147 matches found
EUVD-2026-73600
Buffer over-read in Windows Encrypting File System EFS allows an authorized attacker to disclose information locally...
CVE-2026-69841: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Encrypting File System EFS allows an authorized attacker to elevate privileges locally...
CVE-2026-69688: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Encrypting File System EFS allows an authorized attacker to elevate privileges over a network...
CVE-2026-69794: Buffer Over-read
Buffer over-read in Windows Encrypting File System EFS allows an authorized attacker to disclose information locally...
CVE-2026-59128: Out-of-bounds Read
Out-of-bounds read in Windows Encrypting File System EFS allows an authorized attacker to disclose information locally...
CVE-2026-68079
A flaw in the DefaultEncryptingCodeDataProvider component of Apache CXF allows a remote attacker to redeem a captured authorization code an unlimited number of times. This is caused by a defect in the removeCodeGrant functionality, which fails to properly invalidate used authorization codes, viol...
CVE-2026-68079 Apache CXF: DefaultEncryptingCodeDataProvider allows unlimited authorization code replay
In Apache CXF's DefaultEncryptingCodeDataProvider, a captured authorization code can be redeemed an unlimited number of times due to a flaw in the implementation of the removeCodeGrant functionality. This violates the RFC requirement that "The authorization code MUST NOT be used more than once."...
CVE-2026-68079 Apache CXF: DefaultEncryptingCodeDataProvider allows unlimited authorization code replay
In Apache CXF's DefaultEncryptingCodeDataProvider, a captured authorization code can be redeemed an unlimited number of times due to a flaw in the implementation of the removeCodeGrant functionality. This violates the RFC requirement that "The authorization code MUST NOT be used more than once."...
CVE-2026-68079 Apache CXF: DefaultEncryptingCodeDataProvider allows unlimited authorization code replay
In Apache CXF's DefaultEncryptingCodeDataProvider, a captured authorization code can be redeemed an unlimited number of times due to a flaw in the implementation of the removeCodeGrant functionality. This violates the RFC requirement that "The authorization code MUST NOT be used more than once."...
[SECURITY] Fedora 44 Update: mupdf-1.27.1-10.fc44
MuPDF is a lightweight PDF viewer and toolkit written in portable C. The renderer in MuPDF is tailored for high quality anti-aliased graphics. MuPDF renders text with metrics and spacing accurate to within fractions of a pixel for the highest fidelity in reproducing the look of a printed page on...
The vulnerability of the Windows Encrypting File System (EFS) component in Windows operating systems allows a perpetrator to elevate their privileges.
The vulnerability of the Windows Encrypting File System EFS component in operating systems involves the execution of operations outside the buffer boundaries. Exploiting this vulnerability can allow an attacker to gain elevated privileges...
CVE-2026-26153
Out-of-bounds read in Windows Encrypting File System EFS allows an authorized attacker to elevate privileges locally...
EUVD-2026-22374
Out-of-bounds read in Windows Encrypting File System EFS allows an authorized attacker to elevate privileges locally...
CVE-2026-26153
Out-of-bounds read in Windows Encrypting File System EFS allows an authorized attacker to elevate privileges locally...
Microsoft Windows Encrypting File System 缓冲区错误漏洞
Microsoft Windows Encrypting File System is a feature introduced by Microsoft’s Windows operating system in NTFS 3.0. It provides file system-level encryption. There is a buffer error vulnerability in Microsoft Windows Encrypting File System EFS. Attackers can exploit this vulnerability to gain...
PT-2026-32733
CVE-2026-26153 Out-of-bounds read in Windows Encrypting File System EFS allows an authorized attacker to elevate privileges locally. https://t.co/JzUOIc3hba...
CVE-2026-26153: Out-of-bounds Read
Out-of-bounds read in Windows Encrypting File System EFS allows an authorized attacker to elevate privileges locally...
The vulnerability of ESAFENET CDG’s software for encrypting electronic documents lies in the lack of protective measures for the SQL query structure, allowing attackers to execute malicious code remotely.
The vulnerability of ESAFENET CDG’s software for encrypting electronic documents is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a remote attacker to execute malicious code remotely...
PT-2026-27165
Name of the Vulnerable Software and Affected Versions TP-Link Archer NX200 TP-Link Archer NX210 TP-Link Archer NX500 TP-Link Archer NX600 Description A cryptographic key that is hardcoded into the configuration mechanism allows decryption and re-encryption of device configuration data. An...
PT-2026-5085
Vulnerability that allows a Padding Oracle Attack to be performed on the Funambol v30.0.0.20 cloud server. The thumbnail display URL allows an attacker to decrypt and encrypt the parameters used by the application to generate ‘self-signed’ access URLs...