18005 matches found
389-ds-base: 389-ds-base: CVE-2026-11610 incomplete fix may introduce a connection-stall DoS
A flaw was found in 389-ds-base. A remote, authenticated attacker could exploit a vulnerability in the Simple Authentication and Security Layer SASL UNBIND process. By sending a specially crafted request, the attacker can cause a connection to stall, leading to resource exhaustion and a Denial of...
389-ds-base: 389-ds-base: heap buffer overflow via SASL wrapped-record length lower-bound underflow in sasl_io_start_packet()
A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directory Server 389-ds-base. In sasliostartpacket, the wrapped-record length read from the wire is validated only against an upper bound. A small wire length 0, 1, or 2 produces an encryptedbuffercount below the already-consumed...
CVE-2026-76963
Due to a missing authorization check in Application Server ABAP of SAP NetWeaver and ABAP Platform, an authenticated attacker could gain unauthorized access to sensitive system configuration information. Successful exploitation could result in exposure of security relevant settings and internal...
CVE-2026-76968
SAP Web Dispatcher, Internet Communication Manager and SAP Content Server allows an authenticated low-privileged attacker to access certain administrative functionality or interface and obtain sensitive information about the system state, resulting in information disclosure. This disclosed...
PT-2026-87453
Use after free in Windows USB Video Driver allows an authorized attacker to elevate privileges locally...
PT-2026-87992
šØ CVE-2026-78448 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. š@cveNotify...
PT-2026-87529
Name of the Vulnerable Software and Affected Versions Windows Fax Service affected versions not specified Description A heap-based buffer overflow occurs in the Windows Fax Service, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory...
PT-2026-87494
Name of the Vulnerable Software and Affected Versions Windows Volume Manager Extension Driver affected versions not specified Description A heap-based buffer overflow occurs in the Windows Volume Manager Extension Driver. This issue allows an authorized attacker to elevate privileges locally on t...
PT-2026-87475
Name of the Vulnerable Software and Affected Versions Windows Audio Service affected versions not specified Description A heap-based buffer overflow in the Windows Audio Service allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program writes...
PT-2026-87720
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
PT-2026-87872
Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to execute code locally...
PT-2026-87578
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...
PT-2026-87262
Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an authorized attacker to...
PT-2026-87253
Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an authorized attacker to...
PT-2026-87631
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally...
PT-2026-88116
Use after free in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
PT-2026-87027
The Live Composer ā Free WordPress Website Builder plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.1.18 via deserialization of untrusted input . This makes it possible for authenticated attackers, with contributor-level access and above, to injec...
PT-2026-87201
Improper authorization in XBox Gaming Services allows an authorized attacker to elevate privileges locally...
PT-2026-87464
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
CVE-2026-12650: Deserialization of Untrusted Data
A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server...