195372 matches found
OpenEXR: OpenEXR: Out-of-bounds write vulnerability via crafted EXR files
A flaw was found in OpenEXR. A remote attacker could exploit this vulnerability by providing a specially crafted EXR image file with a nonzero dataWindow.min. This could cause the TypedFlatImageChannel::row function to return an invalid memory pointer, leading to out-of-bounds or use-after-free...
GHSA-2MXG-PRVG-9JFG Microsoft Security Advisory CVE-2026-85790 - .NET Information Disclosure Vulnerability
Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.Native.Quic.MsQuic.Schannel. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. Various vulnerabilities ...
Microsoft Security Advisory CVE-2026-85790 - .NET Information Disclosure Vulnerability
Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.Native.Quic.MsQuic.Schannel. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. Various vulnerabilities ...
EUVD-2026-100712
Use after free in SQL Server allows an authorized attacker to elevate privileges locally...
CVE-2026-85876
A Use after free vulnerability in Microsoft SQL Server allows an authorized attacker to elevate privileges locally . Microsoft has released security updates to address this issue, which can be found in various Knowledge Base articles including KB5128495 (SQL Server 2019 GDR), KB5126967 (SQL Serve...
CVE-2026-95635 Photoshop Desktop | Double Free (CWE-415)
Photoshop Desktop is affected by a Double Free vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a...
CVE-2026-95635
Photoshop Desktop is affected by a Double Free (CWE-415) vulnerability. This flaw could allow an attacker to achieve arbitrary code execution within the context of the current user. Successful exploitation requires user interaction , specifically when a victim opens a malicious file. No specific ...
CVE-2026-103843
Substance3D - Stager is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2026-103843 Substance3D - Stager | Use After Free (CWE-416)
Substance3D - Stager is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2026-103843
Substance3D - Stager is affected by a Use After Free vulnerability (CWE-416) that could allow an attacker to achieve arbitrary code execution within the context of the current user. Successful exploitation requires user interaction , specifically for a victim to open a malicious file. Adobe has r...
CVE-2026-97830
Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network...
CVE-2026-97816
Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network...
CVE-2026-97809
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...
CVE-2026-97811
Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally...
CVE-2026-97812
Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally...
CVE-2026-97807
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...
CVE-2026-97806
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...
CVE-2026-97808
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...