59504 matches found
CVE-2026-77495: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network...
CVE-2026-69453: Missing Authorization
Missing authorization in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally...
CVE-2026-73013: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network...
CVE-2026-73006: Stack-based Buffer Overflow
Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network...
CVE-2026-73016: Heap-based Buffer Overflow
Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network...
CVE-2026-69600: Use After Free
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
CVE-2026-69322: Double Free
Double free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network...
CVE-2026-71375: Improper Restriction of XML External Entity Reference
Improper restriction of XML external entity reference vulnerability in Cosminexus Component Container. This issue affects Cosminexus Component Container: from 11-70-01 before 11-70-03, from 11-60 before 11-60-03, from 11-50 through 11-50-03, from 11-40 through 11-40-03, from 11-30 through 11-30-0...
CVE-2026-71377: Improper Neutralization of Argument Delimiters in a Command
Command Argument Injection Vulnerability in Cosminexus Component Container. This issue affects Cosminexus Component Container: from 11-70-01 before 11-70-03, from 11-60 before 11-60-03, from 11-50 through 11-50-03, from 11-40 through 11-40-03, from 11-30 through 11-30-08, from 11-20 before...
CVE-2026-71376: Improper Neutralization of Special Elements used in an OS Command
OS command injection vulnerability in Cosminexus Component Container. This issue affects Cosminexus Component Container: from 11-70-01 before 11-70-03, from 11-60 before 11-60-03, from 11-50 through 11-50-03, from 11-40 through 11-40-03, from 11-30 through 11-30-08, from 11-20 before 11-20-10, fr...
CVE-2026-69499: Integer Overflow or Wraparound
Integer overflow or wraparound in Windows Imaging Component allows an unauthorized attacker to execute code over a network...
CVE-2026-69911: Use After Free
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
CVE-2026-69318: Out-of-bounds Read
Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally...
CVE-2026-69608: Integer Overflow or Wraparound
Integer overflow or wraparound in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
CVE-2026-69585: Incorrect Type Conversion or Cast
Incorrect type conversion or cast in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
CVE-2026-69554: Missing Authentication for Critical Function
Missing authentication for critical function in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally...
CVE-2026-69860: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network...
CVE-2026-81955: Heap-based Buffer Overflow
Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network...
CVE-2026-54611: Improper Control of Generation of Code
InstantCMS is a free and open source content management system. Versions prior to 2.18.2 have a Remote Code Execution RCE issue that allows remote authenticated attackers to execute any PHP code via the component installer. It is possible to upload a malicious component into the server, however, ...