23 matches found
CVE-2026-57866
Server side request forgery in Apache Impala versions 4.4.x and 4.5.x. Authenticated Impala users with permissions to execute the aigeneratetext function can exfiltrate secrets provided by the credential providers configured in the hadoop.security.credential.provider.path property of...
CVE-2026-57866 Apache Impala: Secrets Exfiltration via SSRF
Server side request forgery in Apache Impala versions 4.4.x and 4.5.x. Authenticated Impala users with permissions to execute the aigeneratetext function can exfiltrate secrets provided by the credential providers configured in the hadoop.security.credential.provider.path property of...
CVE-2026-57866: Server-Side Request Forgery (SSRF)
Server side request forgery in Apache Impala versions 4.4.x and 4.5.x. Authenticated Impala users with permissions to execute the aigeneratetext function can exfiltrate secrets provided by the credential providers configured in the hadoop.security.credential.provider.path property of...
CVE-2026-69814
Use after free in Windows Credential Providers allows an authorized attacker to elevate privileges locally...
CVE-2026-69790
Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to elevate privileges locally...
CVE-2026-69729
Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to execute code over a network...
EUVD-2026-73597
Use after free in Windows Credential Providers allows an authorized attacker to elevate privileges locally...
CVE-2026-69814
CVE-2026-69814 is a use-after-free vulnerability in Windows Credential Providers that allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 score is 7.0 (HIGH) , with a local attack vector, high complexity, and low privileges required, resulting in high impact to conf...
CVE-2026-69729
CVE-2026-69729 is a heap-based buffer overflow in Windows Credential Providers that allows an authorized attacker to achieve remote code execution over a network. The vulnerability requires low privileges and no user interaction , with an attack complexity of low and network attack vector, as sco...
EUVD-2026-73040
Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to execute code over a network...
CVE-2026-69790
CVE-2026-69790 is a heap-based buffer overflow in Windows Credential Providers that enables a local, low-privilege attacker to escalate privileges. The vulnerability requires local access with low privileges , no user interaction , and has low attack complexity , resulting in HIGH impact across c...
EUVD-2026-73035
Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to elevate privileges locally...
Windows Credential Providers Elevation of Privilege Vulnerability
Use after free in Windows Credential Providers allows an authorized attacker to elevate privileges locally...
Windows Credential Providers Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to elevate privileges locally...
Windows Credential Providers Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to execute code over a network...
CVE-2026-69729: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to execute code over a network...
PT-2026-87685
Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to execute code over a network...
PT-2026-87721
Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to elevate privileges locally...