CVE-2026-102203

A type confusion vulnerability in the RPC Runtime allows an unauthorized attacker to execute code over a network. This issue involves the access of resources using incompatible types, which can lead to remote code execution. While the vulnerability is confirmed with a high base score, specific de...

CVE-2026-88219

A vulnerability in the RPC Runtime involves an untrusted pointer dereference , which could allow an unauthorized attacker to execute code over a network . The issue is associated with CWE-822 and has a CVSS v3.1 base score of 8.8 (High) . While the vulnerability allows for remote code execution, ...

CVE-2026-83910

A critical out-of-bounds write vulnerability exists in the RPC Runtime component of Microsoft Windows . An unauthorized attacker can exploit this flaw over a network to achieve arbitrary code execution . This vulnerability is categorized as having a CVSS score of 9.80 , allowing for remote exploi...

CVE-2026-83908

A Release of Invalid Pointer or Reference vulnerability exists in the RPC Runtime . This flaw allows an authorized attacker to perform a local privilege escalation . The vulnerability is associated with CWE-763 and has a CVSS 3.1 base score of 7.0 (High) . No specific software versions, root caus...

CVE-2026-83515

A vulnerability in the RPC Runtime involves the use of uninitialized resource , which allows an unauthorized attacker to disclose information over a network. The impact is characterized as a high confidentiality risk (CVSS 3.1 score of 6.5) requiring user interaction. Microsoft has confirmed this...

CVE-2026-83518

A heap-based buffer overflow exists in the RPC Runtime , which allows an authorized attacker to perform a local privilege escalation . The vulnerability is associated with a HIGH severity rating (CVSS 3.1 score of 7.8). No specific exploit code or in-the-wild exploitation details are provided in ...

CVE-2026-90282

A flaw was found in the Linux kernel's qcom qmp-usb-legacy driver. This vulnerability occurs due to a NULL-dereference during an early runtime suspend operation or when a local user re-enables runtime power management via the sysfs attribute before the physical layer PHY is properly initialized...

RPC Runtime Elevation of Privilege Vulnerability

Heap-based buffer overflow in RPC Runtime allows an authorized attacker to elevate privileges locally...

RPC Runtime Information Disclosure Vulnerability

Use of uninitialized resource in RPC Runtime allows an unauthorized attacker to disclose information over a network...

.NET Denial of Service Vulnerability

A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET web application. A remote unauthenticated attacker could exploit this...

RPC Runtime Library Remote Code Execution Vulnerability

Untrusted pointer dereference in RPC Runtime allows an unauthorized attacker to execute code over a network...

RPC Runtime Remote Code Execution Vulnerability

Access of resource using incompatible type 'type confusion' in RPC Runtime allows an unauthorized attacker to execute code over a network...

RPC Runtime Library Remote Code Execution Vulnerability

Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network...

RPC Runtime Elevation of Privilege Vulnerability

Release of invalid pointer or reference in RPC Runtime allows an authorized attacker to elevate privileges locally...

CVE-2026-109404

A server-side request forgery (SSRF) vulnerability exists in conductor-oss conductor versions up to 3.33.0-rc10 . The flaw originates from an unspecified functionality within the AgentController.java file, specifically located in the Agentspan Agent Runtime component. This vulnerability allows fo...

BIT-ELASTICSEARCH-2026-103008 Uncontrolled Recursion in Elasticsearch Leading to Denial of Service

Uncontrolled Recursion CWE-674 in Elasticsearch can lead to Denial of Service via a specially crafted request that causes the server to construct and process a deeply nested data structure with no bound on recursion depth. Elasticsearch contains an uncontrolled recursion weakness in how it builds...

PT-2026-112416

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Use of an uninitialized resource in the RPC Runtime allows an unauthorized attacker to disclose sensitive information over a network and affect the system...

PT-2026-111339

Uncontrolled Recursion CWE-674 in Elasticsearch can lead to Denial of Service via a specially crafted request that causes the server to construct and process a deeply nested data structure with no bound on recursion depth. Elasticsearch contains an uncontrolled recursion weakness in how it builds...

PT-2026-111913

Name of the Vulnerable Software and Affected Versions RPC Runtime affected versions not specified Description An issue exists where the access of a resource using an incompatible type, known as type confusion, allows an unauthorized attacker to execute arbitrary code over a network. Recommendatio...

PT-2026-113015

Name of the Vulnerable Software and Affected Versions RPC Runtime affected versions not specified Description An untrusted pointer dereference in the RPC Runtime allows an unauthorized attacker to execute arbitrary code over a network, which can affect the system. Recommendations At the moment,...