CVE-2026-62735 Windows HTTP.sys Elevation of Privilege Vulnerability

...

CVE-2026-62722 Windows Bind Filter Driver Elevation of Privilege Vulnerability

...

CVE-2026-62705 Windows Bind Filter Driver Elevation of Privilege Vulnerability

...

CVE-2026-62702

CVE-2026-62702 is a denial-of-service vulnerability in the Windows Graphics Kernel caused by a null pointer dereference that can be triggered over a network. Per NVD, CVSS v3.1: AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H (base 8.6, HIGH) with impact on availability. Microsoft MSRC lists this vulnerabili...

CVE-2026-62693

Technical details beyond the brief description are not publicly provided in the supplied documents. No concrete information on affected components, root cause specifics, or remediation is available here; monitor for official updates.

CVE-2026-61934

CVE-2026-61934 details (from provided documents): A use-after-free bug in the Windows Bind Filter Driver enables a locally authenticated attacker to achieve privilege escalation. The vulnerability is associated with local attack vector and requires low attack complexity with low privileges, with ...

CVE-2026-61937 Windows HTTP.sys Elevation of Privilege Vulnerability

...

CVE-2026-61937 Windows HTTP.sys Elevation of Privilege Vulnerability

...

CVE-2026-61346 Windows Graphics Kernel Elevation of Privilege Vulnerability

...

CVE-2026-24911

Stack-based buffer overflow for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially...

CVE-2026-20752

Improper authentication for some IntelR PROSet/Wireless WiFi Software within Ring 0: Kernel may allow an information disclosure. System software adversary with a privileged user combined with a low complexity attack may enable data exposure. This result may potentially occur via local access when...

CVE-2026-73077

Vim is an open source, command line text editor. Prior to 9.2.0839, the runtime/ftplugin/sh.vim, runtime/ftplugin/zsh.vim, and runtime/ftplugin/ps1.vim filetype plugins pass attacker-controlled Visual-mode selections from K through keywordprg commands without safely separating shell arguments...

EUVD-2026-56233

Vim is an open source, command line text editor. Prior to 9.2.0839, the runtime/ftplugin/sh.vim, runtime/ftplugin/zsh.vim, and runtime/ftplugin/ps1.vim filetype plugins pass attacker-controlled Visual-mode selections from K through keywordprg commands without safely separating shell arguments...

CVE-2026-66484

A flaw was found in GNU cpio. This vulnerability, known as Path Traversal, occurs during the extraction of tar archives in copy-in mode when the --no-absolute-filenames option is used. A remote attacker could craft a malicious tar archive containing a hard-link entry with an absolute path. This...

Windows HTTP.sys Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows HTTP.sys allows an authorized attacker to elevate privileges locally...

CVE-2026-68326

A flaw was found in the Linux kernel's mwifiex Wi-Fi driver. A malicious or malfunctioning mwifiex device, operating in Access Point AP or micro-AP uAP mode, can provide a crafted event with an invalid length value. This unchecked length can lead to an out-of-bounds read or integer underflow,...

CVE-2026-72559

A stored cross-site scripting vulnerability in HortusFox 5.9 allows authenticated workspace members to inject persistent JavaScript into plant notes via Parsedown rendered without safe mode. Notes are rendered unescaped in the browser of every user who views the affected plant. An attacker can us...

CVE-2026-72559 Daniel Brendel HortusFox - Cross-Site Scripting

A stored cross-site scripting vulnerability in HortusFox 5.9 allows authenticated workspace members to inject persistent JavaScript into plant notes via Parsedown rendered without safe mode. Notes are rendered unescaped in the browser of every user who views the affected plant. An attacker can us...

Security Bulletin: Vulnerability in OpenSSL affects IBM Netezza Appliance

Summary The OpenSSL package is used by IBM Netezza Appliance . IBM Netezza Appliance has addressed the applicable CVE CVE-2026-28386 Vulnerability Details CVEID:CVE-2026-28386 DESCRIPTION: Issue summary: Applications using AES-CFB128 encryption or decryption on systems with AVX-512 and VAES suppo...

PT-2026-70502

Name of the Vulnerable Software and Affected Versions Windows HTTP.sys affected versions not specified Description An integer underflow wrap or wraparound occurs in Windows HTTP.sys, which is the kernel-mode driver that handles HTTP requests. This flaw allows an authorized attacker to elevate...