CVE-2026-85842

Use of externally-controlled format string in Windows Image Acquisition allows an authorized attacker to elevate privileges locally...

CVE-2026-83585

Use of externally-controlled format string in Windows NTFS allows an authorized attacker to elevate privileges locally...

CVE-2026-83585

The Windows NTFS file system is vulnerable to a local privilege escalation flaw caused by the use of externally-controlled format strings (CWE-134). An authorized attacker can exploit this issue to elevate their privileges on the local system. No specific exploit links or in-the-wild exploitation...

CVE-2026-85842

A vulnerability in Windows Image Acquisition allows an authorized attacker to achieve local privilege escalation . The root cause is the use of an externally-controlled format string (CWE-134). This flaw enables an attacker with existing local access to elevate their privileges on the system. No ...

Windows NTFS Elevation of Privilege Vulnerability

Use of externally-controlled format string in Windows NTFS allows an authorized attacker to elevate privileges locally...

Microsoft SQL Server Denial of Service Vulnerability

Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network...

Windows Image Acquisition Elevation of Privilege Vulnerability

Use of externally-controlled format string in Windows Image Acquisition allows an authorized attacker to elevate privileges locally...

PT-2026-113455

Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network...

Microsoft Windows: CVE-2026-83585: Windows NTFS Elevation of Privilege Vulnerability

Use of externally-controlled format string in Windows NTFS allows an authorized attacker to elevate privileges locally...

CVE-2026-94520: Use of Externally-Controlled Format String

Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network...

Microsoft SQL Server: CVE-2026-94520: Microsoft SQL Server Denial of Service Vulnerability

Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network...

CVE-2026-83585: Use of Externally-Controlled Format String

Use of externally-controlled format string in Windows NTFS allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85842: Windows Image Acquisition Elevation of Privilege Vulnerability

Use of externally-controlled format string in Windows Image Acquisition allows an authorized attacker to elevate privileges locally...

CVE-2026-85842: Use of Externally-Controlled Format String

Use of externally-controlled format string in Windows Image Acquisition allows an authorized attacker to elevate privileges locally...

PT-2026-112805

Name of the Vulnerable Software and Affected Versions Windows Image Acquisition affected versions not specified Description The use of an externally-controlled format string allows an authorized attacker to elevate privileges locally on the system. Recommendations At the moment, there is no...

CVE-2026-18418

The zbus proxy agent IPC backend in subsys/zbus/proxyagent/zbusproxyagentipc.c logged the channel name of a rejected inter-domain frame with a plain %s conversion. The frame type struct zbusproxymsg carries a fixed-size channelname array as its last member, and nothing in the transport guarantees...

doona

Doona - Strumento di fuzzing di rete .:: Informazioni ::. Doona è un fork del Bruteforce Exploit Detector Tool BED. BED è un programma progettato per controllare i daemon per potenziali buffer overflow, bug di formato stringa, ecc. Doona è il termine australiano per piumino. Aggiunge un numero...

K000163617: OpenSSL vulnerabilities CVE-2026-63072, CVE-2026-63073 and CVE-2026-63074

Security Advisory Description CVE-2026-63072 Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based on querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive can write and cleanse more bytes than that query reports, causing an 8-byte out-of-bounds heap writ...

CVE-2026-76753

A format string vulnerability in an affected service interface of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to corrupt process memory. Successful exploitation could allow an attacker to execute arbitrary code...

CVE-2026-76753 Unauthenticated Format String Vulnerability in HPE Networking ClearPass Policy Manager

A format string vulnerability in an affected service interface of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to corrupt process memory. Successful exploitation could allow an attacker to execute arbitrary code...