CVE-2026-77484

Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-72956

Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network...

CVE-2026-69900

Untrusted pointer dereference in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-69874

Untrusted pointer dereference in Windows ALPC allows an authorized attacker to elevate privileges locally...

CVE-2026-69785

Untrusted search path in Windows Smart Card allows an authorized attacker to elevate privileges locally...

CVE-2026-69717

Untrusted pointer dereference in Windows Group Policy allows an authorized attacker to elevate privileges over a network...

CVE-2026-69569

Untrusted pointer dereference in Windows Print Spooler Components allows an authorized attacker to deny service over a network...

CVE-2026-69501

Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...

CVE-2026-69475

Untrusted pointer dereference in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...

CVE-2026-69328

Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally...

CVE-2026-67378

Untrusted pointer dereference in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-47297

Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network...

EUVD-2026-64019

Infracost: Terraform Cloud and registry token disclosure via unvalidated hostname...

CVE-2021-35042

CVE-2021-35042 SQL injection via QuerySet.orderby untrusted input Setup: Start the instances using: docker-compose up Now open the following URL to load sample data: http://localhost:8000/vulapp/setup Then go to the vulnerable page at: http://localhost:8000/vulapp/ Exploit the parameter at:...

CVE-2024-24926

CVE-2024-24926 Vulnerabilidad CVE-2024-24926 afecta al tema Brooklyn de WordPress Description: La vulnerabilidad CVE-2024-24926 afecta al tema Brooklyn de WordPress versiones hasta 4.9.7.6 y está relacionada con la deserialización de datos no confiables CWE-502. Esto permite que un atacante envíe...

EUVD-2026-73921

Untrusted pointer dereference in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

CVE-2026-83498

CVE-2026-83498 affects the Windows Virtualization-Based Security (VBS) Enclave and is caused by an untrusted pointer dereference , allowing an authorized local attacker with low privileges to escalate privileges without user interaction. The vulnerability carries a CVSS 3.1 score of 7.8 (HIGH) wi...

CVE-2026-83939

Windows Secure Kernel Mode is affected by an untrusted pointer dereference vulnerability that allows an authorized attacker to perform a local privilege escalation . The CVSS 3.1 score is 8.2 (HIGH) , with a changed scope and high impact to confidentiality, integrity, and availability. The attack...

EUVD-2026-73885

Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...

CVE-2026-81385

Microsoft Office Publisher is affected by a deserialization of untrusted data vulnerability that allows an unauthorized, remote attacker to achieve remote code execution over a network with low complexity and no required privileges, though user interaction is required. The CVSS 3.1 score is 8.8 (...