28400 matches found
Rsyslog: a configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd
...
Kubevirt: virt-handler-rhel9: kubevirt: virt-handler migration proxy follows symlinks allowing container escape to host
...
ntop nDPI before 6.0 Heap Buffer Overflow via ndpi_json_string_escape
...
undici vulnerable to Denial of Service via orphaned RetryHandler response body
...
undici vulnerable to downstream response splitting via retry interceptor
...
Libtpms: libtpms: heap out-of-bounds read in tpm2 state unmarshalling via unchecked block_skip_read() blocksize
...
Libsoup: libsoup: heap use-after-free in libsoup http/2 client on_data_read() via goaway during body upload
...
Libsoup: libsoup: http/2 client crash in on_data_source_read_callback when settings initial_window_size shrinks during deferred body read
...
Gfs2-utils: gfs2-utils: stack overflow via alloca(i_height) in metadata walk
...
Gfs2-utils: gfs2-utils: stack overflow via alloca(1<<di_depth) in hash table traversal
...
Gfs2-utils: gfs2-utils: heap out-of-bounds read via unchecked ea_num_ptrs in extended attribute processing
...
Gfs2-utils: gfs2-utils: stack out-of-bounds write via unchecked height in savemeta
...
Gfs2-utils: gfs2-utils: stack out-of-bounds write via unchecked di_height in gfs2_edit
...
Volume Manager Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Volume Manager Driver allows an authorized attacker to elevate privileges over a network...
Windows Active Directory Domain Services Remote Code Execution Vulnerability
Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network...
Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability
Use after free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...
Windows Management Instrumentation Elevation of Privilege Vulnerability
Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges over a network...
Windows BitLocker Elevation of Privilege Vulnerability
Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges over a network...
Windows DHCP Server Elevation of Privilege Vulnerability
Missing authentication for critical function in Windows DHCP Server allows an authorized attacker to elevate privileges over a network...
Windows Registry Elevation of Privilege Vulnerability
Double free in Windows Registry allows an authorized attacker to elevate privileges over a network...
Windows Error Reporting Elevation of Privilege Vulnerability
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
Windows Management Instrumentation Information Disclosure Vulnerability
Use of uninitialized resource in Windows Management Instrumentation allows an authorized attacker to disclose information over a network...
Remote Desktop Gateway Service Elevation of Privilege Vulnerability
Double free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges locally...
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...
Windows NTFS Remote Code Execution Vulnerability
Buffer over-read in Windows NTFS allows an authorized attacker to execute code locally...
Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...
Chromium: CVE-2026-84359 Information leak in Skia
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-84334 Incorrect authorization in Chromoting
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Remote Desktop Services Remote Code Execution Vulnerability
Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network...
Windows Enterprise App Management Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a network...
Windows Event Logging Service Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Event Logging Service allows an unauthorized attacker to execute code over a network...
Windows Error Reporting Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
Windows Storage Management Provider Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally...
Windows Spaceport.sys Information Disclosure Vulnerability
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally...
Microsoft Standard XPS Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally...
Microsoft Standard XPS Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally...
Windows Device Association Service Elevation of Privilege Vulnerability
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges over a network...
Microsoft SQL Server Elevation of Privilege Vulnerability
Improper link resolution before file access 'link following' in SQL Server allows an authorized attacker to elevate privileges over a network...
Windows Kernel Elevation of Privilege Vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...
Azure Arc SQL Server Extension Elevation of Privilege Vulnerability
Permissive cross-domain policy with untrusted domains in Azure Arc allows an unauthorized attacker to elevate privileges over a network...
Power Automate Elevation of Privilege Vulnerability
Server-side request forgery ssrf in Power Automate allows an authorized attacker to elevate privileges over a network...
Chromium: CVE-2026-84347 Use after free in WebRTC
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-84331 Incorrect authorization in Actor
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-84324 Use after free in Proxy
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Fabric Elevation of Privilege Vulnerability
Missing authorization in Microsoft Fabric allows an authorized attacker to elevate privileges over a network...
Microsoft SQL Server Elevation of Privilege Vulnerability
Improper privilege management in SQL Server allows an authorized attacker to elevate privileges over a network...
Windows iSCSI Denial of Service Vulnerability
Out-of-bounds read in Windows iSCSI allows an unauthorized attacker to deny service over a network...
Microsoft SQL Server Elevation of Privilege Vulnerability
Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network...
Windows Win32k Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network...
Windows Program Compatibility Assistant Service Information Disclosure Vulnerability
Insertion of sensitive information into log file in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information locally...