CVE-2026-68405

A flaw was found in the Linux kernel's mac80211 Wi-Fi subsystem. When stopping an Access Point AP VLAN, the system attempts to free network packet buffers SKBs while interrupts are disabled. This improper handling can lead to a situation where network transmission operations occur in an...

CVE-2026-68337

A flaw was found in the Linux kernel. The BPF Berkeley Packet Filter redirect helpers, specifically bpfredirect and skbdoredirect, can attempt to dereference a null pointer if a bpfnetcontext is not established. This can occur when certain BPF programs are attached to a network queueing disciplin...

wildfly-iiop-openjdk: Missing authentication on EAP's IIOP NameService leads to MITM or DoS

A flaw was found in EAP's IIOP. The listener's NameService would accept bind operations without authentication, allowing an attacker to hijack JNDI lookups and binding them to a malicious ORB, achieving MITM or DoS on further invocations...

CVE-2026-68322

A flaw was found in the Linux kernel's Reliable Datagram Sockets RDS component. A local user can trigger a null pointer dereference by attempting to bind an RDS socket to an IPv6 address when IPv6 is explicitly disabled. This can lead to a system crash, resulting in a Denial of Service DoS...

CVE-2026-73216

CVE-2026-73216 affects Coturn (TURN/STUN server). Before 4.17.0, shutdown_client_connection() in src/server/ns_turn_server.c prematurely calls dec_quota() and releases bandwidth accounting during the first-stage close of a mobility-enabled allocation, while preserving allocation, relay socket, se...

CVE-2026-73215 The coturn server can end in a state where it does not accept more requests with "even-port" enabled.

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.17.0, turnportsallocateeven in src/apps/relay/turnports.c marks the unused odd sibling port as TPSTAKENODD for an EVEN-PORT Allocate request with reservation bit R=0 even though no RTCP socket will release it, allowin...

CVE-2026-73215

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.17.0, turnportsallocateeven in src/apps/relay/turnports.c marks the unused odd sibling port as TPSTAKENODD for an EVEN-PORT Allocate request with reservation bit R=0 even though no RTCP socket will release it, allowin...

CVE-2026-24099

Use after free for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service. System software adversary with an unauthenticated user combined with a high complexity attack may enable denial of service. This result may potentially occur via local...

CVE-2026-65681

CVE-2026-65681 : A null pointer dereference in the Windows iSCSI Target Service allows an unauthenticated, remote attacker to cause a denial of service over the network. The NVD entry states a CVSS v3.1 base score of 7.5 (HIGH) with network attack vector, low attack complexity, no privileges requ...

CVE-2026-62881 Windows DNS Elevation of Privilege Vulnerability

...

EUVD-2026-56643

A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of servic...

CVE-2026-70348

CVE-2026-70348 describes an issue in Windows Management Services where improper link resolution before file access (link following) can allow an authenticated local attacker to cause a Denial of Service . The available sources state the vulnerability enables local DoS; no exploitable details or p...

CVE-2026-70348 Windows Management Services Denial of Service Vulnerability

...

CVE-2026-68819 Windows Network File System Denial of Service Vulnerability

...

CVE-2026-65787

The CVE-2026-65787 entry describes a heap-based buffer overflow in Desktop Window Manager that allows an authorized attacker to elevate privileges locally. Documented impact is local privilege escalation with a high severity (CVSS 3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). The vulnerability affec...

CVE-2026-65785 Windows DHCP Client Denial of Service Vulnerability

...

CVE-2026-62912

Microsoft Exchange Server is affected by CVE-2026-62912, describing a deserialization of untrusted data vulnerability that allows an authorized attacker to trigger a denial of service over the network. The CVSS 3.1 base score is 6.5 (Medium) with network attack vector, low attack complexity, priv...

CVE-2026-62912 Microsoft Exchange Server Denial of Service Vulnerability

...

CVE-2026-62702 Windows Graphics Kernel Denial of Service Vulnerability

...

CVE-2026-61937

CVE-2026-61937 is a Windows HTTP.sys elevation-of-privilege vulnerability caused by an integer overflow/wraparound. An authenticated, local attacker could exploit this to gain elevated privileges on affected systems. The available documents identify the vulnerable component as Windows HTTP.sys an...