7823 matches found
PT-2026-89030
snipe-it versions before 8.7.0 contain an authorization bypass vulnerability in location print endpoints that fails to enforce per-model authorization checks. Authenticated attackers with location view permission can access printassigned and printallassigned endpoints to retrieve related users,...
CVE-2026-85877
Heap-based buffer overflow in Windows Print Spooler Components allows an unauthorized attacker to execute code over a network...
CVE-2026-70564
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...
CVE-2026-69921
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...
CVE-2026-69838
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...
CVE-2026-69769
Heap-based buffer overflow in Windows HTTP Print Provider allows an unauthorized attacker to execute code over a network...
CVE-2026-69623
Heap-based buffer overflow in Windows HTTP Print Provider allows an authorized attacker to execute code over a network...
CVE-2026-69569
Untrusted pointer dereference in Windows Print Spooler Components allows an authorized attacker to deny service over a network...
CVE-2026-69552
Generation of error message containing sensitive information in Windows Print Spooler Components allows an authorized attacker to disclose information over a network...
CVE-2026-69364
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network...
CVE-2026-69344
Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally...
CVE-2026-69346
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network...
CVE-2026-69309
Double free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...
CVE-2026-68848
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...
CVE-2026-68835
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network...
EUVD-2026-73682
Double free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...
CVE-2026-69309
CVE-2026-69309 is a local privilege escalation vulnerability in Windows Print Spooler Components , caused by a double free defect. An attacker with low local privileges and high attack complexity can exploit it without user interaction to achieve full compromise of confidentiality, integrity, and...
CVE-2026-69769
CVE-2026-69769 is a heap-based buffer overflow in the Windows HTTP Print Provider that allows an unauthorized, remote attacker to achieve code execution over a network . The vulnerability is rated CRITICAL (CVSS 9.8) with low attack complexity, no required privileges, and no user interaction, yie...