202461 matches found
Windows Graphics Kernel Elevation of Privilege Vulnerability
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally...
Windows HTTP Protocol Stack Tampering Vulnerability
Partial string comparison in Windows HTTP Protocol Stack allows an unauthorized attacker to perform tampering over an adjacent network...
Windows MIDI Service Module Elevation of Privileges Vulnerability
Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...
Windows Narrator Braille Elevation of Privilege Vulnerability
Untrusted search path in Windows Narrator Braille allows an authorized attacker to elevate privileges locally...
Windows DHCP Server Elevation of Privilege Vulnerability
Improper link resolution before file access 'link following' in Windows DHCP Server allows an authorized attacker to elevate privileges locally...
Windows Kerberos Elevation of Privilege Vulnerability
Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally...
Windows Telephony Service Elevation of Privilege Vulnerability
Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally...
Win32k Information Disclosure Vulnerability
Buffer over-read in Windows Win32K allows an authorized attacker to disclose information locally...
Windows Message Queuing Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally...
Visual Studio Code Remote Code Execution Vulnerability
Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network...
Visual Studio Code Security Feature Bypass Vulnerability
Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...
Windows Package Manager Elevation of Privilege Vulnerability
Improper privilege management in Windows Package Manager allows an authorized attacker to elevate privileges locally...
MITRE: CVE-2026-6727 TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability
CVE-2026-6727 is an Information Disclosure vulnerability in the TPM 2.0 reference implementation involving an RSA OAEP timing side channel. MITRE assigned this CVE on behalf of the Trusted Computing Group. This document incorporates updates to Microsoft Windows that address this vulnerability...
Microsoft Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...
Windows Defender Firewall Service Security Feature Bypass Vulnerability
Missing authorization in Windows Defender Firewall Service allows an authorized attacker to bypass a security feature locally...
Security Advisory Ivanti Endpoint Manager (EPM) August 2026
Security Advisory Ivanti Endpoint Manager Multiple CVEs Summary: Ivanti has released updates for Ivanti Endpoint Manager EPM which addresses three high severity vulnerabilities. We are not aware of any customers being exploited by these vulnerabilities at the time of disclosure. Vulnerability...
CVE-2026-68298
A flaw was found in the Linux kernel's drm/xe/vm module. During the creation of a virtual machine VM, an error in resource allocation could lead to a Shared Virtual Memory SVM resource leak. This occurs because the kernel's resource deallocation functions are not consistently called when an error...
MINI-M3Q2-242R-QC68
Bulletin has no description...
CVE-2026-68427
A flaw was found in the gpu: host1x component of the Linux kernel. The host1xbounpin function incorrectly dereferences a memory mapping after it has been freed, leading to a use-after-free vulnerability. This issue could allow a local attacker to cause memory corruption, potentially leading to a...
SonicWall Email Security Affected By Multiple Vulnerabilities
1 CVE-2026-66149 - Improper Control of Generation of Code 'Code Injection' Vulnerability via netmaskImproper Control of Generation of Code 'Code Injection' Vulnerability in the SonicWall Email Security appliance allows an authenticated attacker with access to the SonicWall Email Security restrict...