62721 matches found
PT-2026-32874
🪟 CVE-2026-33100 in AFD.sys is the kind of bug that quietly hands a local attacker admin power. No splashy “new feature” — just patch and move on. https://t.co/QqYCpRIup5 WindowsSecurity PrivilegeEscalation AfdSys Cve202633100 https://t.co/Lrf56niqJN...
PT-2026-32754
CVE-2026-26177 Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. https://t.co/AzyibGnFso...
ROS-20260414-73-0044
A vulnerability in the smclgrterminate function of the net/smc/smccore.c module of the Linux kernel's implementation of the SMC family of socket protocols is related to the occurrence of mutual blocking. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
ROS-20260414-73-0042
A vulnerability in the cifssmb3domount function of the fs/smb/client/cifsfs.c module of the SMB client support module of the Linux operating system kernel is related to improper memory release "memory leak". Exploitation of the vulnerability could allow an attacker to cause a denial of service...
Microsoft Function Discovery Service 安全漏洞
The Microsoft Function Discovery Service is a background service provided by Microsoft Corporation. There are security vulnerabilities associated with the Microsoft Function Discovery Service fdwsd.dll. Attackers can exploit these vulnerabilities to gain elevated privileges. The following product...
PT-2026-32750
CVE-2026-26173 Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Ancillary Function Driver for WinSock allows an authorized atta… https://t.co/7eClolPk8J...
Microsoft Windows Ancillary Function Driver for WinSock 代码问题漏洞
The Microsoft Windows Ancillary Function Driver for WinSock is a supplementary function driver for Winsock by Microsoft Corporation. There are code-related vulnerabilities in the Microsoft Windows Ancillary Function Driver for WinSock. Attackers can exploit these vulnerabilities to gain elevated...
PT-2026-32737
CVE-2026-26159 Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges locally. https://t.co/5uioiAiy6m...
PT-2026-32818
Name of the Vulnerable Software and Affected Versions Function Discovery Service fdwsd.dll affected versions not specified Description A race condition occurs in the Function Discovery Service fdwsd.dll due to concurrent execution using a shared resource with improper synchronization. This allows...
Microsoft Function Discovery Service 竞争条件问题漏洞
The Microsoft Function Discovery Service is a background service provided by Microsoft Corporation. There are vulnerabilities related to competition conditions in the Microsoft Function Discovery Service fdwsd.dll. Attackers can exploit these vulnerabilities to gain elevated privileges. The...
The vulnerability of the special_keys() function in the src/netbeans.c file of the Vim text editor allows a hacker to execute arbitrary code.
The vulnerability of the specialkeys function in the src/netbeans.c file of the Vim text editor is related to the execution of an operation beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
PT-2026-32555
SAP Landscape Transformation contains a vulnerability in an RFC-exposed function module that could allow a high privileged adversary to inject arbitrary ABAP code and operating system commands. Due to this, some information could be modified, but the attacker does not have control over kind or...
PT-2026-32873
CVE-2026-33099 Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. https://t.co/FciJfCRRR2...
Microsoft Windows Ancillary Function Driver for WinSock 资源管理错误漏洞
The Microsoft Windows Ancillary Function Driver for WinSock is a compatibility driver developed by Microsoft for Winsock. There is a resource management vulnerability present in the Microsoft Windows Ancillary Function Driver for WinSock. Attackers can exploit this vulnerability to gain elevated...
PT-2026-32799
Name of the Vulnerable Software and Affected Versions Windows Ancillary Function Driver for WinSock affected versions not specified Description A use after free race condition in the Windows Ancillary Function Driver for WinSock afd.sys allows an authorized attacker to elevate privileges locally...
Microsoft Function Discovery Service 安全漏洞
The Microsoft Function Discovery Service is a background service provided by Microsoft Corporation. There are security vulnerabilities associated with the Microsoft Function Discovery Service. Attackers can exploit these vulnerabilities to gain higher privileges. The following products and versio...
ROS-20260414-73-0060
A vulnerability in the ovlpermission function of the fs/overlayfs/inode.c module of the Overlayfs file system of the Linux kernel is related to NULL pointer dereferencing. Exploitation of the vulnerability may allow an attacker to affect confidentiality, integrity and availability of protected...
ROS-20260414-73-0038
A vulnerability in the dbMount function in the fs/jfs/jfsdmap.c module of the JFS file system of the Linux operating system kernel is related to reading beyond buffer boundaries. Exploitation of the vulnerability could allow an attacker to gain access to protected information or cause a denial of...
CVE-2026-39956 jq: Missing runtime type checks for _strindices lead to crash and limited memory disclosure
jq is a command-line JSON processor. Prior to version 1.8.2, the strindices builtin in jq's src/builtin.c passes its arguments directly to jvstringindexes without verifying they are strings, and jvstringindexes in src/jv.c relies solely on assert checks that are stripped in release builds compile...
CVE-2026-39956
jq is a command-line JSON processor. Prior to version 1.8.2, the strindices builtin in jq's src/builtin.c passes its arguments directly to jvstringindexes without verifying they are strings, and jvstringindexes in src/jv.c relies solely on assert checks that are stripped in release builds compile...