358474 matches found
PT-2026-111653
🚨 CVE-2026-103965 An issue in MongoDB Server's aggregation framework can cause certain constant values to be handled incorrectly during internal query rewriting. Under certain conditions, an authenticated user with read access may receive field values in aggregation output that the query did not...
PT-2026-111668
🚨 CVE-2026-96297 Use of freed memory in the aggregation feature of MongoDB Server can cause the server to read data from a memory area after it has been released. When an internal aggregation stage is combined with a batch size of 0, the server may read from memory that is no longer in use. Becau...
Microsoft Windows: CVE-2026-97821: Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
CVE-2026-103499: Uncontrolled Resource Consumption
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 and IBM WebSphere Application Server 8.5, and 9.0 Liberty could allow a remote unauthenticated attacker to cause a denial of service due to uncontrolled resource consumption...
PT-2026-113254
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
Microsoft SQL Server: CVE-2026-68883: Microsoft SQL Server Elevation of Privilege Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network...
PT-2026-112979
Double free in Windows DHCP Server allows an unauthorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-97843: Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
Microsoft Windows: CVE-2026-97842: Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
PT-2026-113272
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
PT-2026-113270
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
PT-2026-113466
Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description A stack-based buffer overflow allows an authorized attacker to elevate privileges over a network. A stack-based buffer overflow occurs when a program writes more data to a buffer located o...
PT-2026-112404
Name of the Vulnerable Software and Affected Versions Windows Server Update Service affected versions not specified Description Insufficient granularity of access control allows an authorized attacker to elevate privileges locally on the system. Recommendations At the moment, there is no...
KB5127648: Windows 11 Version 24H2 / Windows 11 Version 25H2 / Windows 11 Version 26H2 Security Update (October 2026)
The remote Windows host is missing security update 5127648. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. CVE-2026-100202 - Use after free in Microsoft QUIC allows an...
KB5126657: Windows 10 version 21H2 / Windows 10 Version 22H2 Security Update (October 2026)
The remote Windows host is missing security update 5126657. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. CVE-2026-100202 - Heap-based buffer overflow in Network Poli...
Microsoft Windows: CVE-2026-83499: Windows Server Update Service Elevation of Privilege Vulnerability
Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally...
Apache HTTP Server mod_vhost_alias() Code Execution
The vulnerability of the modvhostalias function in the Apache HTTP Server is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure or execute arbitrary code by sending a specially crafted HTTP...
PT-2026-113257
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
CVE-2026-94520: Use of Externally-Controlled Format String
Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network...