Lucene search
+L

23867 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•10 views

CVE-2026-55007: Double Free

Double free in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network...

8.1CVSS8AI score0.00707EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•23 views

PT-2026-87873

Name of the Vulnerable Software and Affected Versions Windows Credential Guard affected versions not specified Description A double free issue in Windows Credential Guard allows an authorized attacker to elevate privileges locally. A double free occurs when the system attempts to free the same...

8.2CVSS7.7AI score0.00348EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•26 views

PT-2026-87032

Name of the Vulnerable Software and Affected Versions libxml2 affected versions not specified podman affected versions not specified container-tools:rhel8/podman affected versions not specified swift-lang affected versions not specified openshift/ose-rhel-coreos-8 affected versions not specified...

8.5CVSS6.2AI score0.00447EPSS
SaveExploits0References52
Tenable Nessus
Tenable Nessus
•added 2026/09/08 12:00 a.m.•21 views

Adobe Reader < 26.002.21901 Multiple Vulnerabilities (APSB26-141) (macOS)

The version of Adobe Reader installed on the remote macOS host is a version prior to 26.002.21901. It is, therefore, affected by multiple vulnerabilities. - Acrobat Reader is affected by an Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' vulnerability that...

8.8CVSS6.9AI score0.006EPSS
SaveExploits0References33
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•26 views

PT-2026-88465

Acrobat Reader is affected by a Double Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS6.2AI score0.00293EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•9 views

CVE-2026-69725: Double Free

Double free in Windows Hello allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00333EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•3 views

CVE-2026-70567: Double Free

Double free in Windows Display Enhancement Service allows an authorized attacker to elevate privileges locally...

7CVSS5.8AI score0.00264EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•4 views

CVE-2026-74860: Release of Invalid Pointer or Reference

A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially crafted XML document containing a Document Type Definition DTD with enumerated attribute values. This triggers a double-free error in the SAX attributeDecl callbac...

8.5CVSS5.9AI score0.00447EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•6 views

CVE-2026-74860: Release of Invalid Pointer or Reference

A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially crafted XML document containing a Document Type Definition DTD with enumerated attribute values. This triggers a double-free error in the SAX attributeDecl callbac...

8.5CVSS5.9AI score0.00447EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•4 views

CVE-2026-80080: Double Free

Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

8.8CVSS8.2AI score0.00819EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•3 views

CVE-2026-69309: Double Free

Double free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...

7CVSS5.8AI score0.00264EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•19 views

PT-2026-87683

Name of the Vulnerable Software and Affected Versions Windows Hello affected versions not specified Description A double free issue in Windows Hello allows an authorized attacker to elevate privileges locally. A double free occurs when the system attempts to free the same memory location twice,...

7.8CVSS6AI score0.00333EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2026/09/08 12:00 a.m.•21 views

Adobe Acrobat < 24.001.30429 / 26.002.21901 Multiple Vulnerabilities (APSB26-141) (macOS)

The version of Adobe Acrobat installed on the remote macOS host is a version prior to 24.001.30429 or 26.002.21901. It is, therefore, affected by multiple vulnerabilities. - Acrobat Reader is affected by an Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution'...

8.8CVSS6.9AI score0.006EPSS
SaveExploits0References33
Tenable Nessus
Tenable Nessus
•added 2026/09/08 12:00 a.m.•21 views

Adobe Reader < 26.002.21901 Multiple Vulnerabilities (APSB26-141)

The version of Adobe Reader installed on the remote Windows host is a version prior to 26.002.21901. It is, therefore, affected by multiple vulnerabilities. - Acrobat Reader is affected by an Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' vulnerability tha...

8.8CVSS6.9AI score0.006EPSS
SaveExploits0References33
Tenable Nessus
Tenable Nessus
•added 2026/09/08 12:00 a.m.•63 views

Microsoft Exchange Server (September 2026)

The Microsoft Exchange Server installed on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Double free in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network. CVE-2026-55007 - External control of file name...

9.3CVSS8.3AI score0.01174EPSS
SaveExploits0References13
Tenable Nessus
Tenable Nessus
•added 2026/09/08 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2026-74860

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially crafted XML document...

8.5CVSS5.9AI score0.00447EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/09/08 12:00 a.m.•19 views

EulerOS 2.0 SP12 : libarchive (EulerOS-SA-2026-3274)

According to the versions of the libarchive packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A double free issue has been identified in libarchive's RAR5 reader. During parsing of a specially crafted RAR5 archive, the filteredbuf point...

7.5CVSS7.5AI score0.00792EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•7 views

CVE-2026-72958: Double Free

Double free in Windows Credential Guard allows an authorized attacker to elevate privileges locally...

8.2CVSS7.7AI score0.00348EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•12 views

CVE-2026-71351: Double Free

Double free in Windows Routing and Remote Access Service RRAS allows an authorized attacker to elevate privileges locally...

7CVSS5.8AI score0.00264EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•46 views

PT-2026-87193

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server affected versions not specified Description A double-free memory bug occurs when the server indexes a Visio attachment sent via email, allowing an unauthenticated remote attacker to execute arbitrary code over a netwo...

8.1CVSS8.2AI score0.00707EPSS
SaveExploits0References9
Rows per page
Query Builder