Lucene search
+L

5507 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•8 views

CVE-2026-69569: Untrusted Pointer Dereference

Untrusted pointer dereference in Windows Print Spooler Components allows an authorized attacker to deny service over a network...

5.7CVSS5.7AI score0.00857EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•4 views

CVE-2026-69586: Integer Overflow or Wraparound

Integer overflow or wraparound in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network...

9.8CVSS8.5AI score0.00974EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•8 views

CVE-2026-69427: Out-of-bounds Read

Out-of-bounds read in Windows VOLSNAP.SYS allows an authorized attacker to elevate privileges over a network...

8CVSS5.8AI score0.00768EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•5 views

CVE-2026-69337: Double Free

Double free in Windows Registry allows an authorized attacker to elevate privileges over a network...

7.1CVSS5.9AI score0.0057EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•8 views

CVE-2026-69775: Use After Free

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges over a network...

7.5CVSS6.2AI score0.0057EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•3 views

CVE-2026-69624: Incomplete List of Disallowed Inputs

Incomplete list of disallowed inputs in Active Directory Certificate Services AD CS allows an authorized attacker to perform tampering over a network...

6.5CVSS5.8AI score0.00738EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•12 views

CVE-2026-69676: Authentication Bypass by Capture-replay

Authentication bypass by capture-replay in Windows Kerberos allows an authorized attacker to execute code over a network...

8.8CVSS6.1AI score0.00778EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•6 views

CVE-2026-69690: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

5.4CVSS5.8AI score0.00401EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•7 views

CVE-2026-69423: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges over a network...

8CVSS6.1AI score0.00768EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•17 views

PT-2026-87524

Stack-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges over a network...

8CVSS6AI score0.00768EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•2 views

CVE-2026-83997: Use After Free

Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network...

8.1CVSS8.1AI score0.00707EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•2 views

CVE-2026-66820: Improper Neutralization of Special Elements used in an SQL Command

Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges over a network...

8.8CVSS5.9AI score0.00987EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•27 views

PT-2026-87397

Name of the Vulnerable Software and Affected Versions Windows NDIS affected versions not specified Description A use-after-free issue in Windows NDIS allows an authorized attacker to elevate privileges over a network. Use-after-free is a memory corruption flaw that occurs when an application...

7.1CVSS6.1AI score0.0057EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•10 views

CVE-2026-78462: Authorization Bypass Through User-Controlled Key

Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...

8.8CVSS5.8AI score0.00758EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•11 views

CVE-2026-69591: Out-of-bounds Read

Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information over a network...

5.7CVSS5.7AI score0.00894EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•13 views

PT-2026-87704

Name of the Vulnerable Software and Affected Versions Microsoft Office PowerPoint affected versions not specified Description A use-after-free issue in Microsoft Office PowerPoint allows an unauthorized remote attacker to execute arbitrary code over a network. Use-after-free is a memory corruptio...

8.8CVSS7AI score0.00819EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•5 views

CVE-2026-77494: Access of Resource Using Incompatible Type

Access of resource using incompatible type 'type confusion' in Windows DHCP Server allows an unauthorized attacker to deny service over a network...

7.5CVSS5.8AI score0.01174EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•22 views

PT-2026-87266

Name of the Vulnerable Software and Affected Versions Windows GDI+ affected versions not specified Description An integer underflow wrap or wraparound occurs in Windows GDI+, which is a graphics API used for rendering 2D and 3D graphics. This issue allows an authorized attacker to elevate...

8CVSS5.8AI score0.00768EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•25 views

PT-2026-87351

Name of the Vulnerable Software and Affected Versions Microsoft Windows Search Component affected versions not specified Description A use-after-free condition in the Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network. Use-after-free is a memory...

7.1CVSS6.1AI score0.0057EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•24 views

PT-2026-88011

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description A use after free condition exists in Microsoft Office Word. This flaw allows an unauthorized attacker to execute arbitrary code over a network. Use after free is a memory...

8.8CVSS6.9AI score0.00819EPSS
SaveExploits0References4
Rows per page
Query Builder