412514 matches found
CVE-2026-96230: Improper Neutralization of Input During Web Page Generation
Improper neutralization of input during web page generation 'cross-site scripting' in ASP.NET Core allows an unauthorized attacker to execute code over a network...
CVE-2026-96232: Out-of-bounds Read
Out-of-bounds read in .NET allows an unauthorized attacker to disclose information over a network...
CVE-2026-96235: Out-of-bounds Write
Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network...
CVE-2026-96237: Inclusion of Functionality from Untrusted Control Sphere
Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network...
CVE-2026-96238: Origin Validation Error
Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-96958: Inefficient Algorithmic Complexity
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network...
CVE-2026-96959: Allocation of Resources Without Limits or Throttling
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network...
CVE-2026-96960: Asymmetric Resource Consumption (Amplification)
Asymmetric resource consumption amplification in .NET allows an unauthorized attacker to deny service over a network...
Microsoft .NET Framework: CVE-2026-96960: .NET Denial of Service Vulnerability
Asymmetric resource consumption amplification in .NET allows an unauthorized attacker to deny service over a network...
Microsoft .NET: CVE-2026-105016: Microsoft QUIC Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network...
Microsoft .NET Framework: CVE-2026-84008: .NET Denial of Service Vulnerability
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network...
Microsoft .NET: CVE-2026-96229: .NET Information Disclosure Vulnerability
Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information over a network...
Microsoft Visual Studio: CVE-2026-96230: ASP.NET Core Remote Code Execution Vulnerability
Improper neutralization of input during web page generation 'cross-site scripting' in ASP.NET Core allows an unauthorized attacker to execute code over a network...
Microsoft .NET: CVE-2026-96232: .NET Information Disclosure Vulnerability
Out-of-bounds read in .NET allows an unauthorized attacker to disclose information over a network...
Microsoft .NET: CVE-2026-96235: .NET Remote Code Execution Vulnerability
Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network...
Microsoft .NET: CVE-2026-96237: .NET Remote Code Execution Vulnerability
Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network...
Microsoft .NET: CVE-2026-96238: .NET Security Feature Bypass Vulnerability
Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network...
Microsoft .NET Framework: CVE-2026-96959: .NET Denial of Service Vulnerability
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network...
Microsoft .NET Framework: CVE-2026-96958: .NET Denial of Service Vulnerability
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network...
CVE-2026-109948: Exposure of Sensitive Information to an Unauthorized Actor
FreeRDP from 3.0.0 before 3.32.0 contains an uninitialized memory disclosure vulnerability in smartcardTransmitCall that allows malicious RDP servers to read client memory. Servers can send SCardTransmit requests with an invalid card handle and nonzero receive length, causing...
CVE-2026-104126: Improper Control of Generation of Code
JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to 4.10.17-lts, JumpServer's Ansible-based automation rendering can evaluate attacker-controlled template expressions from users who have permission to create or execute affected automation...
CVE-2026-105016: Heap-based Buffer Overflow
Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-83726: Windows DWM Core Library Elevation of Privilege Vulnerability
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
CVE-2026-89199: Authorization Bypass Through User-Controlled Key
A vulnerability has been identified in RUGGEDCOM CROSSBOW All versions V6.0. Affected devices do not properly restrict access to sensitive configuration items via specific database queries. This could allow an authenticated attacker to retrieve administrative credentials for various internal...
CVE-2026-70076: Use After Free
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...
CVE-2026-69963: Heap-based Buffer Overflow
Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69880: Access of Resource Using Incompatible Type
Access of resource using incompatible type 'type confusion' in Desktop Window Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-69650: Improper Verification of Cryptographic Signature
Improper verification of cryptographic signature in Windows Key Distribution Center allows an authorized attacker to elevate privileges locally...
CVE-2026-70566: NULL Pointer Dereference
Null pointer dereference in Windows Schannel allows an authorized attacker to elevate privileges locally...
CVE-2026-69945: Missing Authorization
Missing authorization in Windows AppX Deployment Extensions allows an authorized attacker to elevate privileges locally...
CVE-2026-84017: NULL Pointer Dereference
Null pointer dereference in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to deny service over a network...
CVE-2026-70026: Use After Free
Use after free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...
CVE-2026-69882: Untrusted Search Path
Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally...
CVE-2026-69718: Improper Neutralization of Special Elements used in a Command
Improper neutralization of special elements used in a command 'command injection' in Windows Update allows an authorized attacker to elevate privileges locally...
CVE-2026-69743: Use After Free
Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...
Microsoft Office: CVE-2026-97016: Microsoft Office Outlook Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...
CVE-2026-69596: Use After Free
Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69736: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Credential Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-69733: Untrusted Search Path
Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-85854: Windows DWM Core Library Elevation of Privilege Vulnerability
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
CVE-2026-85832: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Background Intelligent Transfer Service BITS allows an authorized attacker to elevate privileges locally...
CVE-2026-105458: Reliance on Untrusted Inputs in a Security Decision
GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user holding a specific granular permission to obtain a GitLab Duo Agent Platform token that...
CVE-2026-55601: Improper Neutralization of Special Elements used in an OS Command
MultiTail is a utility for monitoring multiple log files in one terminal. In version 7.1.5 and earlier, the -ex and -eX execute-on-match feature appended attacker-controlled matched input to a configured command inside double quotes, then checkfilterexec in mt.c passed the constructed command...
CVE-2026-69922: Out-of-bounds Read
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network...
CVE-2026-85376: Weak Authentication
Weak authentication in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...
CVE-2026-70229: Incorrect Authorization
Incorrect authorization in Active Directory Domain Services allows an unauthorized attacker to execute code over a network...
CVE-2026-69639: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network...
CVE-2026-96302: Use After Free
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-85115: Generation of Error Message Containing Sensitive Information
A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API All versions V3.3.62. Affected applications do not properly redact PLC restore passwords from HTTP error exception messages. This could allow an attacker with access to logs or other diagnostic output to obtai...
CVE-2026-70079: Improper Enforcement of Behavioral Workflow
Improper enforcement of behavioral workflow in Windows DNS allows an unauthorized attacker to deny service over a network...