524 matches found
EUVD-2026-122453
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Internet Information Services allows an unauthorized attacker to execute code over a network...
CVE-2026-119961
A race condition flaw (concurrent execution using a shared resource with improper synchronization) in Windows Internet Information Services (IIS) allows an unauthenticated attacker to execute code over the network. This vulnerability is tracked as CVE-2026-119961 and was addressed in the November...
EUVD-2026-122431
Integer underflow wrap or wraparound in Windows Internet Information Services allows an unauthorized attacker to deny service over a network...
CVE-2026-119936
A vulnerability exists in Windows Internet Information Services involving an integer underflow (wrap or wraparound) . This flaw allows an unauthorized attacker to perform a denial of service (DoS) attack over the network. While specific component details are not provided, the vulnerability is add...
EUVD-2026-122413
Uncontrolled resource consumption in Windows Internet Information Services allows an unauthorized attacker to deny service over a network...
CVE-2026-119909
CVE-2026-119909 involves an uncontrolled resource consumption vulnerability in Windows Internet Information Services (IIS) . This flaw allows an unauthorized attacker to perform a denial of service (DoS) attack over a network. The underlying root cause is identified as CWE-401 (Missing Release of...
Windows Internet Information Services Denial of Service Vulnerability
Integer underflow wrap or wraparound in Windows Internet Information Services allows an unauthorized attacker to deny service over a network...
Windows Internet Information Services Remote Code Execution Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Internet Information Services allows an unauthorized attacker to execute code over a network...
Windows Internet Information Services Denial of Service Vulnerability
Uncontrolled resource consumption in Windows Internet Information Services allows an unauthorized attacker to deny service over a network...
PT-2026-143912
Uncontrolled resource consumption in Windows Internet Information Services allows an unauthorized attacker to deny service over a network...
PT-2026-143953
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Internet Information Services allows an unauthorized attacker to execute code over a network...
CVE-2026-97830
Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network...
CVE-2026-78459
Heap-based buffer overflow in Windows Internet Information Services allows an authorized attacker to elevate privileges locally...
CVE-2026-70024
Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker to execute code over a network...
EUVD-2026-100431
Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network...
CVE-2026-97830
A double free vulnerability in Windows Internet Information Services allows an unauthorized attacker to perform a denial of service over a network. The vulnerability is associated with CWE-415 and has a CVSS 3.1 base score of 7.5 (High). No specific exploit information or direct remediation steps...
EUVD-2026-99895
Heap-based buffer overflow in Windows Internet Information Services allows an authorized attacker to elevate privileges locally...
CVE-2026-78459
A heap-based buffer overflow vulnerability exists in Windows Internet Information Services . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability has a CVSS 3.1 score of 7.8 (High) . Official remediation is available via Microsoft's update guide.
EUVD-2026-99671
Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker to execute code over a network...
CVE-2026-70024
A stack-based buffer overflow exists in Windows Internet Information Services (IIS), which could allow an unauthorized attacker to execute arbitrary code over a network. The vulnerability is characterized by improper input validation (CWE-20) and has a CRITICAL severity score of 9.80. This flaw a...