218915 matches found
Rockwell Studio 5000 Logix Designer Unquoted Search Path (SD1783)
The version of Rockwell Studio 5000 Logix Designer installed on the remote Windows host is affected by a code execution vulnerability. An unquoted search path in the External Tools configuration means that executable paths containing spaces are not properly quoted, so the operating system may...
Rockwell Studio 5000 Logix Designer Incorrect Authorization RCE (SD1783)
The version of Rockwell Studio 5000 Logix Designer installed on the remote Windows host is affected by a remote code execution vulnerability. Due to incorrect authorization on a configuration file, any authenticated user can modify the paths of external tools configured within the application. An...
The vulnerability of the Microsoft Message Queuing (MSMQ) queue service on Windows operating systems allows a perpetrator to execute arbitrary code.
The vulnerability of the Microsoft Message Queuing MSMQ service on Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...
The vulnerability of the DirectX graphics kernel driver (dxgkrnl.sys) on Windows operating systems, which allows attackers to exploit their privileges
The vulnerability of the DirectX graphics kernel driver dxgkrnl.sys on Windows operating systems is related to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the client for remote desktop clients on Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the Remote Desktop Client for Windows operating systems regarding client remote desktops is related to a numerical overflow vulnerability. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
7-Zip < 26.01 NTFS Heap Buffer Overflow (GHSL-2026-140)
The version of 7-Zip installed on the remote Windows host is prior to 26.01. It is, therefore, affected by a vulnerability: - A heap buffer overflow vulnerability exists in the NTFS archive handler. The CInStream::GetCuSize function computes the compression-unit buffer size using a 32-bit shift...
CVE-2026-40106
Wazuh is a free and open source platform used for threat prevention, detection, and response. Versions 4.6.0 and above prior to 4.14.5 contain a heap-based buffer overflow vulnerability in the syscheck component of the Wazuh agent for Windows. When expanding registry paths containing wildcards or...
CVE-2026-40106 Wazuh: Heap-based Buffer Overflow in syscheck Registry Wildcard Expansion (LPE / DoS)
Wazuh is a free and open source platform used for threat prevention, detection, and response. Versions 4.6.0 and above prior to 4.14.5 contain a heap-based buffer overflow vulnerability in the syscheck component of the Wazuh agent for Windows. When expanding registry paths containing wildcards or...
CVE-2026-40106 Wazuh: Heap-based Buffer Overflow in syscheck Registry Wildcard Expansion (LPE / DoS)
Wazuh is a free and open source platform used for threat prevention, detection, and response. Versions 4.6.0 and above prior to 4.14.5 contain a heap-based buffer overflow vulnerability in the syscheck component of the Wazuh agent for Windows. When expanding registry paths containing wildcards or...
CVE-2026-40106
CVE-2026-40106 describes a heap-based buffer overflow in the Windows version of Wazuh (syscheck component) affecting versions 4.6.0–4.14.4, fixed in 4.14.5. When expanding registry paths with wildcards, the agent may allocate a 256-byte heap buffer (OS_SIZE_256) and can be driven to an out-of-bou...
CVE-2026-58643
Improper neutralization of input during web page generation 'cross-site scripting' in Windows Admin Center allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-59117
Integer overflow or wraparound in Windows Terminal allows an unauthorized attacker to execute code over a network...
CVE-2026-58598
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Backup Engine allows an authorized attacker to elevate privileges locally...
CVE-2026-53411
A time-of-check to time-of-use TOCTOU race condition in the installation and uninstallation process of certain Zoom Clients for Windows could allow an authenticated local user to escalate privileges...
CVE-2026-53412
Improper Input Validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an unauthenticated user to conduct an account takeover via network access...
CVE-2026-58598 Windows Backup Service Elevation of Privilege Vulnerability
...
CVE-2026-58598 Windows Backup Service Elevation of Privilege Vulnerability
...
CVE-2026-58598
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Backup Engine allows an authorized attacker to elevate privileges locally...