647695 matches found
CVE-2026-69494
CVE-2026-69494 is an out-of-bounds read vulnerability in the Windows Event Logging Service that allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability requires user interaction (CVSS: UI:R) and no prior privileges (PR:N), yielding a CVSS 3.1 score of 8....
CVE-2026-69448
CVE-2026-69448 is a local privilege escalation vulnerability in the Windows Bluetooth Service , caused by a race condition due to concurrent execution using a shared resource with improper synchronization. An authorized attacker can exploit this to elevate privileges locally, with a CVSS 3.1 scor...
EUVD-2026-72974
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69391
CVE-2026-69391 is a stack-based buffer overflow in the Windows Broker Infrastructure Service that allows an authorized attacker to achieve local privilege escalation . The vulnerability requires low privileges and local access, with no user interaction needed. Microsoft rates it CVSS 7.8 (High) ,...
CVE-2026-69339
CVE-2026-69339 is an information disclosure vulnerability in the Windows MIDI Service Module . It allows an attacker with low local privileges to expose sensitive system information to an unauthorized control sphere, resulting in high confidentiality impact with no integrity or availability impac...
EUVD-2026-73224
Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally...
CVE-2026-69296
A use-after-free vulnerability in Windows Device Association Service allows an authorized attacker to escalate privileges over a network. The flaw requires low privileges, user interaction, and high attack complexity, yielding a CVSS 3.1 score of 7.1 (HIGH) with full impact on confidentiality, in...
EUVD-2026-73217
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges over a network...
CVE-2026-68893
CVE-2026-68893 is a use-after-free vulnerability in the Windows Remote Desktop Licensing Service that allows an authorized attacker to elevate privileges over a network . The flaw is rated CVSS 3.1: 7.1 (High) with a vector requiring network access, high complexity, low privileges, and user inter...
EUVD-2026-73186
Out-of-bounds read in SQL Server allows an authorized attacker to deny service over a network...
CVE-2026-67633
Microsoft SQL Server is affected by an out-of-bounds read vulnerability that allows an authorized attacker (low privileges) to trigger a denial of service over the network. The CNA-assigned CVSS 3.1 score is 6.5 (MEDIUM) , reflecting network attack vector, low complexity, and high availability im...
CVE-2026-70091
CVE-2026-70091 is a race condition in Windows DNS caused by concurrent execution using a shared resource with improper synchronization. An unauthorized, network-based attacker can exploit this to cause a denial of service . The vulnerability is rated CVSS 5.9 (MEDIUM) with a network attack vector...
EUVD-2026-73171
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows DNS allows an unauthorized attacker to deny service over a network...
CVE-2026-9216 Insufficient input validation vulnerability exists in certain NETGEAR RAX Models
An insufficient input validation vulnerability in the listed NETGEAR RAX series models allows a network-adjacent attacker having network access such as WiFi credentials to crash the router's management UI. There is no confidentiality or integrity impact. A crash of the router's management UI does...
CVE-2026-9216 Insufficient input validation vulnerability exists in certain NETGEAR RAX Models
An insufficient input validation vulnerability in the listed NETGEAR RAX series models allows a network-adjacent attacker having network access such as WiFi credentials to crash the router's management UI. There is no confidentiality or integrity impact. A crash of the router's management UI does...
EUVD-2026-65227
NLTK: Entity-expansion DoS billion laughs via remaining raw ElementTree parses...
CVE-2026-84392
A NULL Pointer Dereference (CWE-476) in Fortinet FortiOS (7.2 all, 7.4 all), FortiPAM (1.0 through 1.9.0), and FortiProxy (7.2 all, 7.4 all, 7.6.0–7.6.6) allows an authenticated attacker to crash the httpsd daemon via crafted HTTP requests. The CVSS 3.1 score is 2.7 (Low) , reflecting high privil...
CVE-2026-84391
A use of uninitialized variable vulnerability in Fortinet FortiAnalyzer 7.6.3 through 7.6.6 may allow attacker to denial of service via...
CVE-2026-84391
A use of uninitialized variable vulnerability in Fortinet FortiAnalyzer versions 7.6.3 through 7.6.6 may allow an attacker to cause denial of service . The CVSS 3.1 score is 6.5 (Medium) with the vector AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H, indicating a network-accessible, low-complexity attack re...