312678 matches found
CVE-2026-109149: Memory Allocation with Excessive Size Value
A weakness has been identified in beautifier js-beautify up to 1.15.1/2.0.3. The affected element is an unknown function. Executing a manipulation can lead to uncontrolled memory allocation. The attack may be launched remotely. The vendor was contacted early about this disclosure but did not...
PT-2026-112310
Insufficient granularity of access control in Windows Mobile Device Management allows an authorized attacker to perform tampering locally...
Microsoft Windows: CVE-2026-83634: Windows BitLocker Elevation of Privilege Vulnerability
Double free in Windows BitLocker allows an authorized attacker to elevate privileges locally...
PT-2026-111676
Name of the Vulnerable Software and Affected Versions SourceCodester Online Exam System version 1.0 Description An issue exists in the Login Endpoint within the file adminpanel/admin/query/loginExe.php. Remote manipulation of the username and pass arguments allows for SQL injection, a technique...
PT-2026-112516
Out-of-bounds read in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to disclose information locally...
PT-2026-111973
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A use-after-free issue in the HID class driver allows an unauthorized attacker to elevate privileges. This occurs during a physical attack, where the attacker can manipulate the system to gai...
PT-2026-112712
Allocation of resources without limits or throttling in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...
Microsoft Windows: CVE-2026-70245: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Access of resource using incompatible type 'type confusion' in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...
CVE-2026-96849: Use of Uninitialized Resource
Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally...
PT-2026-111163
A flaw has been found in yoshitomo-matsubara torchdistill up to 1.1.5. This affects the function load ckpt of the file torchdistill/common/main util.py. Executing a manipulation of the argument src ckpt can lead to deserialization. The attack needs to be launched locally. The exploit has been...
KLA91345 Multiple vulnerabilities in Microsoft System Center
Multiple vulnerabilities were found in Microsoft System Center. Malicious users can exploit these vulnerabilities to bypass security restrictions, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in Microsoft...
PT-2026-112837
Name of the Vulnerable Software and Affected Versions Windows 11 Version 24H2 Windows 11 Version 25H2 Windows 11 version 26H1 Windows 11 Version 26H2 Description Missing authentication for a critical function in the Windows Health and Optimized Experiences Service allows an authorized attacker to...
CVE-2026-83842: Double Free
Double free in Windows TCP/IP allows an authorized attacker to elevate privileges locally...
PT-2026-112012
Name of the Vulnerable Software and Affected Versions Windows Modern Device Management MDM affected versions not specified Description An issue exists where the release of an invalid pointer or reference allows an authorized attacker to elevate privileges locally. This elevation-of-privilege allo...
PT-2026-113450
Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description A heap-based buffer overflow allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program writes more data to a heap memory buffer than i...
CVE-2026-88085: Heap-based Buffer Overflow
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-83505: Windows Setup Files Cleanup Elevation of Privilege Vulnerability
Time-of-check time-of-use toctou race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-85909: Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability
Out-of-bounds read in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to disclose information locally...
PT-2026-113136
Name of the Vulnerable Software and Affected Versions Windows Universal Disk Format File System Driver UDFS affected versions not specified Description An out-of-bounds read in the Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to disclose sensitive informatio...