250055 matches found
CVE-2026-54989 Quality Windows Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability
...
CVE-2026-49174 DNS Client Tampering Vulnerability
...
CVE-2026-49174
CVE-2026-49174 describes a vulnerability in Microsoft Windows DNS where missing authentication for a critical function could allow a locally authorized attacker to tamper with DNS behavior. The NVD entry notes a CVSS v3.1 base score of 6.1 (Medium) with a LOCAL attack vector, LOW attack complexit...
CVE-2026-49175
CVE-2026-49175 is a Windows DNS Client vulnerability described as a heap-based buffer overflow that allows an authorized attacker to achieve local privilege escalation. The issue affects the Windows DNS client and is characterized by a LOCAL attack vector with low attack complexity and the need f...
CVE-2026-49169 Windows DNS Server Remote Code Execution Vulnerability
...
CVE-2026-49169
CVE-2026-49169 affects Windows DNS Server. The vulnerability is a use-after-free in the DNS Server that enables remote code execution when exploited over a network by an authenticated attacker. Exploitation details are not provided in the supplied documents beyond the CVSS 3.1 score (8.0, HIGH) w...
CVE-2026-49162 Microsoft Brokering File System Elevation of Privilege Vulnerability
...
CVE-2026-49162
CVE-2026-49162 is a use-after-free in Microsoft Brokering File System leading to local privilege escalation for an authenticated user; CVSSv3.1 indicates high impact (C/H, I/H, A/H) with local exploit required and low privileges. Public details in the connected documents do not specify affected p...
CVE-2026-49162 Microsoft Brokering File System Elevation of Privilege Vulnerability
...
2026-07 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Microsoft server operating system version 21H2 for x64 (KB5102206)
2026-07 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Microsoft server operating system version 21H2 for x64 KB5102206...
2026-07 Cumulative Update for Microsoft server operating system version 21H2 for x64-based Systems (KB5099540)
2026-07 Cumulative Update for Microsoft server operating system version 21H2 for x64-based Systems KB5099540...
CVE-2025-13162
creationtimestamp| type| source ---|---|--- 2026-07-14 16:15:03+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-195-01...
BIT-GOLANG-2026-39822 Root escape via symlink plus trailing slash in os
On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, 'root.Open"symlink/"' will open "symlink" even when "symlink" is a symbolic link pointing...
CVE-2026-10669 Xtensa MPU `arch_buffer_validate()` integer-overflow lets a user thread bypass syscall pointer validation
On Xtensa SoCs built with CONFIGXTENSAMPU and CONFIGUSERSPACE, archbuffervalidate in arch/xtensa/core/mpu.c — the architecture hook that verifies a user-mode-supplied buffer is accessible to the calling user thread with the requested permission — defaulted its return value to 0 access permitted a...
CVE-2026-59873 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, gitlab-rails-ce-fips, wazuh-dashboard-fips, code-server, saf, gitlab-rails-ce, prism, homepage, kubeflow-centraldashboard, lerna, kibana, pulumi, sqlpad, wazuh-dashboard, npm, graalvm, opensearch-dashboards-fips, actions-runner...
CVE-2026-59873 vulnerabilities
Vulnerabilities for packages: sqlpad, saf, lerna, kubeflow-centraldashboard, npm, pulumi, prism, code-server...
MAL-2026-10588 Malicious code in momenntjs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6aae445dd0b77bd7409820067097404e4ccb16d658e7911c7c4e659146fdfad4 momenntjs is a typosquat of momentjs whose package.json postinstall hook runs node.init.js. On npm install,.init.js enumerates roughly 60...
Windows NTFS Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally...