EUVD-2026-73966

In add of WifiNetworkSuggestionsManager.java, there is a possible persistent DOS due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28596

In parseInterventionFromXml of GameManagerService.java, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28596

CVE-2026-28596 is a permanent denial of service vulnerability in the Android Framework component, specifically in the parseInterventionFromXml method of GameManagerService.java. The root cause is resource exhaustion , which can lead to a permanent DoS. Exploitation requires a local attacker with ...

EUVD-2026-73952

In parseInterventionFromXml of GameManagerService.java, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73886

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...

CVE-2026-57099

ASP.NET Core is affected by an unbounded resource allocation flaw (no limits or throttling) that allows an unauthenticated, remote attacker to cause a denial of service over the network. The flaw carries a CVSS 3.1 base score of 7.5 (HIGH) with low attack complexity and no required privileges. CI...

EUVD-2026-73862

Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...

CVE-2026-81958

Microsoft Office Excel is affected by a use of uninitialized resource flaw that allows an unauthorized, local attacker to disclose information. The vulnerability requires user interaction (e.g., opening a crafted file) and results in a high confidentiality impact with no integrity or availability...

CVE-2026-81391

CVE-2026-81391 is an information disclosure vulnerability in Microsoft Office Excel caused by a use of uninitialized resource . An unauthorized local attacker with user interaction can disclose information, rated CVSS 5.5 (Medium) with high confidentiality impact but no integrity or availability ...

EUVD-2026-73860

Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...

CVE-2026-80091

Microsoft Office is affected by an information disclosure vulnerability caused by the use of an uninitialized resource . An unauthorized attacker can leverage this over a network to disclose information, though user interaction is required (CVSS: 6.5 MEDIUM , vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:...

EUVD-2026-73842

Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information over a network...

CVE-2026-78519

CVE-2026-78519 is a use of uninitialized resource vulnerability in Microsoft Office Outlook that allows an unauthorized, remote attacker to execute code over a network. The CVSS 3.1 score is 8.8 (HIGH) , with low attack complexity and no privileges required, though user interaction is required to...

EUVD-2026-73825

Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...

CVE-2026-82075

An uncontrolled resource consumption weakness exists in the request-handling path of the MongoDB sharded-cluster router process. A client that has network access to a router port and has not authenticated can supply connection-monitoring parameters that cause the server to expend CPU resources...

CVE-2026-72989

CVE-2026-72989 affects Windows Failover Cluster due to a use of uninitialized resource , allowing an unauthorized attacker to disclose information over a network . The vulnerability carries a CVSS 3.1 score of 7.5 (High) with a vector of AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, indicating a network-e...

EUVD-2026-73742

Use of uninitialized resource in Windows Failover Cluster allows an unauthorized attacker to disclose information over a network...

CVE-2026-72931

CVE-2026-72931 is a denial-of-service vulnerability in Windows Secure Socket Tunneling Protocol (SSTP) , caused by a missing release of a resource after its effective lifetime . An authorized local attacker with low privileges can trigger the condition, resulting in a high availability impact but...

EUVD-2026-73663

Missing release of resource after effective lifetime in Windows Secure Socket Tunneling Protocol SSTP allows an authorized attacker to deny service locally...

CVE-2026-69853

CVE-2026-69853 is an information disclosure vulnerability in Windows Win32K caused by use of an uninitialized resource. An authorized local attacker with low privileges can exploit it to disclose sensitive information , with no impact on integrity or availability. The CVSS 3.1 score is 4.7 (MEDIU...