18005 matches found
EUVD-2026-73584
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally...
CVE-2026-69591
CVE-2026-69591 is an out-of-bounds read vulnerability in Windows NTFS that allows an authorized attacker to disclose information over a network. The CVSS 3.1 score is 5.7 (Medium) , requiring network access, low privileges, and user interaction, with a high confidentiality impact but no integrity...
EUVD-2026-73530
Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-73471
Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network...
EUVD-2026-73316
Out-of-bounds read in SQL Server allows an authorized attacker to execute code over a network...
EUVD-2026-72930
A NULL Pointer Dereference vulnerability CWE-476 vulnerability in Fortinet FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiPAM 1.9.0, FortiPAM 1.8 all versions, FortiPAM 1.7 all versions, FortiPAM 1.6 all versions, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all...
CVE-2026-84392
A NULL Pointer Dereference (CWE-476) in Fortinet FortiOS (7.2 all, 7.4 all), FortiPAM (1.0 through 1.9.0), and FortiProxy (7.2 all, 7.4 all, 7.6.0–7.6.6) allows an authenticated attacker to crash the httpsd daemon via crafted HTTP requests. The CVSS 3.1 score is 2.7 (Low) , reflecting high privil...
CVE-2026-18851
Missing authorization in Ivanti Endpoint Manager Mobile before version 12.10.0.0, 12.9.0.2, and 12.8.0.4 allows a remote authenticated attacker to escalate their privileges to admin...
CVE-2026-12647
A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server...
CVE-2026-12646
A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server...
EUVD-2026-72811
A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server...
CVE-2026-73321
XenForo before 2.3.13 contains an uncontrolled recursion vulnerability in the BBCode parser that allows authenticated attackers to cause persistent denial of service by submitting a post with deeply nested BBCode tags. Attackers can craft a single malicious post with sufficient nesting depth to...
CVE-2026-18851
Missing authorization in Ivanti Endpoint Manager Mobile before version 12.10.0.0, 12.9.0.2, and 12.8.0.4 allows a remote authenticated attacker to escalate their privileges to admin...
CVE-2026-18851
CVE-2026-18851 is a missing authorization vulnerability in Ivanti Endpoint Manager Mobile affecting versions before 12.10.0.0 , 12.9.0.2 , and 12.8.0.4 . The flaw allows a remote authenticated attacker to escalate privileges to admin , resulting in high impact on confidentiality, integrity, and a...
Windows Modern Execution Server Elevation of Privilege Vulnerability
Use after free in Windows Modern Execution Server allows an authorized attacker to elevate privileges locally...
Remote Desktop Services Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to execute code over a network...
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally...
Microsoft SQL Server Denial of Service Vulnerability
Integer overflow or wraparound in SQL Server allows an authorized attacker to deny service over a network...