ROS-20261013-73-0217

The vulnerability of the komedafbafbcsizecheck function in the drivers/gpu/drm/arm/display/komeda/komedaframebuffer.c file, a part of the Direct Rendering Infrastructure DRI driver for the Linux kernel, is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability...

CVE-2026-83664: Access of Resource Using Incompatible Type

Access of resource using incompatible type 'type confusion' in Windows Portable Device File System Driver allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-85825: Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...

PT-2026-111327

Name of the Vulnerable Software and Affected Versions AdithyaYelloju Restaurant-Management-System affected versions not specified Description An authorization bypass exists in the Order Management component. A remote attacker can manipulate the ID argument within the mysqli query function to bypa...

Microsoft Windows: CVE-2026-69675: Windows Network File System Information Disclosure Vulnerability

Out-of-bounds read in Windows Network File System allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-96946: Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85328: Windows Projected File System Elevation of Privilege Vulnerability

Weak authentication in Windows Projected File System allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-96209: Windows Network File System Elevation of Privilege Vulnerability

Out-of-bounds read in Windows Network File System allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-70143: Windows Network File System Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Network File System allows an authorized attacker to execute code locally...

Microsoft Windows: CVE-2026-83848: Windows COM+ Event System Service Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85820: Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-70277: Windows Fast FAT File System Driver Information Disclosure Vulnerability

Out-of-bounds read in Windows Fast FAT Driver allows an unauthorized attacker to disclose information locally...

CVE-2026-90530: Improper Limitation of a Pathname to a Restricted Directory

ColdFusion RDS is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope...

Microsoft Windows: CVE-2026-96947: Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83857: Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...

PT-2026-111279

Name of the Vulnerable Software and Affected Versions SourceCodester Performance Indicator System version 1.0 Description Remote SQL injection is possible due to improper processing of the /opils/staff/product.php endpoint. An attacker can exploit this by manipulating the Category variable to...

Microsoft Windows: CVE-2026-83586: Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability

Weak authentication in Windows Resilient File System ReFS Deduplication Service allows an authorized attacker to elevate privileges locally...

CVE-2026-85328: Weak Authentication

Weak authentication in Windows Projected File System allows an authorized attacker to elevate privileges locally...

CVE-2026-88162: Incorrect Authorization

Improper authorization in Windows Encrypting File System EFS allows an authorized attacker to perform tampering locally...

CVE-2026-83513: Heap-based Buffer Overflow

Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...