Lucene search
+L

5674 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/14 12:00 a.m.•3 views

CVE-2026-50652: Deserialization of Untrusted Data

Deserialization of untrusted data in Azure Active Directory allows an unauthorized attacker to deny service over a network...

7.5CVSS7.2AI score0.0173EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/14 12:00 a.m.•8 views

CVE-2026-50355: Stack-based Buffer Overflow

Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network...

7.5CVSS7.5AI score0.01174EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/14 12:00 a.m.•8 views

CVE-2026-58279: Missing Authorization

Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network...

6.5CVSS5.8AI score0.00644EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/14 12:00 a.m.•3 views

CVE-2026-50685: Double Free

Double free in Windows DHCP Server allows an authorized attacker to execute code over a network...

7.5CVSS7.7AI score0.00663EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/14 12:00 a.m.•7 views

CVE-2026-50338: Improper Authentication

Improper authentication in Azure Spring Apps allows an authorized attacker to elevate privileges over a network...

8.2CVSS7.7AI score0.00517EPSS
SaveExploits3References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/14 12:00 a.m.•3 views

CVE-2026-50522: Deserialization of Untrusted Data

Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network...

9.8CVSS8.2AI score0.03042EPSS
SaveExploits6References4
Positive Technologies
Positive Technologies
•added 2026/07/14 12:00 a.m.•25 views

PT-2026-58569

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Improper neutralization of input during web page generation leads to a cross-site scripting issue, which allows an authorized attacker to perform spoofing over a network...

7.3CVSS6AI score0.00649EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/07/14 12:00 a.m.•37 views

PT-2026-58216

Name of the Vulnerable Software and Affected Versions Windows Internet Key Exchange IKE Protocol affected versions not specified Description A heap-based buffer overflow exists in the Windows Internet Key Exchange IKE Protocol. This issue allows an unauthorized network attacker to cause a denial ...

7.5CVSS7.5AI score0.01174EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/07/14 12:00 a.m.•35 views

PT-2026-58437

Name of the Vulnerable Software and Affected Versions Windows Runtime affected versions not specified Description A race condition occurs in the Windows Runtime due to improper synchronization when using a shared resource. This allows an unauthorized attacker to elevate privileges over a network...

8.1CVSS5.7AI score0.00542EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/07/14 12:00 a.m.•38 views

PT-2026-58659

Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network...

6.5CVSS6.1AI score0.00922EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/14 12:00 a.m.•10 views

CVE-2026-58617: Improper Access Control

Improper access control in Microsoft 365 Copilot for iOS allows an unauthorized attacker to elevate privileges over a network...

9.8CVSS7.6AI score0.00787EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/14 12:00 a.m.•10 views

CVE-2026-50460: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Runtime allows an unauthorized attacker to elevate privileges over a network...

8.1CVSS5.9AI score0.00542EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/14 12:00 a.m.•9 views

CVE-2026-50432: Use After Free

Use after free in Windows Virtual Filtering Platform VFP allows an authorized attacker to deny service over a network...

6.5CVSS6.3AI score0.00953EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/14 12:00 a.m.•5 views

CVE-2026-50429: Out-of-bounds Read

Out-of-bounds read in Windows Kernel allows an unauthorized attacker to disclose information over a network...

8.2CVSS5.7AI score0.01069EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/07/14 12:00 a.m.•39 views

PT-2026-58236

Name of the Vulnerable Software and Affected Versions Windows 11 affected versions not specified Windows Server 2025 affected versions not specified Description A heap-based buffer overflow in the Remote Desktop Client allows an unauthorized and unauthenticated attacker to execute arbitrary code...

9.8CVSS6.9AI score0.00819EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/14 12:00 a.m.•9 views

CVE-2026-40378: Memory Allocation with Excessive Size Value

Memory allocation with excessive size value in Windows Local Security Authority Subsystem Service LSASS allows an unauthorized attacker to deny service over a network...

7.5CVSS5.8AI score0.01174EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/14 12:00 a.m.•4 views

CVE-2026-58535: Use of Uninitialized Resource

Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network...

7.5CVSS5.8AI score0.00922EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/07/14 12:00 a.m.•37 views

PT-2026-58123

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description A heap-based buffer overflow exists in the Windows Bluetooth Port Driver. This issue allows an unauthorized attacker located on an adjacent network to execute arbitrary code and...

8.8CVSS6.5AI score0.00536EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/14 12:00 a.m.•4 views

CVE-2026-57102: Inclusion of Functionality from Untrusted Control Sphere

Inclusion of functionality from untrusted control sphere in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...

8.8CVSS5.9AI score0.00819EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/07/14 12:00 a.m.•24 views

PT-2026-58623

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network...

8.8CVSS6.3AI score0.00792EPSS
SaveExploits0References2
Rows per page
Query Builder