CVE-2026-88220

A buffer over-read vulnerability exists in Windows Performance Counters , which could allow an authorized attacker to disclose information locally . Exploitation details and specific affected versions are not provided in the documents. Remediation involves applying the official fixes provided in ...

EUVD-2026-121597

Buffer over-read in Windows Performance Counters allows an authorized attacker to disclose information locally...

Windows Performance Counters Information Disclosure Vulnerability

Buffer over-read in Windows Performance Counters allows an authorized attacker to disclose information locally...

Windows Performance Counters Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Performance Counters allows an unauthorized attacker to execute code over a network...

Windows Performance Counters Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Performance Counters allows an unauthorized attacker to execute code over a network...

PT-2026-143599

Heap-based buffer overflow in Windows Performance Counters allows an unauthorized attacker to execute code over a network...

CVE-2026-92544: Kong Inc.: SQL injection in the LLM usage counters of Kong Gateway Enterprise and Kong AI Gateway may allow a client to execute…

SQL injection in the LLM usage counters of Kong Gateway Enterprise and Kong AI Gateway may allow a client to execute arbitrary SQL against the Kong database via a crafted model name...

PT-2026-144248

Heap-based buffer overflow in Windows Performance Counters allows an unauthorized attacker to execute code over a network...

Juniper Networks Junos OS Evolved fwstatsd DoS

The vulnerability in the daemon fwstatsd within Juniper Networks Junos OS Evolved is related to an uncontrolled denial-of-service condition. Exploitation of this vulnerability enables a remote attacker to cause a denial-of-service by sending SNMP firewall counters requests...

PT-2026-144153

Buffer over-read in Windows Performance Counters allows an authorized attacker to disclose information locally...

PT-2026-144766

Name of the Vulnerable Software and Affected Versions Kong Gateway Enterprise affected versions not specified Kong AI Gateway affected versions not specified Description An issue exists in the LLM usage counters where a client can execute arbitrary SQL against the database. This occurs because th...

Perfusion

Perfusion On Windows 7 , Windows Server 2008R2 , Windows 8 , and Windows Server 2012 , the registry key of the RpcEptMapper and DnsCache 7/2008R2 only services is configured with weak permissions. Any local user can create a Performance subkey and then leverage the Windows Performance Counters to...

CVE-2026-92694

FastNetMon , a high-performance DDoS detector and sensor, is vulnerable in version 1.2.9 and earlier due to a race condition in the IPv6 top-talkers screen-draw thread. Specifically, the draw_table_ipv6() function in src/fastnetmon_logic.cpp iterates over ipv6_host_counters.average_speed_map with...

CVE-2026-92694 FastNetMon: IPv6 host counters map iterated without lock, racing concurrent inserts

FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, FastNetMon's IPv6 top-talkers screen-draw thread in drawtableipv6 in src/fastnetmonlogic.cpp iterates ipv6hostcounters.averagespeedmap without holding countermapmutex while recalculatespeed inserts new keys a...

CVE-2026-103938

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.3.0, interface/patientfile/poscheckoutippf.php performs state-changing void, voidall, and regen operations through GET requests without CSRF token validation. The formchecksum...

CVE-2026-103938 OpenEMR: CSRF Protection Bypass on IPPF Point-of-Sale Void and Regen Operations

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.3.0, interface/patientfile/poscheckoutippf.php performs state-changing void, voidall, and regen operations through GET requests without CSRF token validation. The formchecksum...

PT-2026-133258

Software installed and run as a non-privileged user may conduct improper GPU system calls to cause race condition in hardware performance counters buffer’s destruction path leading to read and/or write UAF. The race condition in the destruction path could lead to reference counter being decrement...

CVE-2026-99089

A flaw was found in the Linux kernel's Samsung I2S audio driver. The driver's initialization routine configures runtime power management without enabling the associated operating clock, leaving clock reference counters out of balance. When the device transitions into a suspended state, the kernel...

CVE-2026-99000

A flaw was found in the Linux kernel's drm/xe graphics driver. A local user can trigger a Denial of Service DoS by pinning and unpinning shared buffer objects repeatedly. Improper tracking of nested pin operations causes memory accounting counters to underflow, misleading the system into reportin...

Zephyr Project Zephyr encryption issue vulnerability

Versions 1.7.0 through 4.5.0 of Zephyr contain an encryption-related vulnerability. This flaw arises because the DHCPv4 client treats transaction identifiers as predictable counters and reuses them during renewals and rebindings. It fails to validate server identity or source address, which may...