6180 matches found
CVE-2026-71343
CVE-2026-71343 affects Windows Remote Access Connection Manager and is caused by a heap-based buffer overflow that allows a local, authorized attacker with low privileges to execute code. The CVSS 3.1 score is 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating full compro...
CVE-2026-70585
CVE-2026-70585 is a use-after-free vulnerability in the Windows Services for NFS ONCRPC XDR Driver . An authorized local attacker with low privileges can exploit it to achieve code execution , with high impact on confidentiality, integrity, and availability (CVSS 3.1 score 7.0 HIGH ; vector AV:L/...
CVE-2026-69479
CVE-2026-69479 is a heap-based buffer overflow in Windows NTFS that allows an unauthorized local attacker to achieve code execution. The Microsoft-assigned CVSS 3.1 score is 8.4 (HIGH) , with a vector of AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating low attack complexity and no privileges or us...
EUVD-2026-72990
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally...
CVE-2026-69347
CVE-2026-69347 is a heap-based buffer overflow in the Windows Fast FAT Driver that allows an unauthorized attacker to achieve local code execution . The vulnerability is rated HIGH (CVSS 3.1: 7.4) with a local attack vector, high complexity, no required privileges, and no user interaction, result...
CVE-2026-68875
CVE-2026-68875 is a buffer over-read in Windows NTFS that allows an authorized local attacker to achieve code execution . The vulnerability is rated CVSS 3.1 7.8 (High) with a local attack vector, low complexity, low privileges required, and no user interaction needed. No exploitation details or ...
EUVD-2026-73202
Buffer over-read in Windows NTFS allows an authorized attacker to execute code locally...
EUVD-2026-73190
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally...
Windows NTFS Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally...
Graphics Kernel Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to execute code locally...
Microsoft Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
Windows VOLSNAP.SYS Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to execute code locally...
Microsoft Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
Windows Hyper-V Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally...
Windows Remote Access Connection Manager Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to execute code locally...
Windows Fast FAT Driver Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally...
kernel: Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER
A flaw was found in the Linux kernel's Bluetooth subsystem. Improper handling of locking within the hciconnrequestevt function, particularly when the HCIPROTODEFER protocol is active, can result in a Use-After-Free UAF vulnerability. This condition arises when a connection object is accessed afte...
CVE-2026-71343: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to execute code locally...
PT-2026-87477
A newly disclosed Windows BitLocker vulnerability CVE-2026-69449 could let attackers execute arbitrary code via local or network paths. Affected versions span Windows 10, Windows 11, and all recent Windows Server releases. Microsoft rates the risk “Important” yet “Exploitation Less Likely,” and h...