1417840 matches found
CVE-2026-62902 .NET Information Disclosure Vulnerability
...
CVE-2026-62899
CVE-2026-62899 involves inconsistent interpretation of HTTP requests (HTTP request/response smuggling) in .NET, allowing an unauthenticated attacker to bypass a security feature over a network. The vulnerability affects .NET components handling HTTP semantics and could allow bypassing safeguards ...
CVE-2026-62899 .NET Security Feature Bypass Vulnerability
...
EUVD-2026-56407
Inconsistent interpretation of http requests 'http request/response smuggling' in .NET allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-62897
CVE-2026-62897 affects the .NET Framework due to an integer overflow/wraparound in a component, allowing a locally authenticated attacker to execute code. Root cause: integer overflow vulnerability; impact: local code execution with high confidentiality, integrity, and availability impacts per CV...
CVE-2026-62894
CVE-2026-62894 describes a heap-based buffer overflow in the Windows DWM Core Library that allows an authenticated local attacker to elevate privileges. The vulnerability is documented across CVE/NVD listings with a CVSSv3.1 base score of 7.8 (HIGH), vector: LOCAL, LOW attack complexity, and NONE...
Moderate: Red Hat Security Advisory: OpenShift Virtualization v4.17 Images
Red Hat OpenShift Virtualization release v4.17 is now available with updates to packages and images that fix several bugs and add enhancements. OpenShift Virtualization is Red Hat's virtualization solution designed for Red Hat OpenShift Container Platform. This advisory contains OpenShift...
CVE-2026-62766 Windows Kerberos Elevation of Privilege Vulnerability
...
CVE-2026-62755
CVE-2026-62755 affects the Windows DHCP Client. The vulnerability is a stack-based buffer overflow in the DHCP client component, leading to local privilege escalation for an authorized attacker. The CVSS 3.1 vector indicates Local attack, Low attack complexity, Low privileges required, with no us...
CVE-2026-62729
CVE-2026-62729 describes a race condition in Windows Telephony Service caused by concurrent execution on a shared resource with improper synchronization. This allows an authorized, local attacker to elevate privileges. The entry notes a local attack vector with high impact on confidentiality, int...
CVE-2026-62722 Windows Bind Filter Driver Elevation of Privilege Vulnerability
...
CVE-2026-62696 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability
...
CVE-2026-62690 Windows Push Notifications Elevation of Privilege Vulnerability
...
CVE-2026-62695 Windows Storage Elevation of Privilege Vulnerability
...
CVE-2026-61936
CVE-2026-61936 describes a local security bypass in the Windows Defender Firewall Service where missing authorization allows an authorized attacker to bypass a security feature locally. The NVD entry and CVE records corroborate this description. According to the provided metrics, the impact is hi...
CVE-2026-61936 Windows Defender Firewall Service Security Feature Bypass Vulnerability
...
EUVD-2026-56340
Missing authorization in Windows Defender Firewall Service allows an authorized attacker to bypass a security feature locally...
CVE-2026-61939 Winlogon Elevation of Privilege Vulnerability
...