327921 matches found
Microsoft Windows: CVE-2026-83739: Windows Bluetooth Service Remote Code Execution Vulnerability
Use after free in Windows Bluetooth Service allows an unauthorized attacker to execute code over an adjacent network...
PT-2026-112928
Name of the Vulnerable Software and Affected Versions Windows Server affected versions not specified Description An out-of-bounds read in the Network File System NFS allows an unauthorized remote attacker to execute arbitrary code over a network and affect the system. Recommendations At the momen...
Microsoft Windows: CVE-2026-88171: Windows DHCP Server Remote Code Execution Vulnerability
Double free in Windows DHCP Server allows an unauthorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-88165: Windows Active Directory Domain Services Remote Code Execution Vulnerability
Out-of-bounds write in Active Directory Domain Services allows an authorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-88173: Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability
Use after free in Windows Background Intelligent Transfer Service BITS allows an unauthorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-83935: Microsoft XML Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft XML allows an unauthorized attacker to execute code over a network...
CVE-2026-108460: Use After Free
Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network...
CVE-2026-108458: Use After Free
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
CVE-2026-78799
The Quanxun Huiju Network Technology (Beijing) Co., Ltd IK-Q3000 Enterprise-grade Wi-Fi 6 wireless router is affected by a Directory Traversal vulnerability (CWE-22 ). This flaw allows a remote attacker to execute arbitrary code on the device. Affected versions include the Enterprise Edition (<...
CVE-2026-78799
Directory Traversal vulnerability in Quanxun Huiju Network Technology Beijing Co., Ltd IK-Q3000 Enterprise-grade Wi-Fi 6 wireless router Enterprise Edition: = iKuai83.7.23Enterprise Build 202606021825 - Free Edition: = iKuai 84.0.304-beta allows a remote attacker to execute arbitrary code...
Microsoft SharePoint: CVE-2026-88163: Microsoft Office SharePoint Remote Code Execution Vulnerability
Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
CVE-2026-96924: Untrusted Pointer Dereference
Untrusted pointer dereference in Windows OLE allows an unauthorized attacker to execute code over a network...
CVE-2026-110111: Improperly Controlled Modification of Object Prototype Attributes
Xen Orchestra before 6.9.0 contains an improper access control vulnerability that allows any authenticated user to become global administrator by abusing the unprotected vm.importFromEsxi and vm.importMultipleFromEsxi methods. Attackers can point xo-server at a malicious ESXi host serving a craft...
Microsoft Windows: CVE-2026-85371: Network Policy Server (NPS) Remote Code Execution Vulnerability
Use after free in Network Policy Server NPS allows an unauthorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-85799: Network Policy Server (NPS) Remote Code Execution Vulnerability
Use after free in Network Policy Server NPS allows an unauthorized attacker to execute code over a network...
PT-2026-112767
Name of the Vulnerable Software and Affected Versions Network Policy Server affected versions not specified Description A use after free issue exists in the Network Policy Server NPS, which allows an unauthorized remote attacker to execute arbitrary code over a network and affect the system. Use...
CVE-2026-97751: Heap-based Buffer Overflow
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...
CVE-2026-83910: Out-of-bounds Write
Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network...
CVE-2026-83520
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network...
PT-2026-113481
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.79 Description A use after free issue in the Browser component allows a remote attacker to execute arbitrary code outside the sandbox by inducing the user to visit a crafted HTML page. Use after free ...