177338 matches found
Microsoft Windows: CVE-2026-84007: Remote Desktop Gateway Service Information Disclosure Vulnerability
Out-of-bounds read in Remote Desktop Gateway Service allows an authorized attacker to disclose information over a network...
Microsoft Windows: CVE-2026-88181: Windows DWM Core Library Elevation of Privilege Vulnerability
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-96861: Network Device Enrollment Service (NDES) Denial of Service Vulnerability
Out-of-bounds read in Network Device Enrollment Service NDES allows an unauthorized attacker to deny service over a network...
Microsoft Windows: CVE-2026-96866: Network Device Enrollment Service (NDES) Denial of Service Vulnerability
Out-of-bounds read in Network Device Enrollment Service NDES allows an unauthorized attacker to deny service over a network...
Microsoft Windows: CVE-2026-97833: Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
Microsoft Windows: CVE-2026-97841: Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
Microsoft Office: CVE-2026-70254: Microsoft Office Excel Remote Code Execution Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-69999: Windows Update Information Disclosure Vulnerability
Out-of-bounds read in Windows Update allows an authorized attacker to disclose information locally...
Microsoft Windows: CVE-2026-83655: Network Policy Server (NPS) Denial of Service Vulnerability
Out-of-bounds read in Network Policy Server NPS allows an unauthorized attacker to deny service over a network...
Microsoft Windows: CVE-2026-83765: Windows DWM Core Library Information Disclosure Vulnerability
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally...
Microsoft Windows: CVE-2026-83856: Windows Event Logging Service Remote Code Execution Vulnerability
Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network...
CVE-2026-110119: Authorization Bypass Through User-Controlled Key
Yshopmall through 2.0.0 contains an insecure direct object reference vulnerability in the member address API that allows authenticated members to read, overwrite and delete other members' shipping addresses. Attackers can enumerate sequential address ids via /address/detail/id, /address/del and...
CVE-2026-110115: Improper Limitation of a Pathname to a Restricted Directory
Risesoft Digital-Infrastructure 9.6.5 through 9.6.11 contains a path traversal vulnerability in the fileManager Y9FileController.retrieveFileStream handler that allows unauthenticated attackers to read arbitrary files by supplying parent-directory segments in the fullPath and fileName parameters...
CVE-2026-102867: Out-of-bounds Read
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...
CVE-2026-105726: Out-of-bounds Read
Out-of-bounds read in Microsoft Defender allows an authorized attacker to disclose information locally...
PT-2026-111176
Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 17.11 through 19.2.7 GitLab CE/EE versions 19.3.x GitLab CE/EE versions 19.4 through 19.4.1 Description Incorrect authorization checks could allow an unauthenticated user to read work item contents from private groups and...
Microsoft Office: CVE-2026-88201: Microsoft Office Excel Information Disclosure Vulnerability
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network...
Microsoft Windows: CVE-2026-85858: Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-88179: Windows DWM Core Library Elevation of Privilege Vulnerability
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-97836: Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...