18625 matches found
CVE-2026-31988
yauzl aka Yet Another Unzip Library version 3.2.0 for Node.js contains an off-by-one error in the NTFS extended timestamp extra field parser within the getLastModDate function. The while loop condition checks cursor data.length + 4 instead of cursor + 4 = data.length, allowing readUInt16LE to rea...
SUSE CVE-2025-12801
A vulnerability was recently discovered in the rpc.mountd daemon in the nfs-utils package for Linux, that allows a NFSv3 client to escalate the privileges assigned to it in the /etc/exports file at mount time. In particular, it allows the client to access any subdirectory or subtree of an exporte...
GHSA-364Q-W7VH-VHPC OliveTin's unsafe parsing of UniqueTrackingId can be used to write files
When the saveLogs feature is enabled, OliveTin persists execution log entries to disk. The filename used for these log files is constructed in part from the user-supplied UniqueTrackingId field in the StartAction API request. This value is not validated or sanitized before being used in a file...
EUVD-2026-10612
Improper access control in Windows Projected File System allows an authorized attacker to elevate privileges locally...
EUVD-2026-10644
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally...
EUVD-2026-10630
Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally...
EUVD-2026-10613
Improper access control in Windows Projected File System allows an authorized attacker to elevate privileges locally...
EUVD-2026-10595
Windows Universal Disk Format File System Driver UDFS Elevation of Privilege Vulnerability...
EUVD-2026-10597
Out-of-bounds read in Windows Resilient File System ReFS allows an authorized attacker to elevate privileges locally...
EUVD-2026-10594
Windows Universal Disk Format File System Driver UDFS Elevation of Privilege Vulnerability...
EUVD-2026-10596
Out-of-bounds read in Windows Resilient File System ReFS allows an authorized attacker to elevate privileges locally...
CVE-2026-25167
Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally...
CVE-2026-25167
Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally...
CVE-2026-24290
Improper access control in Windows Projected File System allows an authorized attacker to elevate privileges locally...
CVE-2026-24290
Improper access control in Windows Projected File System allows an authorized attacker to elevate privileges locally...
CVE-2026-23673
Out-of-bounds read in Windows Resilient File System ReFS allows an authorized attacker to elevate privileges locally...
CVE-2026-23673
Out-of-bounds read in Windows Resilient File System ReFS allows an authorized attacker to elevate privileges locally...
CVE-2026-23672
Windows Universal Disk Format File System Driver UDFS Elevation of Privilege Vulnerability...
