53995 matches found
EUVD-2026-99320
Concurrent execution using shared resource with improper synchronization 'race condition' in Active Directory Certificate Services AD CS allows an authorized attacker to elevate privileges locally...
EUVD-2026-99132
Use after free in Windows Cryptographic Services allows an authorized attacker to execute code over a network...
CVE-2026-70014
A Use after free vulnerability in Windows Cryptographic Services allows an authorized attacker to execute code over a network. The vulnerability results in Remote Code Execution (RCE) and is characterized by a high base severity score. Specific details regarding the impacted component or file are...
CVE-2026-110240
The software Lancet versions through 2.3.9 is vulnerable to a Server-Side Request Forgery (SSRF) protection bypass in the netutil.IsInternalIP function. The root cause is the misclassification of IPv6 private, link-local, CGNAT, and transition addresses as external addresses. Attackers can exploi...
EUVD-2026-99024
Lancet through 2.3.9 contains an SSRF protection bypass vulnerability in netutil.IsInternalIP that misclassifies IPv6 private, link-local, CGNAT and transition addresses as external. Attackers can supply hostnames resolving to these address forms, including NAT64, 6to4 or Teredo embedding interna...
CVE-2026-110240 Lancet through 2.3.9 SSRF Protection Bypass via netutil.IsInternalIP
Lancet through 2.3.9 contains an SSRF protection bypass vulnerability in netutil.IsInternalIP that misclassifies IPv6 private, link-local, CGNAT and transition addresses as external. Attackers can supply hostnames resolving to these address forms, including NAT64, 6to4 or Teredo embedding interna...
EUVD-2026-98740
Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to 0.0.40, an authenticated user who can create or edit a workflow with an Agent custom Python tool can bypass the blacklist-based sandbox in backend/app/services/pythontoolexecutor.py becau...
CVE-2026-55376 heym Python Tool Sandbox Escape
Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to 0.0.40, an authenticated user who can create or edit a workflow with an Agent custom Python tool can bypass the blacklist-based sandbox in backend/app/services/pythontoolexecutor.py becau...
CVE-2026-55376
Prior to version 0.0.40 , the heym platform is vulnerable to a sandbox escape within the backend/app/services/python_tool_executor.py component. An authenticated user capable of creating or editing a workflow with an Agent custom Python tool can bypass the blacklist-based sandbox. The root cause ...
Windows Cryptographic Services Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows Cryptographic Services allows an authorized attacker to disclose information locally...
Active Directory Federation Services (AD FS) Information Disclosure Vulnerability
Observable discrepancy in Active Directory Federation Services AD FS allows an unauthorized attacker to disclose information over a network...
Active Directory Federation Services (AD FS) Security Feature Bypass Vulnerability
Weak authentication in Active Directory Federation Services AD FS allows an unauthorized attacker to bypass a security feature over a network...
Windows Active Directory Domain Services Remote Code Execution Vulnerability
Out-of-bounds write in Active Directory Domain Services allows an authorized attacker to execute code over a network...
Windows Text Services Framework Elevation of Privilege Vulnerability
Use after free in Windows Text Services Framework allows an authorized attacker to elevate privileges locally...
Active Directory Federation Services (AD FS) Denial of Service Vulnerability
Allocation of resources without limits or throttling in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...
Windows Active Directory Domain Services Denial of Service Vulnerability
Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service over a network...
Windows Cryptographic Services Remote Code Execution Vulnerability
Use after free in Windows Cryptographic Services allows an authorized attacker to execute code over a network...
Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Active Directory Certificate Services AD CS allows an authorized attacker to elevate privileges locally...
Active Directory Federation Services (AD FS) Security Feature Bypass Vulnerability
Weak authentication in Active Directory Federation Services AD FS allows an unauthorized attacker to bypass a security feature over a network...