3170 matches found
crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application
A flaw was found in the crypto/x509 package within Go golang. When verifying a certificate chain, excluded DNS Domain Name System constraints are not correctly applied to wildcard DNS Subject Alternative Names SANs if the case of the SAN differs from the constraint. This oversight could allow an...
DNS Rebinding
9Router is vulnerable to DNS Rebinding. The vulnerability is due to inconsistent DNS validation during image fetching, where the image URL is validated and fetched using separate DNS resolutions, allowing attackers to exploit DNS rebinding to access internal HTTP services...
MAL-2026-10605 Malicious code in @radivi-ui/react-dialog (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5e92ae03eb6adb090fb832665431984cccef31039bb920e3850535f4defe610 @radivi-ui/react-dialog is a typosquat of @radix-ui/react-dialog whose main entry index.js is a self-executing IIFE that runs whoami and hostname via...
CVE-2026-49169
Use after free in DNS Server allows an authorized attacker to execute code over a network...
CVE-2026-50487 Windows DNS Client Elevation of Privilege Vulnerability
...
CVE-2026-50487 Windows DNS Client Elevation of Privilege Vulnerability
...
CVE-2026-50495 DNS Client Tampering Vulnerability
...
CVE-2026-50495 DNS Client Tampering Vulnerability
...
CVE-2026-50495
CVE-2026-50495 is a Windows DNS vulnerability described as improper access control that could allow an authorized local attacker to tamper DNS-related data. Multiple connected sources (NVD entry and MSRC update guidance) confirm this as a locally exploitable issue with a baseline CVSS v3.1 score ...
CVE-2026-50465
CVE-2026-50465 is a Windows DNS Client tampering vulnerability caused by improper access control that can be exploited locally by an authorized attacker. Connected sources confirm Windows DNS is affected (CVE-2026-50465 listed under Windows DNS with data manipulation; MSRC update guidance). The C...
CVE-2026-50426 Windows DNS Server Remote Code Execution Vulnerability
...
CVE-2026-50295 Windows Zero Trust DNS Security Feature Bypass Vulnerability
...
CVE-2026-50295 Windows Zero Trust DNS Security Feature Bypass Vulnerability
...
CVE-2026-49174 DNS Client Tampering Vulnerability
...
CVE-2026-49174
CVE-2026-49174 describes a vulnerability in Microsoft Windows DNS where missing authentication for a critical function could allow a locally authorized attacker to tamper with DNS behavior. The NVD entry notes a CVSS v3.1 base score of 6.1 (Medium) with a LOCAL attack vector, LOW attack complexit...
CVE-2026-49175
CVE-2026-49175 is a Windows DNS Client vulnerability described as a heap-based buffer overflow that allows an authorized attacker to achieve local privilege escalation. The issue affects the Windows DNS client and is characterized by a LOCAL attack vector with low attack complexity and the need f...
CVE-2026-49169 Windows DNS Server Remote Code Execution Vulnerability
...
CVE-2026-49169
CVE-2026-49169 affects Windows DNS Server. The vulnerability is a use-after-free in the DNS Server that enables remote code execution when exploited over a network by an authenticated attacker. Exploitation details are not provided in the supplied documents beyond the CVSS 3.1 score (8.0, HIGH) w...
