Dereference
Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally...