Lucene search
+L

5569 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•9 views

CVE-2026-69819: Out-of-bounds Write

Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network...

9.8CVSS8.4AI score0.00974EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•12 views

CVE-2026-80073: Out-of-bounds Read

Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network...

6.5CVSS5.7AI score0.00922EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•18 views

PT-2026-87534

🚨 HIGH SEVERITY: CVE-2026-69514 CVSS 7.5 Heap buffer overflow in Windows Remote Desktop Services enables remote code execution by authenticated attackers. Patch immediately. CVE Vulnerability PatchNow ThreatIntel DFIR https://t.co/h112imW6bc...

7.5CVSS6.3AI score0.00663EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•9 views

CVE-2026-69714: Stack-based Buffer Overflow

Stack-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges over a network...

8.8CVSS6.1AI score0.00768EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•8 views

CVE-2026-69715: Out-of-bounds Read

Out-of-bounds read in Windows Direct Show allows an unauthorized attacker to execute code over a network...

9.8CVSS8.4AI score0.00974EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•28 views

PT-2026-87397

Name of the Vulnerable Software and Affected Versions Windows NDIS affected versions not specified Description A use-after-free issue in Windows NDIS allows an authorized attacker to elevate privileges over a network. Use-after-free is a memory corruption flaw that occurs when an application...

7.1CVSS6.1AI score0.0057EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•6 views

CVE-2026-80078: Out-of-bounds Read

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network...

6.5CVSS5.7AI score0.00922EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•3 views

CVE-2026-68779: Out-of-bounds Read

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

6.5CVSS5.8AI score0.00995EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•24 views

PT-2026-87674

Stack-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges over a network...

8CVSS6AI score0.00768EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•27 views

PT-2026-87491

Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

8.8CVSS6.3AI score0.00778EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•10 views

CVE-2026-69372: Out-of-bounds Read

Out-of-bounds read in Windows Network File System allows an authorized attacker to deny service over a network...

5.7CVSS5.8AI score0.00857EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•4 views

CVE-2026-66303: NULL Pointer Dereference

Null pointer dereference in Skype for Business allows an authorized attacker to deny service over a network...

6.5CVSS5.7AI score0.01138EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•2 views

CVE-2026-63523: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' in Skype for Business allows an unauthorized attacker to perform spoofing over a network...

6.5CVSS5.8AI score0.00553EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•16 views

PT-2026-87600

Name of the Vulnerable Software and Affected Versions Windows iSCSI affected versions not specified Description An incorrect calculation of buffer size in Windows iSCSI allows an unauthorized attacker to execute arbitrary code over a network, which can affect the system. Recommendations At the...

8.8CVSS6.8AI score0.00819EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•16 views

PT-2026-87234

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description A use after free issue exists that allows an authorized attacker to execute arbitrary code over a network, potentially affecting the system. Use after free is a memory corruption flaw that...

8.8CVSS7AI score0.00913EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•19 views

PT-2026-88016

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description A numeric truncation error occurs in Microsoft Office Word, which allows an unauthorized remote attacker to execute arbitrary code over a network and affect the system. Numeric...

8.8CVSS8.4AI score0.00819EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•6 views

CVE-2026-69415: Missing Authentication for Critical Function

Missing authentication for critical function in Windows DHCP Server allows an authorized attacker to elevate privileges over a network...

6.8CVSS5.8AI score0.00725EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•6 views

CVE-2026-69382: Use of a Broken or Risky Cryptographic Algorithm

Use of a broken or risky cryptographic algorithm in Microsoft Exchange Server allows an unauthorized attacker to disclose information over a network...

5.9CVSS5.8AI score0.00471EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•3 views

CVE-2026-77482: Heap-based Buffer Overflow

Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network...

8.8CVSS8.2AI score0.00819EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•3 views

CVE-2026-77483: Weak Authentication

Weak authentication in SQL Server allows an authorized attacker to elevate privileges over a network...

8.8CVSS7.8AI score0.00778EPSS
SaveExploits0References3
Rows per page
Query Builder