59499 matches found
CVE-2026-73006
Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network...
CVE-2026-70296
Out-of-bounds write in Windows Imaging Component allows an unauthorized attacker to execute code over a network...
CVE-2026-70145
Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally...
CVE-2026-69911
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
CVE-2026-69860
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network...
CVE-2026-69608
Integer overflow or wraparound in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
CVE-2026-69585
Incorrect type conversion or cast in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
CVE-2026-69554
Missing authentication for critical function in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally...
CVE-2026-69499
Integer overflow or wraparound in Windows Imaging Component allows an unauthorized attacker to execute code over a network...
CVE-2026-69467
Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...
CVE-2026-69453
Missing authorization in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally...
CVE-2026-69318
Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally...
CVE-2026-69322
Double free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network...
CVE-2026-69305
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network...
CVE-2026-68896
Absolute path traversal in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
CVE-2026-54611
InstantCMS is a free and open source content management system. Versions prior to 2.18.2 have a Remote Code Execution RCE issue that allows remote authenticated attackers to execute any PHP code via the component installer. It is possible to upload a malicious component into the server, however, ...
CVE-2026-84000
CVE-2026-84000 is a heap-based buffer overflow in Microsoft Graphics Component that allows an authorized attacker to execute code locally. The vulnerability requires local access and low privileges but no user interaction, resulting in high impact to confidentiality, integrity, and availability (...
EUVD-2026-73917
Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to execute code locally...
CVE-2026-83992
CVE-2026-83992 is a heap-based buffer overflow in Windows Imaging Component that allows an unauthorized attacker to execute code over a network. The vulnerability carries a CVSS 3.1 base score of 8.8 (HIGH) with vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating network reachability with low ...