373094 matches found
CVE-2026-70058: Out-of-bounds Write
Out-of-bounds write in Windows DHCP Server allows an unauthorized attacker to execute code over a network...
CVE-2026-70083: Incorrect Authorization
Incorrect authorization in DNS Server allows an authorized attacker to perform tampering locally...
CVE-2026-70085: Missing Authorization
Missing authorization in DNS Server allows an authorized attacker to perform tampering locally...
CVE-2026-69795: NULL Pointer Dereference
Null pointer dereference in Windows Clipboard Server allows an authorized attacker to elevate privileges locally...
CVE-2026-70127: Use After Free
Use after free in DNS Server allows an unauthorized attacker to execute code over a network...
CVE-2026-68883: Heap-based Buffer Overflow
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-85811: Use After Free
Use after free in Network Policy Server NPS allows an unauthorized attacker to execute code over an adjacent network...
CVE-2026-85903: Untrusted Pointer Dereference
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network...
CVE-2026-88114: Untrusted Pointer Dereference
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network...
CVE-2026-97821: Out-of-bounds Read
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
CVE-2026-88081: Out-of-bounds Read
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...
CVE-2026-67626: Uncontrolled Resource Consumption
Uncontrolled resource consumption in SQL Server allows an authorized attacker to deny service over a network...
CVE-2026-14909: Generation of Error Message Containing Sensitive Information
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 is affected by an information disclosure vulnerability that allows an authenticated attacker to obtain sensitive information when restConnector-2.0 is enbabled...
CVE-2026-14532: Integer Overflow or Wraparound
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 could allow a Reader-role attacker to obtain version information that causes an uncaught exception...
KB5126868: Windows 10 Version 1607 / Windows Server 2016 Security Update (October 2026)
The remote Windows host is missing security update 5126868. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. CVE-2026-100202 - Heap-based buffer overflow in Network Poli...
Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : Apache HTTP Server vulnerabilities (USN-8898-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8898-1 advisory. It was discovered that Apache HTTP Server's modrewrite module incorrectly handled...
CVE-2026-83771: Use After Free
Use after free in Windows Camera Frame Server Monitor allows an unauthorized attacker to elevate privileges over an adjacent network...
PT-2026-112366
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...
PT-2026-113431
Name of the Vulnerable Software and Affected Versions Microsoft SQL Server 2019 affected versions not specified Microsoft SQL Server 2022 affected versions not specified Microsoft SQL Server 2025 affected versions not specified Description An authenticated attacker with low privileges can execute...
CVE-2026-70279: Improper Neutralization of Input During Web Page Generation
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...