UBUNTU-CVE-2026-108573

A vulnerability was detected in Open Asset Import Library Assimp up to 6.0.5. Affected by this vulnerability is the function IOStreamBuffer::getNextBlock of the component PLY File Handler. Performing a manipulation results in out-of-bounds read. It is possible to initiate the attack remotely. The...

Microsoft Windows: CVE-2026-96209: Windows Network File System Elevation of Privilege Vulnerability

Out-of-bounds read in Windows Network File System allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85823: Windows Composite Image File System Elevation of Privilege Vulnerability

Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85822: Windows exFAT File System Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85821: Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability

Out-of-bounds read in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-85824: Windows Composite Image File System Elevation of Privilege Vulnerability

Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83835: Windows Common Log File System Driver Information Disclosure Vulnerability

Buffer over-read in Windows Common Log File System Driver allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-84009: Windows Projected File System Tampering Vulnerability

Time-of-check time-of-use toctou race condition in Windows Projected File System allows an authorized attacker to perform tampering locally...

Microsoft Windows: CVE-2026-85328: Windows Projected File System Elevation of Privilege Vulnerability

Weak authentication in Windows Projected File System allows an authorized attacker to elevate privileges locally...

UBUNTU-CVE-2026-107814

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB RPM packages created the dedicated mysql service account with the database data directory as its home directory. A database user with the FILE privilege...

Microsoft Windows: CVE-2026-85355: Windows Common Log File System Driver Elevation of Privilege Vulnerability

Inclusion of functionality from untrusted control sphere in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-103825: Out-of-bounds Read

Substance3D - Designer is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious...

Microsoft Windows: CVE-2026-83857: Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...

DevTools Suite Compromise

The vulnerability of the DevTools suite for web development in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to compromise the integrity of protected information through a malicious file...

CVE-2026-110025: Unrestricted Upload of File with Dangerous Type

A flaw has been found in slackero phpwcms up to 1.9.49/1.12.3. This issue affects some unknown processing of the file include/incfront/content/cnt23.article.inc.php of the component Extension Check. This manipulation of the argument POSTname causes unrestricted upload. The attack can be initiated...

PT-2026-112847

Name of the Vulnerable Software and Affected Versions Windows Universal Disk Format File System Driver UDFS affected versions not specified Description An out-of-bounds read in the Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to disclose sensitive informatio...

PT-2026-113152

Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...

PT-2026-111617

Name of the Vulnerable Software and Affected Versions SFTPGo versions 2.5.0 through 2.7.5 Description An authenticated user with copy permissions can bypass file-pattern filters to copy source files that are restricted by denied patterns or located outside of allowed patterns to an allowed...

Microsoft Windows: CVE-2026-83784: Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability

Absolute path traversal in Windows Encrypting File System EFS allows an authorized attacker to elevate privileges over a network...

Microsoft Windows: CVE-2026-70233: Windows Common Log File System Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...