Microsoft Windows: CVE-2026-70233: Windows Common Log File System Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-55562: Improper Neutralization of Input During Web Page Generation

Cronicle is a multi-server task scheduler and runner, with a web based front-end UI. Prior to 0.9.119, the administrator Activity Log in htdocs/js/pages/admin/Activity.js concatenates the attacker-controlled item.user.fullname value into HTML without applying encodeentities and inserts the result...

CVE-2026-85870: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85868: Windows Common Log File System Driver Elevation of Privilege Vulnerability

Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-85868: Use After Free

Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85870: Windows Common Log File System Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-83835: Buffer Over-read

Buffer over-read in Windows Common Log File System Driver allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-85355: Windows Common Log File System Driver Elevation of Privilege Vulnerability

Inclusion of functionality from untrusted control sphere in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-106035: Insertion of Sensitive Information into Log File

An Information Exposure Through Log Files vulnerability in Ivanti Xtraction Cloud Sync before version 2026.4 allows a remote authenticated attacker to disclose partial SQL database passwords through application log...

Microsoft Windows: CVE-2026-85857: Windows Kernel-Mode Drivers Information Disclosure Vulnerability

Insertion of sensitive information into log file in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally...

PT-2026-112601

Name of the Vulnerable Software and Affected Versions Windows Common Log File System Driver affected versions not specified Description A buffer over-read in the Windows Common Log File System Driver allows an authorized attacker to disclose sensitive information locally and affect the system. A...

CVE-2026-85355: Inclusion of Functionality from Untrusted Control Sphere

Inclusion of functionality from untrusted control sphere in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83835: Windows Common Log File System Driver Information Disclosure Vulnerability

Buffer over-read in Windows Common Log File System Driver allows an authorized attacker to disclose information locally...

PT-2026-112818

Name of the Vulnerable Software and Affected Versions Windows Kernel-Mode Drivers affected versions not specified Description An issue exists where sensitive information is inserted into log files, allowing an authorized attacker to disclose this information locally and potentially affect the...

PT-2026-112830

Name of the Vulnerable Software and Affected Versions Windows Common Log File System Driver affected versions not specified Description A heap-based buffer overflow occurs in the Windows Common Log File System Driver. This issue allows an authorized attacker to elevate privileges locally on the...

PT-2026-112736

Name of the Vulnerable Software and Affected Versions Windows Common Log File System Driver affected versions not specified Description The Windows Common Log File System Driver contains a flaw where functionality from an untrusted control sphere is included, allowing an authorized attacker to...

CVE-2023-54407 Frappe 14.x before 14.45.0 Information Disclosure via Error Log Tracebacks

Frappe 14.x before 14.45.0 contains an information disclosure vulnerability that allows users with error log access to view secrets stored in local variables captured in tracebacks. Attackers who can read error logs can extract plaintext secrets such as credentials or keys exposed in traceback...

CVE-2023-54407 Frappe 14.x before 14.45.0 Information Disclosure via Error Log Tracebacks

Frappe 14.x before 14.45.0 contains an information disclosure vulnerability that allows users with error log access to view secrets stored in local variables captured in tracebacks. Attackers who can read error logs can extract plaintext secrets such as credentials or keys exposed in traceback...

CVE-2023-54407

The Frappe software, versions 14.x before 14.45.0 , is vulnerable to an information disclosure flaw due to how it handles error log tracebacks . If a user has access to the error logs, they can view traceback local variables , which may contain plaintext secrets such as credentials or keys. No sp...

CVE-2026-41504

OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 until 3.8.0, the Native audit-log formatter in internal/auditlog/formats.go writes attacker-influenced request and response fields without neutralizing carriage returns or line feeds. When...