126 matches found
CVE-2026-88007 Traefik HTTP/3 Backend NTLM Connection Reuse
Traefik is an open source HTTP reverse proxy and load balancer. From 2.11.0 until 2.11.57 and 3.7.13, the HTTP/3 entrypoint ConnContext does not call service.AddTransportOnContext, so kerberosRoundTripper uses a shared backend transport instead of a transport dedicated to each frontend connection...
CVE-2026-72926
Use after free in Windows Internet Connection Sharing ICS allows an authorized attacker to elevate privileges locally...
CVE-2026-72964
CVE-2026-72964 is a missing authentication vulnerability in Windows Internet Connection Sharing (ICS) . An attacker with low-level local privileges can tamper with critical ICS functions, resulting in a high integrity impact without affecting confidentiality or availability. The CVSS 3.1 score is...
EUVD-2026-73256
Use after free in Windows Internet Connection Sharing ICS allows an unauthorized attacker to execute code over a network...
CVE-2026-72983
CVE-2026-72983 is a use-after-free vulnerability in Windows Internet Connection Sharing (ICS) that allows an unauthorized remote attacker to achieve remote code execution over the network. The CVSS 3.1 score is 9.8 (Critical) with no privileges or user interaction required. CISA's SSVC assessment...
SUSE CVE-2026-18924
A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process...
AZL-99879 CVE-2026-18924 affecting package tensorflow 2.16.1-11
A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process...
CVE-2026-18924 HTTP/2 server push UAF
A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process...
CVE-2026-18924 HTTP/2 server push UAF
A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process...
CVE-2026-18924
A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process...
HTTP/2 server push UAF
A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process...
CVE-2026-20828
Out-of-bounds read in Windows Internet Connection Sharing ICS allows an unauthorized attacker to disclose information with a physical attack...
CVE-2026-20828
Out-of-bounds read in Windows Internet Connection Sharing ICS allows an unauthorized attacker to disclose information with a physical attack...
CVE-2026-20828
Out-of-bounds read in Windows Internet Connection Sharing ICS allows an unauthorized attacker to disclose information with a physical attack...
Windows rndismp6.sys Information Disclosure Vulnerability
Out-of-bounds read in Windows Internet Connection Sharing ICS allows an unauthorized attacker to disclose information with a physical attack...
PT-2026-2678
Name of the Vulnerable Software and Affected Versions Windows Internet Connection Sharing ICS affected versions not specified Description An out-of-bounds read issue exists in Windows Internet Connection Sharing ICS. This flaw could allow an attacker to disclose information. Physical access is...
CVE-2019-20498
cPanel before 82.0.18 allows WebDAV authentication bypass because the connection-sharing logic is incorrect SEC-534...
EUVD-2019-11042
Malware in sbrugna...