373166 matches found
PT-2026-113254
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
PT-2026-113272
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
PT-2026-113257
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
PT-2026-113271
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
CVE-2026-96246: Out-of-bounds Read
Out-of-bounds read in Network Policy Server NPS allows an unauthorized attacker to disclose information over a network...
Microsoft Windows: CVE-2026-96246: Network Policy Server (NPS) Information Disclosure Vulnerability
Out-of-bounds read in Network Policy Server NPS allows an unauthorized attacker to disclose information over a network...
CVE-2026-84013: Use After Free
Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-84013: Windows Telephony Server Elevation of Privilege Vulnerability
Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally...
CVE-2026-87710: Concurrent Execution using Shared Resource with Improper Synchronization
Improper access control in Microsoft Local Security Authority Server lsasrv allows an authorized attacker to elevate privileges locally...
CVE-2026-77910: Incorrect Authorization
Incorrect authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-110256: Improper Neutralization of Special Elements used in an LDAP Query
Finsys Dockhand through 1.0.18 contains an LDAP injection vulnerability in the tryLdapAuth function in src/lib/server/auth.ts, which inserts the login username into the LDAP search filter without escaping wildcard characters. Unauthenticated attackers can submit incremental wildcard patterns such...
CVE-2026-109954: Concurrent Execution using Shared Resource with Improper Synchronization
Parse Server 5.4.0 before 8.6.96 and 9.0.0 before 9.10.2-alpha.5 shares transactional batch state across concurrent requests, letting any client's transactional batch request interfere with other clients' database writes. On PostgreSQL or MongoDB replica sets and sharded clusters, other clients'...
CVE-2026-103499: Uncontrolled Resource Consumption
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 and IBM WebSphere Application Server 8.5, and 9.0 Liberty could allow a remote unauthenticated attacker to cause a denial of service due to uncontrolled resource consumption...
Microsoft Windows: CVE-2026-97844: Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
Microsoft Windows: CVE-2026-97843: Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
Microsoft Windows: CVE-2026-97842: Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
Microsoft Windows: CVE-2026-97841: Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
Microsoft Windows: CVE-2026-97838: Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
Microsoft Windows: CVE-2026-97839: Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
Microsoft Windows: CVE-2026-97837: Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...