5999 matches found
CVE-2026-70585
CVE-2026-70585 is a use-after-free vulnerability in the Windows Services for NFS ONCRPC XDR Driver . An authorized local attacker with low privileges can exploit it to achieve code execution , with high impact on confidentiality, integrity, and availability (CVSS 3.1 score 7.0 HIGH ; vector AV:L/...
EUVD-2026-72990
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally...
CVE-2026-69479
CVE-2026-69479 is a heap-based buffer overflow in Windows NTFS that allows an unauthorized local attacker to achieve code execution. The Microsoft-assigned CVSS 3.1 score is 8.4 (HIGH) , with a vector of AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating low attack complexity and no privileges or us...
CVE-2026-69347
CVE-2026-69347 is a heap-based buffer overflow in the Windows Fast FAT Driver that allows an unauthorized attacker to achieve local code execution . The vulnerability is rated HIGH (CVSS 3.1: 7.4) with a local attack vector, high complexity, no required privileges, and no user interaction, result...
CVE-2026-68875
CVE-2026-68875 is a buffer over-read in Windows NTFS that allows an authorized local attacker to achieve code execution . The vulnerability is rated CVSS 3.1 7.8 (High) with a local attack vector, low complexity, low privileges required, and no user interaction needed. No exploitation details or ...
EUVD-2026-73202
Buffer over-read in Windows NTFS allows an authorized attacker to execute code locally...
EUVD-2026-73190
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally...
Windows Hyper-V Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally...
Microsoft Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
Graphics Kernel Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to execute code locally...
Windows Remote Access Connection Manager Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to execute code locally...
Microsoft Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
Windows VOLSNAP.SYS Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to execute code locally...
Windows NTFS Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally...
Windows Fast FAT Driver Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally...
kernel: Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER
A flaw was found in the Linux kernel's Bluetooth subsystem. Improper handling of locking within the hciconnrequestevt function, particularly when the HCIPROTODEFER protocol is active, can result in a Use-After-Free UAF vulnerability. This condition arises when a connection object is accessed afte...
PT-2026-87292
Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description A buffer over-read in Windows NTFS allows an authorized attacker to execute code locally. This issue may also allow remote attackers to execute arbitrary code and affect the system. A...
PT-2026-88609
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Incorrect authorization in the Updater component on Windows allows a local attacker to execute arbitrary code outside the sandbox via a local program. Recommendations Update Google Chro...
PT-2026-88630
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An uncontrolled search path element in the CredentialProvider allows a local attacker to execute arbitrary code outside the sandbox via a local program on Windows systems. Recommendatio...
