399 matches found
CVE-2026-86914
An information disclosure issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive network connection information...
CVE-2026-86914
An information disclosure issue in macOS allows an application to potentially access sensitive network connection information . The vulnerability originates from inadequate state management . This issue has been addressed in the following versions: macOS Golden Gate 27 , macOS Sequoia 15.8 , and ...
EUVD-2026-104716
An information disclosure issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive network connection information...
CVE-2026-86914
An information disclosure issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive network connection information...
CVE-2026-86914
An information disclosure issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive network connection information...
PT-2026-117969
An information disclosure issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive network connection information...
Oracle Solaris information leakage vulnerability
Oracle Solaris 11.4 has a vulnerability related to information leakage, originating from issues with the Image Packaging System component. This vulnerability allows unauthorized attackers to access critical data or all accessible data through HTTP network connections...
CVE-2026-105281
The internal data publisher on openPDC accepts network connections without authentication in its default configuration. An unauthenticated network attacker can connect to this interface and retrieve the complete device and measurement topology of the system...
CVE-2026-85479
The STTP-based data publisher on openPDC accepts network connections without authentication in its default configuration. An unauthenticated network attacker can connect to this interface and exchange data with it...
EUVD-2026-95781
The STTP-based data publisher on openPDC accepts network connections without authentication in its default configuration. An unauthenticated network attacker can connect to this interface and exchange data with it...
PT-2026-108907
The internal data publisher on openPDC accepts network connections without authentication in its default configuration. An unauthenticated network attacker can connect to this interface and retrieve the complete device and measurement topology of the system...
CVE-2026-92940
A flaw was found in vm2. When a sandbox is configured to permit HTTPS requests, it improperly exposes the host process's network connection manager to sandboxed code. An attacker running untrusted code within the sandbox can exploit this flaw to intercept pooled network connections released by th...
Network Connection Broker Privilege Escalation
The vulnerability of the Network Connection Broker component of the Windows operating system is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
CVE-2026-28616
In Setup Wizard, there is a possible way to force connection to a malicious network due to confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-72967
Heap-based buffer overflow in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally...
CVE-2026-68886
Use after free in Windows Network Connection Broker allows an authorized attacker to disclose information locally...
EUVD-2026-73965
In Setup Wizard, there is a possible way to force connection to a malicious network due to confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-72967
A heap-based buffer overflow in the Windows Network Connection Broker component allows an authorized low-privilege attacker to escalate privileges locally. The vulnerability carries a CVSS 3.1 score of 7.8 (HIGH) with a local attack vector, low complexity, no user interaction, and high impact on ...