CVE-2026-23918-poc

CVE-2026-23918 — Apache modhttp2 双重释放 影响: Apache HTTP Server 2.4.66 搭配 modhttp2 + Event MPM 修复版本: Apache 2.4.67 modh2 v2.0.37 CVSS 3.1: 8.8 高 — 可能实现未认证的远程代码执行 CWE: CWE-415 双重释放 漏洞描述 Apache 2.4.66 中的 modhttp2 在 h2mplx.c:mstreamcleanup 函数中存在一个双重释放漏洞。当客户端在同一流上先发送 HEADERS 帧紧接着发送 RSTSTREAM...

CVE-2026-69632

Use after free in Microsoft Office allows an unauthorized attacker to execute code over a network...

CVE-2026-69620

Stack-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network...

CVE-2026-69614

Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...

CVE-2026-69595

Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network...

CVE-2026-69598

Incorrect calculation of buffer size in Windows iSCSI allows an unauthorized attacker to execute code over a network...

CVE-2026-69601

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network...

CVE-2026-69590

Remote Code Execution in Windows Routing and Remote Access Service RRAS allows attacker to gain an unauthorized access to victim's machine...

CVE-2026-69586

Integer overflow or wraparound in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network...

CVE-2026-69556

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-69525

Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network...

CVE-2026-69518

Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network...

CVE-2026-69524

Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network...

CVE-2026-69510

Stack-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network...

CVE-2026-69511

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network...

CVE-2026-69495

Heap-based buffer overflow in Windows Event Logging Service allows an unauthorized attacker to execute code over a network...

CVE-2026-69496

Heap-based buffer overflow in Windows Compressed Folder allows an unauthorized attacker to execute code over a network...

CVE-2026-69491

Heap-based buffer overflow in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network...

CVE-2026-69493

Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network...

CVE-2026-69463

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code over a network...