146611 matches found
SUSE CVE-2026-22859
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.20.1, the URBDRC client does not perform bounds checking on server-supplied MSUSBINTERFACEDESCRIPTOR values and uses them as indices in libusbudevcompletemsconfigsetup, causing an out-of-bounds read. This vulnerability is...
CVE-2025-62291
In the eap-mschapv2 plugin client-side in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted message of size 6 through 8, and cause an integer underflow that potentially results in a heap-based buffer overflow...
CVE-2025-62291
In the eap-mschapv2 plugin client-side in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted message of size 6 through 8, and cause an integer underflow that potentially results in a heap-based buffer overflow...
PT-2026-3325
Name of the Vulnerable Software and Affected Versions Microsoft Power Apps affected versions not specified Description An improper authorization issue exists in Microsoft Power Apps. This allows an authorized attacker to execute code over a network. Recommendations At the moment, there is no...
CVE-2025-51602
mmstu.c in VideoLAN VLC media player before 3.0.22 allows an out-of-bounds read and denial of service via a crafted 0x01 response from an MMS server...
CVE-2025-61973
A local privilege escalation vulnerability exists during the installation of Epic Games Store via the Microsoft Store. A low-privilege user can replace a DLL file during the installation process, which may result in unintended elevation of privileges...
CVE-2025-61973
A local privilege escalation vulnerability exists during the installation of Epic Games Store via the Microsoft Store. A low-privilege user can replace a DLL file during the installation process, which may result in unintended elevation of privileges...
CVE-2025-61973
A local privilege escalation vulnerability exists during the installation of Epic Games Store via the Microsoft Store. A low-privilege user can replace a DLL file during the installation process, which may result in unintended elevation of privileges...
CVE-2025-61973
CVE-2025-61973 is a local privilege escalation in the Epic Games Store installation via Microsoft Store. Cisco Talos details a DLL hijacking path: a writable %TEMP% directory allows replacing dxupdate.dll, which DXSETUP.exe later loads with SYSTEM privileges, yielding elevation. Affected versions...
EUVD-2026-2749
A local privilege escalation vulnerability exists during the installation of Epic Games Store via the Microsoft Store. A low-privilege user can replace a DLL file during the installation process, which may result in unintended elevation of privileges...
Researchers Reveal Reprompt Attack Allowing Single-Click Data Exfiltration From Microsoft Copilot
Cybersecurity researchers have disclosed details of a new attack method dubbed Reprompt that could allow bad actors to exfiltrate sensitive data from artificial intelligence AI chatbots like Microsoft Copilot in a single click, while bypassing enterprise security controls entirely. "Only a single...
ocfs2: fix kernel BUG in ocfs2_find_victim_chain
...
net/handshake: duplicate handshake cancellations leak socket
...
ksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency
...
netrom: Fix memory leak in nr_sendmsg()
...
e1000: fix OOB in e1000_tbi_should_accept()
...
ksmbd: fix buffer validation by including null terminator size in EA length
...
Epic Games Store Installation DLL Hijacking Privilege Escalation Vulnerability
Talos Vulnerability Report TALOS-2025-2279 Epic Games Store Installation DLL Hijacking Privilege Escalation Vulnerability January 15, 2026 CVE Number CVE-2025-61973 SUMMARY A local privilege escalation vulnerability exists during the installation of Epic Games Store via the Microsoft Store. A...
PT-2026-3020
A local privilege escalation vulnerability exists during the installation of Epic Games Store via the Microsoft Store. A low-privilege user can replace a DLL file during the installation process, which may result in unintended elevation of privileges...
