162486 matches found
CVE-2026-77910: Incorrect Authorization
Incorrect authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-83759: Improper Control of Generation of Code
Improper control of generation of code 'code injection' in Windows Encrypting File System EFS allows an authorized attacker to execute code over a network...
CVE-2026-70072: Allocation of Resources Without Limits or Throttling
Allocation of resources without limits or throttling in Windows Netlogon allows an authorized attacker to deny service over a network...
CVE-2026-69986: Use After Free
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-70014: Windows Cryptographic Services Remote Code Execution Vulnerability
Use after free in Windows Cryptographic Services allows an authorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-83843: Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
Out-of-bounds read in Windows Internet Key Exchange IKE Protocol allows an unauthorized attacker to deny service over a network...
PT-2026-111127
Name of the Vulnerable Software and Affected Versions SAP Cloud Connector affected versions not specified Description An improper authorization check allows a low-privileged attacker on an adjacent network to obtain limited information about internal systems by sending specially crafted requests...
PT-2026-112963
Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description An out-of-bounds read exists in Microsoft Office Excel, which could allow an unauthorized attacker to disclose information over a network. An out-of-bounds read occurs when the...
PT-2026-112288
Name of the Vulnerable Software and Affected Versions Remote Desktop Gateway Service affected versions not specified Description A use after free issue in the Remote Desktop Gateway Service allows an unauthorized attacker to execute arbitrary code over a network, which can affect the system. Use...
Microsoft Windows: CVE-2026-97823: Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
Microsoft Windows: CVE-2026-70082: Windows DNS Denial of Service Vulnerability
Uncaught exception in Windows DNS allows an unauthorized attacker to deny service over a network...
PT-2026-112350
Heap-based buffer overflow in WebDAV allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-100104: Server-Side Request Forgery (SSRF)
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.3 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to perform server-side request forgery and reach internal network resources due to a...
Microsoft Windows: CVE-2026-83674: Active Directory Federation Services (AD FS) Spoofing Vulnerability
Weak authentication in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-88833: Integer Underflow (Wrap or Wraparound)
A flaw was found in BusyBox's udhcpc DHCP client. When processing raw DHCP packets, the client replaces the validated packet length with an attacker-controlled value from the IP header without re-validating the minimum size. This leads to an integer underflow when subtracting header sizes, causin...
ROS-20261013-73-0315
The vulnerability of the ucanprobe function in the drivers/net/can/usb/ucan.c module of the Linux network device driver framework is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability could allow an attacker to cause service failures...
CVE-2026-88155: Heap-based Buffer Overflow
Heap-based buffer overflow in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
CVE-2026-105010: Use After Free
Use after free in Microsoft Windows Search Component allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-66822: Insertion of Sensitive Information Into Sent Data
Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network...
