87744 matches found
SUSE CVE-2026-84969
A memory-handling error in the BSON-to-JSON conversion helpers of the MongoDB C Driver can write a small number of bytes past the end of a heap buffer when a binary field is encoded and the output is cut short at a caller-configured length limit. A party who supplies the document content, with no...
EUVD-2026-73302
Generation of error message containing sensitive information in SQL Server allows an authorized attacker to disclose information over a network...
CVE-2026-67383
Microsoft SQL Server is affected by an information disclosure vulnerability caused by the generation of error messages that contain sensitive information. An authorized attacker (low privileges required) can exploit this over a network to disclose sensitive data, with high confidentiality impact ...
EUVD-2026-73049
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
CVE-2026-69896
CVE-2026-69896 is a use after free vulnerability in Windows Error Reporting that allows an authorized, low-privilege attacker to perform a local privilege escalation . The attack requires local access, involves high complexity, and does not require user interaction. The CVSS 3.1 base score is 7.0...
EUVD-2026-73030
Generation of error message containing sensitive information in Windows Error Reporting allows an authorized attacker to disclose information locally...
CVE-2026-69684
Windows Error Reporting in Windows contains an information disclosure vulnerability caused by the generation of an error message that includes sensitive information . An authorized local attacker with low privileges can exploit this to disclose sensitive data. The CVSS 3.1 score is 5.5 (Medium) ,...
EUVD-2026-73018
Generation of error message containing sensitive information in Windows Print Spooler Components allows an authorized attacker to disclose information over a network...
CVE-2026-69552
CVE-2026-69552 affects Windows Print Spooler Components , where a flaw in the generation of error messages containing sensitive information allows an authorized attacker to disclose information over a network. The attack requires low privileges and user interaction , with a CVSS 3.1 score of 5.7 ...
EUVD-2026-72982
Out-of-bounds read in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
CVE-2026-69450
CVE-2026-69450 is a local privilege escalation vulnerability in Windows Error Reporting , caused by an out-of-bounds read . An authorized attacker with low privileges can exploit this locally without user interaction to gain high impact on confidentiality, integrity, and availability (CVSS 3.1 sc...
EUVD-2026-72978
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
CVE-2026-69513
CVE-2026-69513 is a heap-based buffer overflow in Windows Error Reporting that allows an authorized attacker to perform a local privilege elevation . The CVSS 3.1 score is 7.8 (HIGH) with a vector of local attack, low complexity, low privileges required, no user interaction, and high impact to co...
EUVD-2026-72970
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
CVE-2026-69436
CVE-2026-69436 is a heap-based buffer overflow in Windows Error Reporting that allows an authorized attacker with low privileges to escalate privileges locally . The CVSS 3.1 score is 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating high impact across confidentiality, i...
EUVD-2026-73230
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
CVE-2026-69362
CVE-2026-69362 is a use after free vulnerability in Windows Error Reporting that allows an authorized attacker to perform local privilege escalation . The CVSS 3.1 score is 7.0 (HIGH) , with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating that exploitation requires low privileges , no...
K000163234: BIND vulnerability CVE-2026-11331
Security Advisory Description An attacker who knows or guesses that a resolver uses RPZ with wildcard CNAME policies can craft query names long enough to trigger a NAMETOOLONG error condition during RPZ processing. This is not handled correctly and may lead to defeating the RPZ rule. It also may...
