88564 matches found
CVE-2026-85485: Improper Neutralization of Input During Web Page Generation
HTML::FormHandler versions before 0.410002 for Perl render some error messages into HTML without escaping. The Table form layout and the Bootstrap 2 and 3 wrappers splice each error string straight into the surrounding markup. Version 0.410000, the fix for CVE-2026-19872, escaped the equivalent...
CVE-2026-78512: Numeric Truncation Error
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
CVE-2026-75156: Origin Validation Error
Apache Airflow FAB provider versions 3.7.3 through 3.8.0 do not validate the issuer or audience of Azure AD idtokens during OAuth login. Deployments are affected only when the FAB auth manager is configured with Azure AD as an OAuth provider. Because the signing keys are fetched from Microsoft's...
CVE-2026-69612: Absolute Path Traversal
Absolute path traversal in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
CVE-2026-69535: Numeric Truncation Error
Numeric truncation error in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally...
CVE-2026-69896: Use After Free
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
CVE-2026-68894: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network...
CVE-2026-69450: Out-of-bounds Read
Out-of-bounds read in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
CVE-2026-69513: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
CVE-2026-69436: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows State Repository Service allows an authorized attacker to elevate privileges locally...
CVE-2026-28606: Improper Authentication
In handleBondStateChanged of AdapterService.java, there is a possible way to skip pairing due to a logic error in the code. This could lead to remote escalation of privilege without user consent with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-28599: Protection Mechanism Failure
In addCreatorToken of ActivityManagerService.java, there is a possible Intent Redirection Bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-28584: Protection Mechanism Failure
In createSessionInternal of PackageInstallerService.java, there is a possible way to permanently DoS the device due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-28602: Improper Access Control
In setClipboardAccessNotificationsEnabledForUser of ClipboardService.java, there is a possible mult-iuser isolation due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
ROS-20260908-73-0045
The vulnerability in nvidia-kmod is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...
PT-2026-87466
Name of the Vulnerable Software and Affected Versions Windows Error Reporting affected versions not specified Description A heap-based buffer overflow occurs in Windows Error Reporting, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory...
PT-2026-87464
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
CVE-2026-69684: Generation of Error Message Containing Sensitive Information
Generation of error message containing sensitive information in Windows Error Reporting allows an authorized attacker to disclose information locally...
PT-2026-87059
XenForo before 2.3.13 contains a signature verification logic error in the PayPal REST webhook handler that allows unauthenticated attackers to bypass payment signature validation by submitting a webhook request with an unsupported auth algo header value. When the algorithm cannot be mapped to a...