329951 matches found
CVE-2026-48386
ColdFusion is affected by a Use of a Broken or Risky Cryptographic Algorithm vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue does not require user interaction...
CVE-2025-31936
Improper handling of overlap between protected memory ranges for some IntelR XeonR 6 processors when using IntelR TDX within SMM may allow an escalation of privilege. SMM adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may...
CVE-2026-0465
A Use‑After‑Free UAF vulnerability in the AMD Ryzen™ Master Utility Driver could allow a local attacker to access kernel memory, potentially resulting in loss of availability...
CVE-2026-0465
A Use‑After‑Free UAF vulnerability in the AMD Ryzen™ Master Utility Driver could allow a local attacker to access kernel memory, potentially resulting in loss of availability...
EUVD-2026-56781
A Use‑After‑Free UAF vulnerability in the AMD Ryzen™ Master Utility Driver could allow a local attacker to access kernel memory, potentially resulting in loss of availability...
CVE-2026-0465
A Use‑After‑Free (UAF) in the AMD Ryzen Master Utility Driver is described as allowing a local attacker to access kernel memory, potentially causing a loss of availability. The affected component is the AMD Ryzen Master Utility Driver; the vulnerability is local, requires high privileges, and exe...
EUVD-2026-56770
Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally...
CVE-2026-70130 Microsoft Office Remote Code Execution Vulnerability
...
CVE-2026-68817 Microsoft Excel Remote Code Execution Vulnerability
...
CVE-2026-68814 Microsoft Excel Remote Code Execution Vulnerability
...
CVE-2026-68805
CVE-2026-68805 affects Microsoft Excel (part of Microsoft Office) with a heap-based buffer overflow leading to remote code execution. The connected documents consistently describe it as a heap-based overflow in Excel that enables an attacker to run arbitrary code, with a CVSSv3.1 base score of 7....
CVE-2026-66807
CVE-2026-66807 is a Microsoft Office Graphics Component vulnerability described as a stack-based buffer overflow. Affected product is Microsoft Office/Graphics Component; impact centers on code execution with a CVSSv3.1 base score of 7.8 (HIGH). Exploitation vector/conflict exists between sources...
EUVD-2026-56734
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally...
CVE-2026-64908
In CVE-2026-64908, the vulnerability is a heap-based buffer overflow in Microsoft Office Access. The issue affects Access components handling data processing, allowing a local attacker to execute code on the affected system. This is described as a local, user-interaction-requiring flaw with high ...
EUVD-2026-56712
Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally...
CVE-2026-62887 Windows NTFS Information Disclosure Vulnerability
...
CVE-2026-62814
The CVE-2026-62814 entry pertains to an Integer underflow (wrap/wraparound) in Windows DHCP Server that allows an unauthorized attacker on an adjacent network to disclose information. The issue is described as an information disclosure vulnerability with an Adjacent attack vector and LOW attack c...
CVE-2026-62781
CVE-2026-62781 is a heap-based buffer overflow in the RPC Runtime Library that enables remote code execution over the network. The vulnerability allows an unauthenticated attacker to run code on affected systems via network interaction. Current documents confirm the issue but do not provide produ...
CVE-2026-62780
CVE-2026-62780 is a Windows Kernel use-after-free vulnerability enabling local privilege escalation. The affected component is the Windows Kernel; the root cause is a use-after-free flaw that allows an authorized Local attacker to elevate privileges. CVSSv3.1 base score is 7.0 (HIGH) with LOCAL e...
CVE-2026-61920
CVE-2026-61920 – Windows DNS Server : A race condition caused by improper synchronization on a shared resource enables an authorized attacker to execute code over a network. Affected product: Windows DNS Server. Root cause: concurrent execution due to lack of proper synchronization in the shared ...