CVE-2026-50392

Use after free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...

globaleaks-whistleblowing-software v5.0.98

GlobaLeaks is free and open-source whistleblowing software enabling anyone to easily set up and...

CVE-2026-15058

An improper authorization vulnerability exists in the secure messages deletion endpoint of Devolutions Server versions 2026.2.11 and 2026.1.22 . This flaw allows an authenticated user to delete messages belonging to another user by using a direct object reference to the message identifier. Exploi...

EUVD-2026-44330

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, the server:log listener Symfony\Bridge\Monolog\Command\ServerLogCommand binds to 0.0.0.0:9911 by default and processes each received frame with...

GO-2026-5942 Parsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessage

Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer...

CVE-2026-50694

Use after free in Windows Secure Socket Tunneling Protocol SSTP allows an unauthorized attacker to execute code over a network...

CVE-2026-49783

Improperly implemented security check for standard in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...

CVE-2026-42982

Improper validation of consistency within input in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...

CVE-2026-56186 Windows Secure Channel Information Disclosure Vulnerability

...

CVE-2026-56186 Windows Secure Channel Information Disclosure Vulnerability

...

CVE-2026-56186

CVE-2026-56186 is a Windows Schannel vulnerability described as an out-of-bounds read that enables an authorized attacker to disclose information over a network. The CVE affects the Windows Schannel security component and is rated with CVSS v3.1 base score 8.1 (High) and NETWORK attack vector wit...

CVE-2026-50681

CVE-2026-50681 is a Windows Secure Channel information disclosure vulnerability in Windows Cryptographic Services. The available documents describe exposure of sensitive information to an unauthorized actor, allowing a locally authenticated attacker to disclose data. Connected sources confirm the...

CVE-2026-50681 Windows Secure Channel Information Disclosure Vulnerability

...

CVE-2026-50681 Windows Secure Channel Information Disclosure Vulnerability

...

CVE-2026-50418 Windows System Secure Feature Bypass Vulnerability

...

CVE-2026-50418 Windows System Secure Feature Bypass Vulnerability

...

CVE-2026-50418

CVE-2026-50418 describes an improper access control issue in Windows systems that allows an unauthorized, local attacker to bypass a security feature. The vulnerability affects the Windows System Secure Feature and is labeled as a local, low-complexity bypass with a base CVSS v3.1 score of 5.1 (I...

CVE-2026-50392 Windows Secure Kernel Mode Elevation of Privilege Vulnerability

...

CVE-2026-50392 Windows Secure Kernel Mode Elevation of Privilege Vulnerability

...

CVE-2026-50392

CVE-2026-50392 is a use-after-free vulnerability in Windows Secure Kernel Mode that enables an authorized, local attacker to elevate privileges. Connected sources identify the flaw in the Windows Secure Kernel Mode and confirm exploitation would occur locally with elevated impact to confidentiali...