997545 matches found
CVE-2026-70351
CVE-2026-70351 is an integer overflow or wraparound in Microsoft WebP Image Extension that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 base score is 8.8 (High) , with low attack complexity and no privileges required, though user interaction is req...
CVE-2026-69730
CVE-2026-69730 is a use-after-free vulnerability in Windows DNS that allows an unauthorized, remote attacker to execute arbitrary code over the network without any user interaction or prior privileges. Microsoft rates it CVSS 9.8 (Critical) , with high impact on confidentiality, integrity, and av...
EUVD-2026-73068
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network...
CVE-2026-69860
CVE-2026-69860 is a heap-based buffer overflow in Windows Imaging Component that allows an unauthorized attacker to execute code over a network. The CVSS 3.1 score is 8.8 (HIGH) , with a vector of AV:N/AC:L/PR:N/UI:R, meaning the attack is network-based, requires user interaction , and needs no p...
CVE-2026-69732
CVE-2026-69732 is a heap-based buffer overflow in Windows Link Layer Topology Discovery Protocol (LLTD) that allows an unauthorized attacker to execute code over a network. The vulnerability carries a CVSS 3.1 score of 8.1 (HIGH) , with high impact on confidentiality, integrity, and availability,...
CVE-2026-69772
CVE-2026-69772 is a heap-based buffer overflow in Windows Network File System (NFS) that allows an unauthorized attacker to execute code over a network, achieving full remote code execution. The Microsoft-assigned CVSS 3.1 score is 8.8 (HIGH) with vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indic...
EUVD-2026-73061
Heap-based buffer overflow in Windows Network File System allows an unauthorized attacker to execute code over a network...
CVE-2021-41773-L-
CVE-2021-41773 🐛 Apache HTTP Server 2.4.49 中的路径遍历和文件泄露漏洞 在 Apache HTTP Server 2.4.49 中对路径规范化所做的更改中发现了一个缺陷。攻击者可以利用路径遍历攻击，将 URL 映射到由类似 Alias 指令配置的目录之外的文件。 如果这些目录之外的文件未受到通常默认配置“require all denied”的保护，则这些请求可能成功。如果 CGI 脚本也对这些别名路径启用，则可能导致远程代码执行。 此问题已知在野外被利用。 此问题仅影响 Apache 2.4.49，不影响较早版本。 来源 路径遍历 概述...
CVE-2026-69627
CVE-2026-69627 is an out-of-bounds read vulnerability in the Windows Remote Desktop Licensing Service . An authorized local attacker with low privileges can exploit this flaw to disclose information , resulting in high confidentiality impact but no integrity or availability impact (CVSS 3.1: 5.5 ...
EUVD-2026-73033
Out-of-bounds read in Windows Remote Desktop Licensing Service allows an authorized attacker to disclose information locally...
CVE-2026-69588
CVE-2026-69588 affects Windows TCP/IP and is caused by a missing release of memory after its effective lifetime (a memory leak). An unauthorized network-based attacker with no privileges and no user interaction can trigger a denial of service , rated CVSS 7.5 (High) with high availability impact....
CVE-2026-69524
CVE-2026-69524 is a use-after-free vulnerability in Windows Active Directory Domain Services that allows an unauthorized, network-based attacker to achieve remote code execution without prior authentication or user interaction. Microsoft rates it CVSS 8.1 (HIGH) with high impact on confidentialit...
CVE-2026-69539
CVE-2026-69539 is a use after free vulnerability in Windows Remote Desktop Services that allows an authorized attacker to achieve remote code execution over a network. The CVSS v3.1 base score is 7.5 (HIGH) , with a vector of AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating that exploitation requi...
EUVD-2026-73007
Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network...
CVE-2026-69525
CVE-2026-69525 is a use-after-free vulnerability in Windows Remote Desktop Services that allows an unauthorized attacker to achieve remote code execution over a network. The Microsoft CNA assigned a CVSS 3.1 score of 9.8 (CRITICAL) with a vector of AV:N/AC:L/PR:N/UI:N, indicating low attack compl...
EUVD-2026-73006
Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network...
EUVD-2026-73002
Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to execute code over a network...
CVE-2026-69514
CVE-2026-69514 is a heap-based buffer overflow in Windows Remote Desktop Services (RDS) that allows an authorized attacker (low privileges) to achieve remote code execution over a network. The vulnerability requires high attack complexity and no user interaction, yielding a CVSS 3.1 base score of...
CVE-2026-69551
Windows DNS Server is affected by a use after free vulnerability that allows an authorized attacker to execute arbitrary code over the network. The vulnerability is rated CVSS 8.8 (HIGH) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a network-based attack with low complexity th...