35868 matches found
CVE-2026-77484
Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network...
CVE-2026-72956
Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network...
CVE-2026-69900
Untrusted pointer dereference in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-69874
Untrusted pointer dereference in Windows ALPC allows an authorized attacker to elevate privileges locally...
CVE-2026-69785
Untrusted search path in Windows Smart Card allows an authorized attacker to elevate privileges locally...
CVE-2026-69717
Untrusted pointer dereference in Windows Group Policy allows an authorized attacker to elevate privileges over a network...
CVE-2026-69569
Untrusted pointer dereference in Windows Print Spooler Components allows an authorized attacker to deny service over a network...
CVE-2026-69501
Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...
CVE-2026-69475
Untrusted pointer dereference in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...
CVE-2026-69328
Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally...
CVE-2026-67378
Untrusted pointer dereference in SQL Server allows an authorized attacker to execute code over a network...
CVE-2026-47297
Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network...
EUVD-2026-64019
Infracost: Terraform Cloud and registry token disclosure via unvalidated hostname...
CVE-2021-35042
CVE-2021-35042 SQL injection via QuerySet.orderby untrusted input Setup: Start the instances using: docker-compose up Now open the following URL to load sample data: http://localhost:8000/vulapp/setup Then go to the vulnerable page at: http://localhost:8000/vulapp/ Exploit the parameter at:...
CVE-2024-24926
CVE-2024-24926 Vulnerabilidad CVE-2024-24926 afecta al tema Brooklyn de WordPress Description: La vulnerabilidad CVE-2024-24926 afecta al tema Brooklyn de WordPress versiones hasta 4.9.7.6 y está relacionada con la deserialización de datos no confiables CWE-502. Esto permite que un atacante envíe...
EUVD-2026-73921
Untrusted pointer dereference in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...
CVE-2026-83498
CVE-2026-83498 affects the Windows Virtualization-Based Security (VBS) Enclave and is caused by an untrusted pointer dereference , allowing an authorized local attacker with low privileges to escalate privileges without user interaction. The vulnerability carries a CVSS 3.1 score of 7.8 (HIGH) wi...
CVE-2026-83939
Windows Secure Kernel Mode is affected by an untrusted pointer dereference vulnerability that allows an authorized attacker to perform a local privilege escalation . The CVSS 3.1 score is 8.2 (HIGH) , with a changed scope and high impact to confidentiality, integrity, and availability. The attack...
EUVD-2026-73885
Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...
CVE-2026-81385
Microsoft Office Publisher is affected by a deserialization of untrusted data vulnerability that allows an unauthorized, remote attacker to achieve remote code execution over a network with low complexity and no required privileges, though user interaction is required. The CVSS 3.1 score is 8.8 (...