35868 matches found
CVE-2026-69874
Untrusted pointer dereference in Windows ALPC allows an authorized attacker to elevate privileges locally...
CVE-2026-69785
Untrusted search path in Windows Smart Card allows an authorized attacker to elevate privileges locally...
CVE-2026-69717
Untrusted pointer dereference in Windows Group Policy allows an authorized attacker to elevate privileges over a network...
CVE-2026-69569
Untrusted pointer dereference in Windows Print Spooler Components allows an authorized attacker to deny service over a network...
CVE-2026-69501
Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...
CVE-2026-69475
Untrusted pointer dereference in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...
CVE-2026-69328
Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally...
CVE-2026-67378
Untrusted pointer dereference in SQL Server allows an authorized attacker to execute code over a network...
CVE-2026-47297
Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network...
EUVD-2026-64019
Infracost: Terraform Cloud and registry token disclosure via unvalidated hostname...
CVE-2021-35042
CVE-2021-35042 SQL injection via QuerySet.orderby untrusted input Setup: Start the instances using: docker-compose up Now open the following URL to load sample data: http://localhost:8000/vulapp/setup Then go to the vulnerable page at: http://localhost:8000/vulapp/ Exploit the parameter at:...
CVE-2024-24926
CVE-2024-24926 CVE-2024-24926 Vulnerability affects the Brooklyn theme for WordPress Description: The CVE-2024-24926 vulnerability affects the Brooklyn theme for WordPress versions up to 4.9.7.6 and is related to deserialization of untrusted data CWE-502. This allows an attacker to send malicious...
EUVD-2026-73921
Untrusted pointer dereference in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...
CVE-2026-83498
CVE-2026-83498 affects the Windows Virtualization-Based Security (VBS) Enclave and is caused by an untrusted pointer dereference , allowing an authorized local attacker with low privileges to escalate privileges without user interaction. The vulnerability carries a CVSS 3.1 score of 7.8 (HIGH) wi...
CVE-2026-83939
Windows Secure Kernel Mode is affected by an untrusted pointer dereference vulnerability that allows an authorized attacker to perform a local privilege escalation . The CVSS 3.1 score is 8.2 (HIGH) , with a changed scope and high impact to confidentiality, integrity, and availability. The attack...
EUVD-2026-73885
Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...
CVE-2026-81385
Microsoft Office Publisher is affected by a deserialization of untrusted data vulnerability that allows an unauthorized, remote attacker to achieve remote code execution over a network with low complexity and no required privileges, though user interaction is required. The CVSS 3.1 score is 8.8 (...
EUVD-2026-73852
Deserialization of untrusted data in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network...
CVE-2026-78451
CVE-2026-78451 is an untrusted pointer dereference in the Microsoft Windows SCSI Class System File that enables an unauthorized attacker to escalate privileges via a physical attack vector (CVSS AV:P). The vulnerability carries a CVSS 3.1 base score of 6.8 (Medium) with high impact to confidentia...