6689 matches found
PT-2026-67279
Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.29.0 Description A client-side heap use-after-free occurs in the async update message proxy for WINDOW ICON ORDER when AsyncUpdate is enabled. In the update message WindowIcon function, a shallow CopyMemory overwrit...
PT-2026-60237
Cherry Studio versions 1.2.2 through 1.9.12, fixed in commit 1518530, contain a remote code execution vulnerability in SearchService that allows remote attackers to execute arbitrary code by delivering malicious JavaScript through controlled search provider content loaded into an Electron...
PT-2026-60149
Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-26 ImageMagick versions prior to 6.9.13-51 Description A heap-based buffer over-write occurs during an X11 import when processing a crafted window title. This issue leads to heap memory corruption, which can...
UBUNTU-CVE-2026-15713
A vulnerability was found in libsoup's HTTP/2 protocol implementation. The library fails to correctly release memory context blocks under specific stream termination conditions, such as when an HTTP/2 connection encounters window exhaustion or explicit stream resets. A remote, unauthenticated...
CVE-2026-15713
A vulnerability was found in libsoup's HTTP/2 protocol implementation. The library fails to correctly release memory context blocks under specific stream termination conditions, such as when an HTTP/2 connection encounters window exhaustion or explicit stream resets. A remote, unauthenticated...
CVE-2026-15713
A vulnerability was found in libsoup's HTTP/2 protocol implementation. The library fails to correctly release memory context blocks under specific stream termination conditions, such as when an HTTP/2 connection encounters window exhaustion or explicit stream resets. A remote, unauthenticated...
CVE-2026-15713
A vulnerability was found in libsoup's HTTP/2 protocol implementation. The library fails to correctly release memory context blocks under specific stream termination conditions, such as when an HTTP/2 connection encounters window exhaustion or explicit stream resets. A remote, unauthenticated...
EUVD-2026-43939
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally...
CVE-2026-58634
Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-58633
Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-50692
Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-58634 Desktop Window Manager Elevation of Privilege Vulnerability
...
CVE-2026-58634
CVE-2026-58634 is a Windows vulnerability in the Desktop Window Manager (DWM) described as a use-after-free that enables an authorized attacker to achieve local Privilege Escalation . The CVSS 3.1 score is high (7.8) with a LOCAL attack vector, LOW attack complexity, and no user interaction requi...
CVE-2026-58633
CVE-2026-58633 is a Desktop Window Manager (DWM) use-after-free vulnerability that enables a local attacker with low privileges to elevate privileges. Public sources collectively identify: impact as local privilege escalation; affected component is DWM; root cause described as use-after-free. Mic...
EUVD-2026-44313
Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-58634 Desktop Window Manager Elevation of Privilege Vulnerability
...
EUVD-2026-44312
Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-58633 Desktop Window Manager Elevation of Privilege Vulnerability
...