177340 matches found
CVE-2026-110119: Authorization Bypass Through User-Controlled Key
Yshopmall through 2.0.0 contains an insecure direct object reference vulnerability in the member address API that allows authenticated members to read, overwrite and delete other members' shipping addresses. Attackers can enumerate sequential address ids via /address/detail/id, /address/del and...
CVE-2026-110115: Improper Limitation of a Pathname to a Restricted Directory
Risesoft Digital-Infrastructure 9.6.5 through 9.6.11 contains a path traversal vulnerability in the fileManager Y9FileController.retrieveFileStream handler that allows unauthenticated attackers to read arbitrary files by supplying parent-directory segments in the fullPath and fileName parameters...
CVE-2026-102867: Out-of-bounds Read
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...
CVE-2026-105726: Out-of-bounds Read
Out-of-bounds read in Microsoft Defender allows an authorized attacker to disclose information locally...
PT-2026-111176
Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 17.11 through 19.2.7 GitLab CE/EE versions 19.3.x GitLab CE/EE versions 19.4 through 19.4.1 Description Incorrect authorization checks could allow an unauthenticated user to read work item contents from private groups and...
Microsoft Office: CVE-2026-88201: Microsoft Office Excel Information Disclosure Vulnerability
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network...
Microsoft Windows: CVE-2026-85858: Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-88179: Windows DWM Core Library Elevation of Privilege Vulnerability
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-97836: Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
Microsoft Windows: CVE-2026-97842: Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
Microsoft Windows: CVE-2026-97843: Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
PT-2026-112737
Name of the Vulnerable Software and Affected Versions Windows Volume Manager Extension Driver affected versions not specified Description An out-of-bounds read in the Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally. An out-of-bounds read occurs...
PT-2026-113266
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
PT-2026-113269
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
PT-2026-113272
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
Microsoft Office: CVE-2026-88195: Microsoft Office Excel Information Disclosure Vulnerability
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network...
PT-2026-112610
Out-of-bounds read in Windows Paint allows an unauthorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-83703: Windows Wi-Fi Driver Denial of Service Vulnerability
Out-of-bounds read in Windows Wi-Fi Driver allows an unauthorized attacker to deny service over an adjacent network...
Microsoft Windows: CVE-2026-83832: Windows Spaceport.sys Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-85356: Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally...