14290 matches found
CVE-2026-69725
Double free in Windows Hello allows an authorized attacker to elevate privileges locally...
CVE-2026-23918-poc
CVE-2026-23918 — Apache modhttp2 Double Free Affected: Apache HTTP Server 2.4.66 with modhttp2 + Event MPM Fixed in: Apache 2.4.67 modh2 v2.0.37 CVSS 3.1: 8.8 HIGH — Unauthenticated Remote Code Execution possible CWE: CWE-415 Double Free What's the vulnerability modhttp2 in Apache 2.4.66 has a...
CVE-2026-69337
Double free in Windows Registry allows an authorized attacker to elevate privileges over a network...
CVE-2026-69322
Double free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network...
CVE-2026-69309
Double free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...
CVE-2026-69292
Double free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges locally...
CVE-2026-55007
Double free in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network...
net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME
A flaw was found in the net package of Go golang, specifically when using the LookupCNAME function with the cgo DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name CNAME response. This can trigger a double-free of C memory, leading to a crash and a Denial of...
CVE-2026-81950
CVE-2026-81950 is a double free vulnerability in Microsoft Office Excel that allows an unauthorized attacker to execute code locally. The CVSS 3.1 score is 7.8 (HIGH) , reflecting a local attack vector with low complexity, no privileges required, and user interaction required, resulting in high i...
EUVD-2026-73881
Double free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
EUVD-2026-73838
Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
CVE-2026-80080
CVE-2026-80080 is a double free vulnerability in Microsoft Office Word that allows an unauthorized attacker to achieve remote code execution over a network with user interaction required. The CVSS 3.1 base score is 8.8 (HIGH) , reflecting high impact to confidentiality, integrity, and availabilit...
EUVD-2026-73682
Double free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...
CVE-2026-69309
CVE-2026-69309 is a local privilege escalation vulnerability in Windows Print Spooler Components , caused by a double free defect. An attacker with low local privileges and high attack complexity can exploit it without user interaction to achieve full compromise of confidentiality, integrity, and...
CVE-2026-70567
CVE-2026-70567 is a double free vulnerability in the Windows Display Enhancement Service that allows a low-privileged, authorized local attacker to achieve privilege escalation . The attack vector is local with high complexity and requires no user interaction. The CVSS 3.1 score is 7.0 (HIGH) wit...
EUVD-2026-73647
Double free in Windows Display Enhancement Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-73638
Double free in Windows Hello allows an authorized attacker to elevate privileges locally...
CVE-2026-69725
CVE-2026-69725 is a double free vulnerability in Windows Hello that allows an authorized attacker with low privileges to achieve local privilege escalation . The flaw is scored CVSS 3.1 7.8 (HIGH) with a local attack vector, low complexity, and high impact to confidentiality, integrity, and avail...
CVE-2026-69322
A double free vulnerability in the Microsoft Windows Search Component allows an authorized, network-based attacker to elevate privileges . The CVSS 3.1 score is 8.0 (High) , with a network attack vector, low privileges required, and user interaction required, impacting confidentiality, integrity,...