CVE-2026-68877

Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to execute code locally...

CVE-2026-68844

Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to execute code locally...

CVE-2026-68839

Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network...

CVE-2026-86670

aircheng-org iWebShop-5 versions up to 5.15 contain a vulnerability in the Authentication Storage component within the file controllers/admin.php . Manipulating the Password argument can result in a password hash with insufficient computational effort , effectively weakening credential protection...

CVE-2026-86670 aircheng-org iWebShop-5 Authentication Storage admin.php weak password hash

A flaw has been found in aircheng-org iWebShop-5 up to 5.15. This impacts an unknown function of the file controllers/admin.php of the component Authentication Storage. Executing a manipulation of the argument Password can lead to password hash with insufficient computational effort. It is possib...

CVE-2026-86670 aircheng-org iWebShop-5 Authentication Storage admin.php weak password hash

A flaw has been found in aircheng-org iWebShop-5 up to 5.15. This impacts an unknown function of the file controllers/admin.php of the component Authentication Storage. Executing a manipulation of the argument Password can lead to password hash with insufficient computational effort. It is possib...

CVE-2026-69381

CVE-2026-69381 is an out-of-bounds read in the Windows Storage Port Driver that allows an unauthorized attacker with physical access to disclose information. The vulnerability requires no prior privileges or user interaction, but the physical attack vector limits its practical exploitability. The...

EUVD-2026-73893

Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack...

CVE-2026-82071

Insufficient validation of storage engine configuration options in MongoDB Server allows an authenticated user with write privileges to supply crafted parameters during collection creation that override internal storage metadata. This results in an out-of-bounds memory write in the server process...

CVE-2026-82065

A security issue in the MongoDB Server's storage engine integration layer allows an authenticated user with collection creation privileges to cause a persistent denial of service. Insufficient validation of user-supplied storage configuration options permits values that, once persisted to durable...

CVE-2026-82057

A security issue was discovered in MongoDB where an authenticated user with readWrite privileges could crash the mongod server process. By specifying a custom WiredTiger storage configuration option with an incompatible value during collection creation, a user could cause a type confusion in the...

CVE-2026-82062

A security issue in MongoDB Server allows an authenticated user with elevated internal privileges to bypass a disabled feature gate in the applyOps command by specifying an internal replication mode value that was not intended to be client-selectable. This bypass enables execution of container...

EUVD-2026-73821

Buffer over-read in Windows Storage allows an unauthorized attacker to disclose information with a physical attack...

CVE-2026-78516

CVE-2026-78516 is a buffer over-read in Windows Storage that allows an unauthorized attacker with physical access to disclose sensitive information. The vulnerability requires user interaction and no prior privileges. Microsoft rates it CVSS 4.3 (Medium) with a High confidentiality impact but no ...

CVE-2026-69575

Windows Storage Spaces Controller contains a use after free vulnerability that allows an authorized local attacker to elevate privileges , impacting confidentiality, integrity, and availability (CVSS 3.1: 7.0 HIGH , AV:L/AC:H/PR:L). Attack complexity is high and low privileges are required, with ...

EUVD-2026-73707

Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally...

CVE-2026-69568

CVE-2026-69568 is an out-of-bounds read vulnerability in the Windows Storage Spaces Controller component. An authorized attacker with local access and low privileges can exploit this flaw to achieve information disclosure (high confidentiality impact, no integrity or availability impact). The CVS...

EUVD-2026-73706

Out-of-bounds read in Windows Storage Spaces Controller allows an authorized attacker to disclose information locally...

EUVD-2026-73699

Out-of-bounds read in Windows USB Mass Storage Class Driver allows an unauthorized attacker to elevate privileges with a physical attack...

CVE-2026-69490

CVE-2026-69490 is an out-of-bounds read vulnerability in the Windows USB Mass Storage Class Driver that allows an unauthorized attacker to elevate privileges via a physical attack . The CVSS 3.1 base score is 6.8 (Medium) , reflecting the physical attack vector requirement (AV:P), low complexity,...