38476 matches found
CVE-2026-69761
A use-after-free vulnerability in Windows TCP/IP allows an authorized attacker to elevate privileges over a network . The CVSS 3.1 score is 7.1 (HIGH) , with a vector of AV:N/AC:H/PR:L/UI:R, meaning exploitation requires network access , high attack complexity , low existing privileges , and user...
EUVD-2026-73604
Improper validation of consistency within input in Windows TCP/IP allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-69793
CVE-2026-69793 is a security feature bypass vulnerability in Windows TCP/IP , caused by improper validation of consistency within input. An unauthorized, unauthenticated attacker can exploit it over a network with no user interaction to achieve high impact on integrity (no confidentiality or avai...
EUVD-2026-73482
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows TCP/IP allows an authorized attacker to elevate privileges locally...
CVE-2026-69385
CVE-2026-69385 is a local elevation of privilege vulnerability in Windows TCP/IP caused by a race condition (improper synchronization of a shared resource during concurrent execution). An authorized attacker with low privileges can exploit this to gain higher privileges on the target system. The ...
CVE-2026-72981
CVE-2026-72981 is a use-after-free vulnerability in Microsoft's IP Helper component that allows an unauthorized attacker to achieve remote code execution over a network. The Microsoft CNA assigns a CVSS 3.1 score of 8.1 (HIGH) with a vector of AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating that ...
EUVD-2026-73255
Use after free in IP Helper allows an unauthorized attacker to execute code over a network...
EUVD-2026-73047
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network...
CVE-2026-69757
CVE-2026-69757 is a use-after-free vulnerability in Windows TCP/IP that allows an authorized attacker to elevate privileges over a network. The attack requires low privileges and user interaction , with high complexity , yet yields high impact across confidentiality, integrity, and availability (...
CVE-2026-69588
CVE-2026-69588 affects Windows TCP/IP and is caused by a missing release of memory after its effective lifetime (a memory leak). An unauthorized network-based attacker with no privileges and no user interaction can trigger a denial of service , rated CVSS 7.5 (High) with high availability impact....
EUVD-2026-73023
Missing release of memory after effective lifetime in Windows TCP/IP allows an unauthorized attacker to deny service over a network...
EUVD-2026-73238
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows TCP/IP allows an authorized attacker to elevate privileges locally...
CVE-2026-69404
CVE-2026-69404 is a race condition in Windows TCP/IP caused by concurrent execution using a shared resource with improper synchronization, allowing an authorized local attacker (low privileges required) to elevate privileges . The CVSS 3.1 score is 7.0 (HIGH) with a local attack vector, high comp...
K000163233: BIND vulnerability CVE-2026-10822
Security Advisory Description If BIND encounters a particular invalid data structure in a DNS record, it will accept the invalid data, and may subsequently abort and exit. BIND will first need to store a DNS record for a key KEY, DNSKEY, etc.. That key must specify a PRIVATEDNS algorithm 253, and...
K000163234: BIND vulnerability CVE-2026-11331
Security Advisory Description An attacker who knows or guesses that a resolver uses RPZ with wildcard CNAME policies can craft query names long enough to trigger a NAMETOOLONG error condition during RPZ processing. This is not handled correctly and may lead to defeating the RPZ rule. It also may...
Windows TCP/IP Elevation of Privilege Vulnerability
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network...
Windows TCP/IP Denial of Service Vulnerability
Missing release of memory after effective lifetime in Windows TCP/IP allows an unauthorized attacker to deny service over a network...
IP Helper Remote Code Execution Vulnerability
Use after free in IP Helper allows an unauthorized attacker to execute code over a network...
Windows TCP/IP Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows TCP/IP allows an authorized attacker to elevate privileges locally...