10663 matches found
EUVD-2026-73630
Heap-based buffer overflow in Windows HTTP Print Provider allows an unauthorized attacker to execute code over a network...
CVE-2026-69769
CVE-2026-69769 is a heap-based buffer overflow in the Windows HTTP Print Provider that allows an unauthorized, remote attacker to achieve code execution over a network . The vulnerability is rated CRITICAL (CVSS 9.8) with low attack complexity, no required privileges, and no user interaction, yie...
EUVD-2026-73092
Stack-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally...
CVE-2026-71337
CVE-2026-71337 is a stack-based buffer overflow in the Windows Storage Management Provider that allows a locally authenticated attacker with low privileges to achieve local privilege escalation . The CVSS 3.1 score is 7.8 (HIGH) , reflecting local attack vector, low complexity, and high impact to...
EUVD-2026-73035
Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to elevate privileges locally...
CVE-2026-69623
CVE-2026-69623 is a heap-based buffer overflow in Windows HTTP Print Provider that allows an authorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.0 (HIGH) , with a network attack vector, low complexity, low privileges required, and user interaction required...
EUVD-2026-73031
Heap-based buffer overflow in Windows HTTP Print Provider allows an authorized attacker to execute code over a network...
EUVD-2026-73233
Heap-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally...
CVE-2026-69389
This CVE describes a heap-based buffer overflow in Windows Storage Management Provider that allows an authorized, low-privileged attacker to achieve local privilege escalation . The vulnerability requires no user interaction and carries a CVSS 3.1 base score of 7.8 (HIGH) with high impact across ...
EUVD-2026-72933
Apache Airflow FAB provider versions 3.7.3 through 3.8.0 do not validate the issuer or audience of Azure AD idtokens during OAuth login. Deployments are affected only when the FAB auth manager is configured with Azure AD as an OAuth provider. Because the signing keys are fetched from Microsoft's...
CVE-2026-75156
The apache-airflow-providers-fab package (versions 3.7.3 through 3.8.0) is vulnerable to an Origin Validation Error during OAuth login when configured with Azure AD. The root cause is the failure to validate the issuer or audience of Azure AD id_tokens within the _decode_and_validate_azure_jwt fu...
CVE-2026-75156 Apache Airflow FAB provider: FAB Azure AD OAuth: id_token issuer/audience not validated — cross-tenant authentication bypass
Apache Airflow FAB provider versions 3.7.3 through 3.8.0 do not validate the issuer or audience of Azure AD idtokens during OAuth login. Deployments are affected only when the FAB auth manager is configured with Azure AD as an OAuth provider. Because the signing keys are fetched from Microsoft's...
CVE-2026-75156 Apache Airflow FAB provider: FAB Azure AD OAuth: id_token issuer/audience not validated — cross-tenant authentication bypass
Apache Airflow FAB provider versions 3.7.3 through 3.8.0 do not validate the issuer or audience of Azure AD idtokens during OAuth login. Deployments are affected only when the FAB auth manager is configured with Azure AD as an OAuth provider. Because the signing keys are fetched from Microsoft's...
CVE-2026-86725 AVideo SocialMediaPublisher Missing Authorization via add.json.php
AVideo through c3edcc274c389816d434acadac07ee78eaf330c1 contains a missing authorization vulnerability in the SocialMediaPublisher plugin's add.json.php endpoint that allows authenticated users to modify other users' OAuth token records. Attackers can supply arbitrary row IDs to overwrite another...
CVE-2026-73316
XenForo before 2.3.13 contains a payment replay vulnerability in the PayPal REST payment provider that allows attackers to process the same webhook payload multiple times by exploiting a missing duplicate transaction ID check. Attackers can replay a valid webhook payload to trigger duplicate...
Windows HTTP Print Provider Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows HTTP Print Provider allows an authorized attacker to execute code over a network...
Windows Storage Management Provider Elevation of Privilege Vulnerability
Stack-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally...
Windows Storage Management Provider Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally...
Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network...