21843 matches found
CVE-2026-83770
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network...
CVE-2026-70096
Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code over a network...
CVE-2026-70093
Heap-based buffer overflow in Windows Rich Text Edit Control allows an authorized attacker to elevate privileges locally...
CVE-2026-110239
Rapyd Admin before 9.20.0 contains a stored cross-site scripting vulnerability in the x-rpd::rich-text Blade component that outputs bound model values as raw HTML without sanitisation. Authenticated users can set the bound property through the Livewire client API to store JavaScript that executes...
CVE-2026-102225
Out-of-bounds read in Windows Text Shaping allows an unauthorized attacker to execute code over a network...
CVE-2026-102210
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network...
CVE-2026-97814
A heap-based buffer overflow vulnerability exists in Windows Text Shaping , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS score of 9.80 and is characterized by low attack complexity, requiring no privileges or user interac...
EUVD-2026-100416
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network...
EUVD-2026-100374
Out-of-bounds read in Windows Text Shaping allows an unauthorized attacker to execute code over a network...
CVE-2026-102225
Windows is affected by an out-of-bounds read vulnerability within the Text Shaping component. This flaw could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability is associated with CWE-125 (Out-of-bounds Read) and CWE-197 (Numeric Truncation Error). W...
CVE-2026-102210
A Heap-based buffer overflow vulnerability exists in Windows Text Shaping . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is classified with a CRITICAL CVSS score of 9.8, indicating high impact on confidentiality, integrity, and avail...
CVE-2026-83770
A heap-based buffer overflow exists in Windows Text Shaping that allows an unauthorized attacker to execute arbitrary code over a network. This vulnerability is classified as CRITICAL with a CVSS score of 9.8. Systems connected to public networks are at a higher risk, as the vulnerability can be ...
CVE-2026-85795
A Use after free vulnerability exists in the Windows Text Services Framework . This flaw allows an authorized attacker to achieve local privilege elevation . No specific technical root cause, affected versions, or exploit links are provided in the documentation; however, an official fix is noted ...
CVE-2026-70093
A heap-based buffer overflow exists in the Windows Rich Text Edit Control . This vulnerability allows an authorized attacker to achieve local privilege elevation . No specific exploit information or workaround details are provided in the documents.
CVE-2026-70096
A heap-based buffer overflow exists in the Windows Rich Text Edit Control , which could allow an unauthorized attacker to achieve Remote Code Execution (RCE) over a network. This vulnerability is rated with a CRITICAL CVSS score of 9.8 . Microsoft has released official updates to address this iss...
CVE-2026-110239 Rapyd Admin before 9.20.0 Stored XSS via rich-text Component
Rapyd Admin before 9.20.0 contains a stored cross-site scripting vulnerability in the x-rpd::rich-text Blade component that outputs bound model values as raw HTML without sanitisation. Authenticated users can set the bound property through the Livewire client API to store JavaScript that executes...
CVE-2026-110239 Rapyd Admin before 9.20.0 Stored XSS via rich-text Component
Rapyd Admin before 9.20.0 contains a stored cross-site scripting vulnerability in the x-rpd::rich-text Blade component that outputs bound model values as raw HTML without sanitisation. Authenticated users can set the bound property through the Livewire client API to store JavaScript that executes...
CVE-2026-110239
The Rapyd Admin software versions prior to 9.20.0 is vulnerable to a stored cross-site scripting (XSS) flaw within the x-rpd::rich-text Blade component. The root cause is the component's failure to sanitize bound model values, which are instead output as raw HTML. An authenticated user can exploi...
