5569 matches found
CVE-2026-69597: Use After Free
Use after free in Windows HTTP.sys allows an authorized attacker to elevate privileges over a network...
CVE-2026-78520: Out-of-bounds Read
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...
CVE-2026-69464: Execution with Unnecessary Privileges
Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...
CVE-2026-67368: Improper Link Resolution Before File Access
Improper link resolution before file access 'link following' in SQL Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-69485: Use of Uninitialized Resource
Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network...
PT-2026-87540
Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Services affected versions not specified Description A use-after-free condition exists in Windows Remote Desktop Services. This occurs when a program continues to use a pointer after it has been freed, which can be...
CVE-2026-83997: Use After Free
Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network...
CVE-2026-68880: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network...
CVE-2026-69296: Use After Free
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges over a network...
CVE-2026-69305: Use After Free
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network...
CVE-2026-86509: Stack-based Buffer Overflow
A flaw has been found in D-Link DIR-895L A1102b07. This impacts the function sendOffer/sendACK of the file udhcpcd/serverpacket.c of the component udhcpcd. This manipulation causes stack-based buffer overflow. The attack can only be done within the local network. The exploit has been published an...
CVE-2026-81349: Improper Neutralization of Special Elements used in an OS Command
Improper neutralization of special elements used in an os command 'os command injection' in Azure HDInsights allows an authorized attacker to elevate privileges over a network...
PT-2026-88008
Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially overwriting adjacent...
CVE-2026-69431: Heap-based Buffer Overflow
Heap-based buffer overflow in Telnet Client allows an unauthorized attacker to execute code over a network...
CVE-2026-81955: Heap-based Buffer Overflow
Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network...
CVE-2026-69587: NULL Pointer Dereference
Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service over a network...
CVE-2026-69402: Improper Neutralization of Input During Web Page Generation
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
CVE-2026-62762: NULL Pointer Dereference
Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network...