32226 matches found
Microsoft Office Excel Remote Code Execution Vulnerability
Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...
Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
.NET Framework Security Feature Bypass Vulnerability
Improper certificate validation in .NET Framework allows an unauthorized attacker to bypass a security feature over a network...
.NET Security Feature Bypass Vulnerability
Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network...
Azure Key Vault Information Disclosure Vulnerability
Origin validation error in Azure Key Vault allows an unauthorized attacker to disclose information over a network...
Visual Studio Code Information Disclosure Vulnerability
Improper limitation of a pathname to a restricted directory 'path traversal' in Visual Studio Code allows an authorized attacker to disclose information over a network...
Windows iSCSI Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows iSCSI allows an authorized attacker to disclose information locally...
Windows NTFS Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally...
Windows Failover Cluster Denial of Service Vulnerability
Integer underflow wrap or wraparound in Windows Failover Cluster allows an unauthorized attacker to deny service over a network...
Microsoft SQL Server Elevation of Privilege Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally...
Windows Netlogon Denial of Service Vulnerability
Use after free in Windows Netlogon allows an authorized attacker to deny service over a network...
Windows OLE DB Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to elevate privileges over a network...
ASP.NET Core Security Feature Bypass Vulnerability
Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network...
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Remote Code Execution in Windows Routing and Remote Access Service RRAS allows attacker to gain an unauthorized access to victim's machine...
ASP.NET Core Denial of Service Vulnerability
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...
Desktop Window Manager Elevation of Privilege Vulnerability
Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally...
Microsoft Office Excel Remote Code Execution Vulnerability
Integer underflow wrap or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...
Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability
Use after free in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally...
ASP.NET Core Denial of Service Vulnerability
Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network...
ASP.NET Core Elevation of Privilege Vulnerability
Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network...
Windows EAPHost Service Elevation of Privilege Vulnerability
Out-of-bounds write in Windows EAPHost Service allows an authorized attacker to elevate privileges locally...
.NET and Visual Studio Remote Code Execution Vulnerability
Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network...
Windows iSCSI Remote Code Execution Vulnerability
Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network...
Windows Hyper-V Information Disclosure Vulnerability
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information over a network...
Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
Windows Audio Service Information Disclosure Vulnerability
Out-of-bounds read in Windows Audio Service allows an authorized attacker to disclose information locally...
Windows Management Instrumentation Information Disclosure Vulnerability
Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally...
Web Account Manager Elevation of Privilege Vulnerability
Use after free in Windows Web Account Manager allows an authorized attacker to elevate privileges locally...
Libstoragemgmt: libstoragemgmt: denial of service via stack buffer overflow in scsi vpd page parsing
...
Privasys rustls fork: RA-TLS challenge mode did not bind attestation evidence to the TLS session
...
Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if
...
Gcc: libstdc++ integer overflow in `new` operator
...
Privasys Go fork: RA-TLS challenge mode did not bind attestation evidence to the TLS session
...
Environment-modules: command injection in environment-modules bash completion via malicious module names containing shell metacharacters
...
Cups: null pointer dereference via embedded job ticket comments allows remote denial of service
...
Busybox: busybox: tar extraction-root escape via deferred symlink/hardlink creation bypasses cve-2026-26158 fix
...
ZDR decoding in libnfs through 6.0.2 before 7613236 has an out-of-bounds write related to lib/libnfs-zdr.c with libnfs_zdr_bytes(), libnfs_zdr_string(), and libnfs_zdr_array(). The caller-supplied maxsize value is not honored.
...
GNU Emacs before 31.2 (and TRAMP through 2.8.2) allows OS command injection via a filename because tramp-user-regexp has an incomplete list of disallowed inputs. NOTE: this issue exists because of an incomplete fix for CVE-2026-79992.
...
wifi: mac80211: don't allow injecting frames wider than the chanctx
...
Go-getter vulnerable to a path traversal in S3/GCS directory download handling
...
Blind VXLAN injection into encrypted overlay networks from cluster peer
...
Panic parsing crafted input in x/text/secure/precis in golang.org/x/text
...
Application denial of service via integer overflow in BSON value-length validation in MongoDB Go Driver
...
Application denial of service via missing BSON array length validation in MongoDB Go Driver
...
Reject malformed ECH outer extension references in crypto/tls
...
Reset context tracking on consecutive template expressions in html/template
...
Checksum bypass for golang.org/fips140 in cmd/go
...
Memory limit bypass when parsing MIME headers in net/textproto, mime/multipart
...