Lucene search
+L

5569 matches found

Microsoft CVE
Microsoft CVE
•added 2026/07/14 2:00 p.m.•40 views

.NET Framework Denial of Service Vulnerability

Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service over a network...

7.5CVSS7.2AI score0.01174EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/07/14 2:00 p.m.•38 views

Windows Secure Channel Denial of Service Vulnerability

Missing release of memory after effective lifetime in Windows Cryptographic Services allows an unauthorized attacker to deny service over a network...

7.5CVSS5.9AI score0.01174EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/07/14 2:00 p.m.•56 views

Microsoft SharePoint Remote Code Execution Vulnerability

Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network...

9.8CVSS7.9AI score0.03042EPSS
SaveExploits4
Microsoft CVE
Microsoft CVE
•added 2026/07/14 2:00 p.m.•36 views

Windows Cryptographic Services Security Feature Bypass Vulnerability

Improper certificate validation in Windows Cryptographic Services allows an unauthorized attacker to bypass a security feature over a network...

6.5CVSS5.7AI score0.00334EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/07/14 2:00 p.m.•25 views

Windows Runtime Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Runtime allows an unauthorized attacker to elevate privileges over a network...

8.1CVSS7.1AI score0.0036EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/07/14 2:00 p.m.•53 views

Microsoft SharePoint Server Spoofing Vulnerability

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

5.4CVSS5.7AI score0.00583EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/07/14 2:00 p.m.•20 views

Windows Message Queuing Service (MSMQ) Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over a network...

9.8CVSS8.5AI score0.00974EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/07/14 2:00 p.m.•45 views

Windows DHCP Client Elevation of Privilege Vulnerability

Integer underflow wrap or wraparound in Windows DHCP Client allows an unauthorized attacker to elevate privileges over a network...

9.8CVSS7.3AI score0.01172EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/07/14 12:00 a.m.•27 views

PT-2026-58350

Name of the Vulnerable Software and Affected Versions Active Directory Federation Services affected versions not specified Description A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold. This issue allows an...

7.8CVSS7.3AI score0.01174EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/07/14 12:00 a.m.•45 views

PT-2026-58424

Name of the Vulnerable Software and Affected Versions Windows 10 Windows 11 Windows Server versions 2012 through 2025 Description A heap-based buffer overflow exists in Windows Message Queuing MSMQ, a service used for asynchronous communication between applications. This flaw allows an unauthoriz...

9.8CVSS8.7AI score0.00974EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/14 12:00 a.m.•6 views

CVE-2026-50666: Use After Free

Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges over a network...

8.8CVSS6.3AI score0.00913EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/07/14 12:00 a.m.•40 views

PT-2026-58275

Name of the Vulnerable Software and Affected Versions Windows Print Spooler affected versions not specified Description Concurrent execution using shared resource with improper synchronization race condition in Windows Print Spooler Components allows an authorized attacker to execute arbitrary co...

8.8CVSS6.2AI score0.00569EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/14 12:00 a.m.•4 views

CVE-2026-47295: Improper Neutralization of Special Elements used in an SQL Command

Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges over a network...

8.8CVSS7.9AI score0.00987EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/14 12:00 a.m.•3 views

CVE-2026-57090: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network...

9.8CVSS8.3AI score0.00819EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/14 12:00 a.m.•6 views

CVE-2026-57979: Out-of-bounds Read

Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network...

7.5CVSS5.7AI score0.00922EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/14 12:00 a.m.•9 views

CVE-2026-50694: Use After Free

Use after free in Windows Secure Socket Tunneling Protocol SSTP allows an unauthorized attacker to execute code over a network...

9.8CVSS6.5AI score0.00792EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/14 12:00 a.m.•15 views

CVE-2026-57976: NULL Pointer Dereference

Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network...

6.5CVSS5.7AI score0.01138EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/14 12:00 a.m.•7 views

CVE-2026-55008: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...

9.6CVSS5.8AI score0.00863EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/14 12:00 a.m.•8 views

CVE-2026-58279: Missing Authorization

Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network...

6.5CVSS5.8AI score0.00644EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/07/14 12:00 a.m.•34 views

PT-2026-58644

Name of the Vulnerable Software and Affected Versions Windows SMB affected versions not specified Description A race condition occurs in Windows SMB when shared resources are executed concurrently with improper synchronization. This allows an authorized attacker to elevate privileges over a...

7.5CVSS7.1AI score0.00509EPSS
SaveExploits0References6
Rows per page
Query Builder