32946 matches found
CVE-2026-70233
Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-83835
A buffer over-read vulnerability exists in the Windows Common Log File System Driver . This flaw allows an authorized attacker to disclose information locally on the affected system. The vulnerability is associated with CWE-126 and CWE-497 . No specific exploit information or remediation details ...
CVE-2026-85870
A heap-based buffer overflow exists in the Windows Common Log File System Driver . This vulnerability allows an authorized attacker to achieve local privilege elevation . No specific exploit details or in-the-wild exploitation information are provided in the documents. Remediation is indicated as...
CVE-2026-85868
A Use after free vulnerability exists in the Windows Common Log File System Driver . This flaw allows an authorized attacker to achieve local privilege elevation . No specific versions, root causes, or exploit details are provided in the documentation. Remediation is indicated as an OFFICIAL_FIX ...
CVE-2026-85857
A vulnerability in Windows Kernel-Mode Drivers allows an authorized attacker to perform a local information disclosure . The issue is caused by the insertion of sensitive information into a log file (CWE-532). The impact is characterized as a high level of confidentiality loss for local users. Re...
CVE-2026-85355
The Windows Common Log File System Driver is vulnerable to an elevation of privilege flaw due to the inclusion of functionality from an untrusted control sphere (CWE-829 ). An authorized attacker can exploit this issue to gain higher privileges locally. The vulnerability has been assigned a HIGH ...
CVE-2026-70233
A heap-based buffer overflow exists in the Windows Common Log File System Driver . This vulnerability allows an authorized attacker to achieve local privilege elevation . The CVSS 3.1 score is 7.8 (HIGH) , reflecting high impact on confidentiality, integrity, and availability. No specific exploit...
CVE-2026-55562
Cronicle is a multi-server task scheduler and runner, with a web based front-end UI. Prior to 0.9.119, the administrator Activity Log in htdocs/js/pages/admin/Activity.js concatenates the attacker-controlled item.user.fullname value into HTML without applying encodeentities and inserts the result...
CVE-2026-106035
An Information Exposure Through Log Files vulnerability in Ivanti Xtraction Cloud Sync before version 2026.4 allows a remote authenticated attacker to disclose partial SQL database passwords through application log...
CVE-2026-55562 Cronicle: Stored XSS in admin Activity Log via account full_name field
Cronicle is a multi-server task scheduler and runner, with a web based front-end UI. Prior to 0.9.119, the administrator Activity Log in htdocs/js/pages/admin/Activity.js concatenates the attacker-controlled item.user.fullname value into HTML without applying encodeentities and inserts the result...
CVE-2026-55562 Cronicle: Stored XSS in admin Activity Log via account full_name field
Cronicle is a multi-server task scheduler and runner, with a web based front-end UI. Prior to 0.9.119, the administrator Activity Log in htdocs/js/pages/admin/Activity.js concatenates the attacker-controlled item.user.fullname value into HTML without applying encodeentities and inserts the result...
CVE-2026-55562
Cronicle, a multi-server task scheduler and runner, contains a Stored XSS vulnerability in the administrator Activity Log prior to version 0.9.119 . The flaw exists in htdocs/js/pages/admin/Activity.js, where the item.user.full_name value is concatenated into HTML without proper encoding. Attacke...
CVE-2026-55562
Cronicle is a multi-server task scheduler and runner, with a web based front-end UI. Prior to 0.9.119, the administrator Activity Log in htdocs/js/pages/admin/Activity.js concatenates the attacker-controlled item.user.fullname value into HTML without applying encodeentities and inserts the result...
CVE-2026-106035
The Ivanti Xtraction Cloud Sync software before version 2026.4 is vulnerable to an Information Exposure Through Log Files (CWE-532) vulnerability. A remote authenticated attacker can exploit this to disclose partial SQL database passwords via the application logs. No specific remediation or explo...
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...
Windows Kernel-Mode Drivers Information Disclosure Vulnerability
Insertion of sensitive information into log file in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally...
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Inclusion of functionality from untrusted control sphere in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...