137493 matches found
CVE-2026-65789 Windows DNS Server Remote Code Execution Vulnerability
...
CVE-2026-65785 Windows DHCP Client Denial of Service Vulnerability
...
CVE-2026-65785
Summary of CVE-2026-65785 : The Windows DHCP Client is affected by a vulnerability described as “Uncontrolled resource consumption,” enabling an unauthenticated attacker on an adjacent network to cause a Denial of Service . The CVSS 3.1 vector indicates: Attack Vector: Adjacent , Attack Complexit...
CVE-2026-62893 Windows Deployment Services TFTP Server Remote Code Execution Vulnerability
...
CVE-2026-62820 Windows DNS Server Remote Code Execution Vulnerability
...
CVE-2026-62815
CVE-2026-62815 describes a use-after-free in Microsoft QUIC that could allow a remote attacker to execute code over the network. The connected sources confirm the vulnerability type but do not specify affected products, versions, exploit details, or available patches. No remediation steps are pro...
CVE-2026-62795 Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vulnerability
...
CVE-2026-62787
CVE-2026-62787 is a remote code execution vulnerability in Windows DNS Server caused by a use-after-free condition. An authenticated attacker could execute code over the network on a targeted host. CVSS v3.1 base score 7.5 (HIGH): AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H. The connected sources confirm...
CVE-2026-62750
CVE-2026-62750 affects Windows HTTP Protocol Stack (http.sys). A partial string comparison vulnerability in the stack enables an unauthenticated attacker on an adjacent network to perform tampering. The CVSS vector (AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) indicates adjacent access with no privileges...
EUVD-2026-56372
Partial string comparison in Windows HTTP Protocol Stack allows an unauthorized attacker to perform tampering over an adjacent network...
CVE-2026-62750 Windows HTTP Protocol Stack Tampering Vulnerability
...
CVE-2026-62750 Windows HTTP Protocol Stack Tampering Vulnerability
...
CVE-2026-62716
CVE-2026-62716 involves an integer underflow in Windows DHCP Server that permits information disclosure to an adjacent network. The affected component is Windows DHCP Server; the root cause is a wrap/wraparound error enabling data disclosure, with attack vector described as adjacent network acces...
CVE-2026-61924
Technical details about CVE-2026-61924 are not publicly provided in the supplied documents; monitor official advisories from Microsoft and NVD for updates, affected products, and remediations.
org.apache.artemis:artemis-server: org.apache.activemq:artemis-server: Apache Artemis, Apache ActiveMQ Artemis: Message injection and exfiltration due to missing authentication
A flaw was found in Apache Artemis and Apache ActiveMQ Artemis. An unauthenticated remote attacker can exploit a missing authentication for critical function vulnerability by using the Core protocol. This allows the attacker to force a target broker to establish an outbound Core federation...
netty-codec-haproxy: Netty HAProxy PROXY protocol v2 codec: Denial of Service via memory leak from crafted PROXY protocol headers
A flaw was found in the Netty HAProxy PROXY protocol v2 codec. A remote attacker can exploit this vulnerability by sending a specially crafted HAProxy PROXY protocol v2 header with nested PP2TYPESSL type-length-value TLV records. This can lead to a memory leak, causing the underlying cumulation...
undertow-core: Undertow: Authentication Bypass via AJP ssl_cert/is_ssl Forgery
the Undertow AJP listener honours forged sslcert and isssl AJP attributes without requiring any shared-secret authentication. This enables an unauthenticated attacker with direct TCP access to port 8009 to bypass CLIENT-CERT authentication by injecting a forged X.509 certificate via the AJP...
org.apache.artemis:artemis-server: org.apache.activemq:artemis-server: Apache Artemis, Apache ActiveMQ Artemis: Message injection and exfiltration due to missing authentication
A flaw was found in Apache Artemis and Apache ActiveMQ Artemis. An unauthenticated remote attacker can exploit a missing authentication for critical function vulnerability by using the Core protocol. This allows the attacker to force a target broker to establish an outbound Core federation...
JLSEC-2026-1252 Stack-based Buffer Overflow vulnerability in libmodbus v3.1.10 allows to overflow the buffer...
Stack-based Buffer Overflow vulnerability in libmodbus v3.1.10 allows to overflow the buffer allocated for the Modbus response if the function tries to reply to a Modbus request with an unexpected length...
