311441 matches found
CVE-2026-83721: Use After Free
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...
CVE-2026-83500: URL Redirection to Untrusted Site
Url redirection to untrusted site 'open redirect' in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...
Microsoft Windows: CVE-2026-102216: Windows StateRepository API Elevation of Privilege Vulnerability
Access of resource using incompatible type 'type confusion' in Windows StateRepository API allows an authorized attacker to elevate privileges locally...
CVE-2026-83719: Buffer Over-read
Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally...
PT-2026-111389
Name of the Vulnerable Software and Affected Versions Industrial Edge App Publisher versions prior to V1.27.9 Description The software fails to properly validate the server certificate during the initiation of a TLS connection. This flaw enables a Man-in-the-Middle attack, where an attacker can...
Microsoft Windows: CVE-2026-70227: Windows Device Association Service Information Disclosure Vulnerability
Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally...
CVE-2026-70102: Use After Free
Use after free in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally...
CVE-2026-96305: Use After Free
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-85854: Use After Free
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
CVE-2026-109966: Improper Neutralization of Argument Delimiters in a Command
yt-dlp-web-ui through 4.0.0 contains an argument injection vulnerability that allows unauthenticated remote attackers to inject yt-dlp options by supplying a dash-prefixed url parameter to the Service.Formats JSON-RPC method. Attackers can send values like --load-info-json via /rpc/http or /rpc/w...
Microsoft Windows: CVE-2026-96223: Windows Hyper-V Elevation of Privilege Vulnerability
Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally...
CVE-2026-70247: Out-of-bounds Read
Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to execute code locally...
CVE-2026-70118: Use After Free
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally...
CVE-2026-87698: Out-of-bounds Read
Out-of-bounds read in Windows Remote Access Service Infrastructure allows an authorized attacker to disclose information locally...
PT-2026-111326
Name of the Vulnerable Software and Affected Versions AdithyaYelloju Restaurant-Management-System versions up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c Description An issue exists in the Password Reset component within the file 'User/forgot3.php'. Remote attackers can perform SQL injection, a...
CVE-2026-96930: Out-of-bounds Read
Out-of-bounds read in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to disclose information locally...
CVE-2026-83794: Out-of-bounds Read
Out-of-bounds read in Windows Portable Device MTP Driver allows an authorized attacker to disclose information locally...
CVE-2026-109607: Improper Neutralization of Special Elements used in an SQL Command
A flaw has been found in SourceCodester Online Exam System 1.0. Affected is an unknown function of the file adminpanel/admin/query/loginExe.php of the component Login Endpoint. This manipulation of the argument username/pass causes sql injection. It is possible to initiate the attack remotely. Th...
PT-2026-112239
Name of the Vulnerable Software and Affected Versions Microsoft HID Parser Library affected versions not specified Description An out-of-bounds read in the HID Parser Library allows an authorized attacker to disclose information locally. An out-of-bounds read occurs when the software reads data...