CVE-2026-88099: Uncaught Exception

Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network...

CVE-2026-109786: Improper Output Neutralization for Logs

In fail2ban 0.10.5 through 1.1.1 before ddd879d, the sshd filter config/filter.d/sshd.conf accepts an "on " suffix after the host address. Because OpenSSH logs the offered username verbatim, a remote unauthenticated attacker can use a username such as "x VICTIM-SOURCE-IP-ADDRESS on" to make...

CVE-2026-95124

Buffer Overflow vulnerability in madmurphy libconfini v.1.16.4 allows a remote attacker to cause a denial of service via an allocation-size mismatch between its bundled loadinibuffer utility and stripinicache...

PT-2026-111345

Ghost is a Node.js content management system. From 4.0.0 until 6.67.0, a crafted content import file could cause excessive CPU usage, making the Ghost server unresponsive. Exploiting this requires Administrator access. This issue is fixed in version 6.67.0...

CVE-2026-109944: Reachable Assertion

FreeRDP 3.0.0 before 3.32.0 does not remove card handles when EmulateSCardReleaseContext releases a smartcard-emulation context, so EmulateSCardTransmit later looks up the deleted parent context and reaches a terminating WINPRASSERT. A malicious RDP server can crash a connecting client with...

Microsoft Windows: CVE-2026-85319: Active Directory Federation Services (AD FS) Denial of Service Vulnerability

Allocation of resources without limits or throttling in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...

Microsoft Windows: CVE-2026-70248: Windows Hyper-V Denial of Service Vulnerability

Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally...

Microsoft Windows: CVE-2026-70163: Microsoft OpenSSH for Windows Denial of Service Vulnerability

Allocation of resources without limits or throttling in OpenSSH for Windows allows an unauthorized attacker to deny service over a network...

Microsoft Windows: CVE-2026-83855: Windows WLAN Service Denial of Service Vulnerability

Integer underflow wrap or wraparound in Windows WLAN Service allows an unauthorized attacker to deny service over a network...

Microsoft Windows: CVE-2026-83667: Windows Active Directory Domain Services Denial of Service Vulnerability

Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service over a network...

Microsoft Windows: CVE-2026-83648: Windows Active Directory Domain Services Denial of Service Vulnerability

Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network...

CVE-2026-94520: Use of Externally-Controlled Format String

Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network...

CVE-2026-88084: Allocation of Resources Without Limits or Throttling

Allocation of resources without limits or throttling in SQL Server allows an authorized attacker to deny service over a network...

CVE-2026-97830: Double Free

Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network...

CVE-2026-96861: Out-of-bounds Read

Out-of-bounds read in Network Device Enrollment Service NDES allows an unauthorized attacker to deny service over a network...

Microsoft SQL Server: CVE-2026-94520: Microsoft SQL Server Denial of Service Vulnerability

Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network...

CVE-2026-83667: Out-of-bounds Read

Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service over a network...

CVE-2026-83655: Out-of-bounds Read

Out-of-bounds read in Network Policy Server NPS allows an unauthorized attacker to deny service over a network...

CVE-2026-83648: NULL Pointer Dereference

Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network...

CVE-2026-83516: Out-of-bounds Read

Out-of-bounds read in Windows Local Security Authority Subsystem Service LSASS allows an unauthorized attacker to deny service over a network...