358290 matches found
UBUNTU-CVE-2026-107614
An integer underflow in WinCursorShapeUtils::trimTransparent in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to crash the server, and potentially read out-of-bounds memory, by causing a cursor shape with a width or height of zero to be processed on the DXGI...
Microsoft Windows: CVE-2026-83753: Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-97819: Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
CVE-2026-105443: Improper Access Control
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 has insufficient isolation between servers sharing an install...
PT-2026-113393
Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server - Liberty versions 17.0.0.3 through 26.0.0.10 Description An authentication bypass flaw exists when the samlWeb-2.0 feature is enabled. This issue allows unauthenticated remote attackers to bypass enterprise...
PT-2026-113391
IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow an unauthenticated remote attacker to bypass access controls configured on gRPC service methods...
CVE-2026-11713: Incorrect Authorization
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 is affected by a privilege escalation vulnerability with the restConnector-2.0 feature enabled...
CVE-2026-95696: Uncontrolled Resource Consumption
IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to cause a denial of service due to an uncaught exception...
CVE-2026-79715: Improper Limitation of a Pathname to a Restricted Directory
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 could allow a local attacker to traverse directories on the system. An attacker could use a specially crafted application archive to write files outside the intended directory...
Microsoft Windows: CVE-2026-97829: Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
PT-2026-113256
Buffer over-read in DNS Server allows an authorized attacker to disclose information over a network...
Microsoft Windows: CVE-2026-83655: Network Policy Server (NPS) Denial of Service Vulnerability
Out-of-bounds read in Network Policy Server NPS allows an unauthorized attacker to deny service over a network...
CVE-2026-108129: Out-of-bounds Read
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
PT-2026-113251
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
Microsoft Windows: CVE-2026-85803: Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability
Use after free in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally...
PT-2026-113250
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
Microsoft Windows: CVE-2026-97825: Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
PT-2026-112399
Incorrect authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-103965: Improper Control of Generation of Code
An issue in MongoDB Server's aggregation framework can cause certain constant values to be handled incorrectly during internal query rewriting. Under certain conditions, an authenticated user with read access may receive field values in aggregation output that the query did not intend to return...
PT-2026-111653
šØ CVE-2026-103965 An issue in MongoDB Server's aggregation framework can cause certain constant values to be handled incorrectly during internal query rewriting. Under certain conditions, an authenticated user with read access may receive field values in aggregation output that the query did not...