5549 matches found
CVE-2026-18634
An insecure handling of serialized objects vulnerability was found in the one of the service of GMS application 9.5.1 Build 9510.1044 and earlier versions. A local attacker with the ability to interact with the service could exploit this behavior to perform unauthorized actions through the affect...
CVE-2026-68107
A flaw was found in the Linux kernel. Specifically, within the drm/amdgpu/vcn4 component, a time-of-check to time-of-use TOCTOU vulnerability exists. This occurs because the system re-reads the IB parameter length instead of reusing an already obtained value. This could allow a local attacker to...
CVE-2026-68147
A flaw was found in the Linux kernel's fscrypt component. When a cryptographic key blkcryptokey is being evicted, the system attempts to dynamically allocate memory. If this allocation fails, the key may be freed prematurely without proper eviction, leading to a use-after-free vulnerability. This...
CVE-2026-68218
A flaw was found in the dm1105 PCI driver of the Linux kernel. This issue arises from the driver's failure to properly deallocate resources, specifically a workqueue, when the device is removed. This oversight can lead to a memory leak, which a local attacker could potentially exploit to cause a...
CVE-2026-68262
A flaw was found in the Linux kernel. The drm/imagination component's pvrsetuobjarray function mishandles the user array stride during copies of kernel objects to a userspace array. This error causes incorrect memory access, leading to memory corruption where data is written to unintended...
CVE-2026-68263
A flaw was found in the Linux kernel's drm/imagination component. A double call to the drmschedentityfini function can lead to a reference count underflow and a use-after-free condition. This vulnerability could allow a local attacker to cause a denial of service or potentially achieve arbitrary...
CVE-2026-65680
Improper link resolution before file access 'link following' in Microsoft OneDrive allows an authorized attacker to elevate privileges locally...
EUVD-2026-56826
Improper link resolution before file access 'link following' in Microsoft OneDrive allows an authorized attacker to elevate privileges locally...
CVE-2026-68277
A flaw was found in the Linux kernel's drm/dp/mst Direct Rendering Manager/DisplayPort/Multi-Stream Transport sideband reply parsers. This out-of-bounds read vulnerability occurs when processing 2-byte fields in sideband replies, where the system attempts to read beyond the allocated buffer. A...
CVE-2026-68377
A flaw was found in the Linux kernel's acttunnelkey module, which manages network traffic tunneling. A race condition, where multiple operations occur in an unpredictable order, can lead to a use-after-free vulnerability. This allows a local attacker to corrupt memory, potentially causing the...
CVE-2026-68284
A flaw was found in the Linux kernel. A use-after-free vulnerability exists in the tcpbpfsendmsg function within the BPF Berkeley Packet Filter and sockmap components. This flaw occurs when two threads attempt to send data on the same socket concurrently, leading to an incorrect memory...
CVE-2026-72971
Improper link resolution before file access 'link following' in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to perform tampering locally...
CVE-2026-70346
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-70354
Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally...
CVE-2026-70347
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-70345
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-70344
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-70335
Improper neutralization of special elements used in an os command 'os command injection' in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to elevate privileges locally...