5746 matches found
CVE-2026-69560
CVE-2026-69560 is a use-after-free vulnerability in the Windows Work Folder Service that allows an authorized local attacker to elevate privileges . The CVSS 3.1 score is 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting a high attack complexity and low privileges requir...
EUVD-2026-73324
Heap-based buffer overflow in Windows Work Folders allows an authorized attacker to elevate privileges locally...
CVE-2026-80075
CVE-2026-80075 is a heap-based buffer overflow in Windows Work Folders that allows an authorized attacker to elevate privileges locally . The Microsoft-assigned CVSS 3.1 score is 7.8 (HIGH) , with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating local attack vector, low complexity, low...
CVE-2026-71336
Windows Work Folder Service is vulnerable to an integer overflow or wraparound flaw that allows an authorized attacker to achieve remote code execution over the network. The CVSS 3.1 base score is 8.8 (HIGH) with vector AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating network-attackable exploitati...
EUVD-2026-73089
Integer overflow or wraparound in Windows Work Folder Service allows an authorized attacker to execute code over a network...
Windows Work Folders Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Work Folders allows an authorized attacker to elevate privileges locally...
Windows Work Folder Service Elevation of Privilege Vulnerability
Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally...
Windows Work Folder Service Remote Code Execution Vulnerability
Integer overflow or wraparound in Windows Work Folder Service allows an authorized attacker to execute code over a network...
CVE-2026-80075: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Work Folders allows an authorized attacker to elevate privileges locally...
PT-2026-87828
Name of the Vulnerable Software and Affected Versions Windows Work Folder Service affected versions not specified Description An integer overflow or wraparound in the Windows Work Folder Service allows an authorized attacker to execute arbitrary code over a network, potentially affecting the...
PT-2026-87566
Name of the Vulnerable Software and Affected Versions Windows Work Folder Service affected versions not specified Description A use-after-free condition in the Windows Work Folder Service allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that...
CVE-2026-69560: Use After Free
Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally...
PT-2026-88034
šØ CVE-2026-80075 Heap-based buffer overflow in Windows Work Folders allows an authorized attacker to elevate privileges locally. š@cveNotify...
CVE-2026-71336: Integer Overflow or Wraparound
Integer overflow or wraparound in Windows Work Folder Service allows an authorized attacker to execute code over a network...
CVE-2026-86430 league/commonmark before 2.9.1 Denial of Service via parsing
league/commonmark versions before 2.9.1 contain multiple denial of service vulnerabilities in fenced code block detection, reference link label lookup, and emphasis delimiter processing that perform super-linear work on crafted input. Attackers can submit specially crafted Markdown with long...
CVE-2026-86430: Inefficient Algorithmic Complexity
league/commonmark versions before 2.9.1 contain multiple denial of service vulnerabilities in fenced code block detection, reference link label lookup, and emphasis delimiter processing that perform super-linear work on crafted input. Attackers can submit specially crafted Markdown with long...
Exploit for Server-Side Request Forgery in Sonicwall Sma8200V
SonicWall SMA 1000 ā CVE-2026-83548 / CVE-2026-83549 Exposure...
CVE-2026-80787
In the Linux kernel, the following vulnerability has been resolved: nvmet: pci-epf: fix use-after-free in nvmetpciepfexeciodwork nvmetpciepfexeciodwork submits an I/O command with req-execute and then waits for the command to complete and transfers the data back to the host. This wait is not need...
CVE-2026-80848 xfrm: espintcp: fix UAF during close
In the Linux kernel, the following vulnerability has been resolved: xfrm: espintcp: fix UAF during close ZDI reported and analyzed a race condition during close for espintcp sockets: espintcpclose frees emsg-skb via kfreeskb without holding any socket lock. Concurrently, the xfrmtransreinject wor...
CVE-2026-80841
CVE-2026-80841 is a use-after-free in the Linux kernel's AF_PACKET TX_RING subsystem. AF_PACKET TX_RING skbs hold a raw pointer to their ring frame; while page references preserve page-backed ring blocks after the ring vector is freed, they do not preserve a vmalloc mapping. This means a late skb...