129617 matches found
kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold
A flaw was found in the Linux kernel's Bluetooth SCO Synchronous Connection-Oriented protocol implementation. The scorecvframe function fails to properly hold a reference to a socket after releasing a lock. This oversight allows a concurrent operation to free the socket while it is still being...
CVE-2026-50470 Windows Network Policy Server SNMP Information Disclosure Vulnerability
...
CVE-2026-50470
CVE-2026-50470 describes an out-of-bounds read in Windows Network Policy Server SNMP that could let an unauthenticated attacker disclose information over the network. The vulnerability affects the NPS SNMP handling and has a CVSS v3.1 base score of 7.5 (High) with network attack vector, low attac...
CVE-2026-50445 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
...
CVE-2026-50445 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
...
CVE-2026-50445
CVE-2026-50445 is a Windows Remote Desktop Protocol (RDP) information-disclosure vulnerability caused by a buffer over-read. An unauthenticated, remote attacker could disclose memory information over the network. Microsoft and partners have released updates (MSRC guidance) to address this vulnera...
CVE-2026-50346 Netlogon RPC Elevation of Privilege Vulnerability
...
CVE-2026-50307 Windows TCP/IP Elevation of Privilege Vulnerability
...
CVE-2026-50306 Windows TCP/IP Elevation of Privilege Vulnerability
...
CVE-2026-50306
CVE-2026-50306 is a Windows TCP/IP use-after-free vulnerability that allows an authorized, local attacker to elevate privileges. Affected component is the Windows TCP/IP stack; impact is local privilege escalation with high severity (CVSS 3.1: 7.8). Microsoft has released updates (KB5095051, KB50...
CVE-2026-50306 Windows TCP/IP Elevation of Privilege Vulnerability
...
CVE-2026-49788 HTTP/2 Denial of Service Vulnerability
...
CVE-2026-45646 OData for ASP.NET and ASP.NET Core Denial of Service Vulnerability
...
CVE-2026-45646 OData for ASP.NET and ASP.NET Core Denial of Service Vulnerability
...
CVE-2026-57979 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
...
CVE-2026-57979 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
...
CVE-2026-57979
CVE-2026-57979 describes an out-of-bounds read in Windows Remote Desktop Protocol (RDP) that could allow an unauthenticated or network-attached attacker to disclose information over the network. Publicly referenced sources (NVD, MSRC updates, ENISA EUVD, and security advisories) corroborate an in...
CVE-2026-55003 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
...
CVE-2026-55003
CVE-2026-55003 affects Windows Remote Desktop Protocol (RDP). The vulnerability arises from a use of an uninitialized resource, enabling an unauthenticated attacker to disclose information over the network. The CVSS 3.1 Base score is 6.5 (Medium); attack vector: Network, privileges required: None...