mssqlbof

mssqlbof A Beacon Object File suite for Microsoft SQL Server that speaks TDS 7.4 on the wire itself, in C. No msodbcsql.dll, no sqloledb.dll, no .NET CLR, no PowerShell. One COFF per arch, loads into every beacon that honors the canonical Beacon API. Why SQL Server shows up on nearly every...

PassTheCert

PassTheCert Sometimes, Domain Controllers do not support PKINIT. This can be because their certificates do not have the Smart Card Logon EKU. However, several protocols, including LDAP, support Schannel, thus authentication through TLS. We created a small Proof-of-Concept tool that allows...

CVE-2026-72940

Heap-based buffer overflow in Windows Schannel allows an unauthorized attacker to execute code over a network...

CVE-2026-70575

Null pointer dereference in Windows Schannel allows an authorized attacker to deny service over a network...

CVE-2026-70575

CVE-2026-70575 is a null pointer dereference in Windows Schannel (the Windows Secure Channel TLS/SSL component) that allows an authorized attacker (low privileges required) to trigger a denial of service over a network. The attack requires high complexity , no user interaction, and results in ava...

EUVD-2026-73652

Null pointer dereference in Windows Schannel allows an authorized attacker to deny service over a network...

EUVD-2026-73346

Heap-based buffer overflow in Windows Schannel allows an unauthorized attacker to execute code over a network...

CVE-2026-72940

CVE-2026-72940 is a heap-based buffer overflow in Windows Schannel (Microsoft's Secure Channel/SSL library) that allows an unauthorized, remote attacker to achieve remote code execution over a network. The CVSS v3.1 score is 8.8 (HIGH) with the vector AV:N/AC:L/PR:N/UI:R , indicating a network-re...

Windows Schannel Denial of Service Vulnerability

Null pointer dereference in Windows Schannel allows an authorized attacker to deny service over a network...

Windows Schannel Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Schannel allows an unauthorized attacker to execute code over a network...

CVE-2026-72940: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Schannel allows an unauthorized attacker to execute code over a network...

CVE-2026-70575: NULL Pointer Dereference

Null pointer dereference in Windows Schannel allows an authorized attacker to deny service over a network...

PT-2026-87811

Null pointer dereference in Windows Schannel allows an authorized attacker to deny service over a network...

PT-2026-87857

Name of the Vulnerable Software and Affected Versions Windows Schannel affected versions not specified Description A heap-based buffer overflow in Windows Schannel allows an unauthorized attacker to execute arbitrary code over a network, which can affect the system. A heap-based buffer overflow...

JLSEC-2026-1333

curl 7.61.0 through 7.76.1 suffers from exposure of data element to wrong session due to a mistake in the code for CURLOPTSSLCIPHERLIST when libcurl is built to use the Schannel TLS library. The selected cipher set was stored in a single "static" variable in the library, which has the surprising...

The vulnerability of the Windows security package “Schannel” on Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Windows Schannel security patch relates to the possibility of memory exploitation after release. Exploiting this vulnerability could allow an attacker to increase their privileges...

CVE-2026-62779

Use after free in Windows Schannel allows an authorized attacker to elevate privileges locally...

CVE-2026-62757

Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-62757 Windows Schannel Security Feature Bypass Vulnerability

...

CVE-2026-62757

Summary: CVE-2026-62757 involves Windows Schannel with improper verification of cryptographic signatures, allowing a network-borne attacker to bypass a security feature. The impact is described as a security feature bypass over the network, with a medium base score (CVSS 3.1: 5.3) and high confid...