292246 matches found
Microsoft Windows: CVE-2026-83835: Windows Common Log File System Driver Information Disclosure Vulnerability
Buffer over-read in Windows Common Log File System Driver allows an authorized attacker to disclose information locally...
PT-2026-113306
Name of the Vulnerable Software and Affected Versions Adobe Experience Manager affected versions not specified Description An Improper Limitation of a Pathname to a Restricted Directory, also known as Path Traversal, allows a low-privileged attacker to perform arbitrary file system writes. This...
PT-2026-112614
Name of the Vulnerable Software and Affected Versions Windows COM+ Event System Service affected versions not specified Description An untrusted pointer dereference in the Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally. Recommendations At the moment,...
PT-2026-113148
Name of the Vulnerable Software and Affected Versions Windows Universal Disk Format File System Driver UDFS affected versions not specified Description A use-after-free condition in the Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges...
PT-2026-112787
Name of the Vulnerable Software and Affected Versions Windows exFAT File System affected versions not specified Description A heap-based buffer overflow occurs in the Windows exFAT File System. This issue allows an authorized attacker to elevate privileges locally, potentially granting them...
CVE-2026-109115: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This issue affects some unknown processing of the file User/forgot3.php of the component Password Reset. Performing a manipulation of the argument email/password results in sql...
CVE-2026-83759: Improper Control of Generation of Code
Improper control of generation of code 'code injection' in Windows Encrypting File System EFS allows an authorized attacker to execute code over a network...
CVE-2026-108975: Unrestricted Upload of File with Dangerous Type
A security flaw has been discovered in SourceCodester Library Management System 1.0. This vulnerability affects the function moveuploadedfile of the file admin/addadmin.php. Performing a manipulation of the argument image results in unrestricted upload. The attack may be initiated remotely. The...
CVE-2026-108967: Improper Neutralization of Special Elements used in an SQL Command
A security flaw has been discovered in SourceCodester Performance Indicator System 1.0. Impacted is an unknown function of the file /opils/staff/editcredit.php. The manipulation of the argument credit results in sql injection. The attack may be launched remotely. The exploit has been released to...
ROS-20261013-73-0463
The vulnerability of the tunxdpone function in the drivers/net/tun.c file of the Linux kernel’s network device driver module is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to cause a system failure...
CVE-2026-102186: Untrusted Pointer Dereference
Untrusted pointer dereference in Windows Network File System allows an authorized attacker to disclose information locally...
ROS-20261013-73-0465
The vulnerability of the tunxdpone function in the drivers/net/tun.c file of the Linux kernel’s network device driver leads to an infinite loop when a condition for exiting the loop is not met. Exploiting this vulnerability could allow an attacker to cause a system failure...
CVE-2026-102205: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-70277: Windows Fast FAT File System Driver Information Disclosure Vulnerability
Out-of-bounds read in Windows Fast FAT Driver allows an unauthorized attacker to disclose information locally...
PT-2026-113139
Name of the Vulnerable Software and Affected Versions Windows COM+ Event System Service affected versions not specified Description An untrusted pointer dereference in the Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally. Recommendations At the moment,...
Microsoft Windows: CVE-2026-83586: Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability
Weak authentication in Windows Resilient File System ReFS Deduplication Service allows an authorized attacker to elevate privileges locally...
PT-2026-112442
Name of the Vulnerable Software and Affected Versions Windows Resilient File System ReFS Deduplication Service affected versions not specified Description Weak authentication in the Windows Resilient File System ReFS Deduplication Service allows an authorized attacker to elevate privileges locall...
Microsoft Windows: CVE-2026-70116: Windows Resilient File System (ReFS) Security Feature Bypass Vulnerability
Stack-based buffer overflow in Windows Resilient File System ReFS allows an unauthorized attacker to bypass a security feature with a physical attack...
CVE-2026-83586: Weak Authentication
Weak authentication in Windows Resilient File System ReFS Deduplication Service allows an authorized attacker to elevate privileges locally...