84417 matches found
PT-2026-87533
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
CVE-2026-78512: Numeric Truncation Error
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
PT-2026-87202
Name of the Vulnerable Software and Affected Versions .NET affected versions not specified Description An origin validation error allows an unauthorized attacker to disclose information over a network. Recommendations At the moment, there is no information about a newer version that contains a fi...
CVE-2026-69462: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network...
PT-2026-88227
Name of the Vulnerable Software and Affected Versions AccountsDb.java affected versions not specified Description A logic error exists in the findMetaAuthUid function within AccountsDb.java, which may allow a Factory Reset Protection FRP bypass. FRP is a security feature that prevents unauthorize...
PT-2026-88239
In multiple locations, there is a possible improper data sanitization due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-87507
Creation of temporary file in directory with insecure permissions in Windows Error Reporting allows an authorized attacker to perform tampering locally...
CVE-2026-28599: Protection Mechanism Failure
In addCreatorToken of ActivityManagerService.java, there is a possible Intent Redirection Bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-28642: Protection Mechanism Failure
In executeRequest of ActivityStarter.java, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
Linux Distros Unpatched Vulnerability : CVE-2026-85485
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HTML::FormHandler versions before 0.410002 for Perl render some error messages into HTML without escaping. The Table form layout and the Bootstrap 2 and 3...
CVE-2026-83996: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
PT-2026-87341
Name of the Vulnerable Software and Affected Versions Microsoft COM for Windows affected versions not specified Description An issue in Microsoft COM for Windows allows an authorized attacker to locally disclose sensitive information through the generation of error messages. Recommendations At th...
CVE-2026-28660: Protection Mechanism Failure
In getAllSessions of multiple files, there is a possible confused deputy due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-58649: Origin Validation Error
Origin validation error in .NET allows an unauthorized attacker to disclose information over a network...
PT-2026-87655
Generation of error message containing sensitive information in Windows Error Reporting allows an authorized attacker to disclose information locally...
PT-2026-87478
Out-of-bounds read in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
PT-2026-87488
Name of the Vulnerable Software and Affected Versions Windows Error Reporting affected versions not specified Description A heap-based buffer overflow occurs in Windows Error Reporting, which allows an authorized attacker to elevate privileges over a network. A heap-based buffer overflow is a...
CVE-2026-69896: Use After Free
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
Security update for bzip2 (low)
openSUSE security update: security update for bzip2 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21762-1 Rating: low References: bsc1266786 Cross-References: CVE-2026-42250 CVSS scores: CVE-2026-42250 SUSE : 3.3...