414110 matches found
Microsoft Windows: CVE-2026-96950: Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...
CVE-2026-70121: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-85797: Windows GDI Information Disclosure Vulnerability
Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network...
CVE-2026-70017: Access of Resource Using Incompatible Type
Access of resource using incompatible type 'type confusion' in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally...
CVE-2026-69675: Out-of-bounds Read
Out-of-bounds read in Windows Network File System allows an authorized attacker to disclose information locally...
CVE-2026-70086: Use After Free
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
CVE-2026-97739: Integer Underflow (Wrap or Wraparound)
Integer underflow wrap or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...
CVE-2026-96234: Origin Validation Error
Origin validation error in .NET allows an unauthorized attacker to disclose information over a network...
Microsoft .NET: CVE-2026-96234: .NET Information Disclosure Vulnerability
Origin validation error in .NET allows an unauthorized attacker to disclose information over a network...
Microsoft Visual Studio: CVE-2026-70162: .NET Denial of Service Vulnerability
A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET web application. A remote unauthenticated attacker could exploit this...
Microsoft Windows: CVE-2026-96953: Windows Universal Disk Format File System Driver (UDFS) Remote Code Execution Vulnerability
Null pointer dereference in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to execute code locally...
Microsoft Windows: CVE-2026-87708: Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-100135: Improper Input Validation
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user...
CVE-2026-85859: NULL Pointer Dereference
Null pointer dereference in Windows Message Queuing Queue Manager allows an authorized attacker to deny service over a network...
Microsoft Windows: CVE-2026-69882: Windows Update Elevation of Privilege Vulnerability
Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-70285: Windows Win32k Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-97830: Windows Internet Information Services Denial of Service Vulnerability
Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network...
Microsoft .NET: CVE-2026-96229: .NET Information Disclosure Vulnerability
Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information over a network...
CVE-2026-70005: Weak Authentication
Weak authentication in Active Directory Federation Services AD FS allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-109827: Out-of-bounds Write
A vulnerability has been found in GPAC up to 26.07.0. This vulnerability affects the function gfm2tsdecodeait of the file src/mediatools/ait.c of the component AIT Parser. Such manipulation leads to out-of-bounds write. The attack may be launched remotely. The exploit has been disclosed to the...
CVE-2026-85843: Use of Uninitialized Resource
Use of uninitialized resource in Windows Background Intelligent Transfer Service BITS allows an authorized attacker to elevate privileges locally...
CVE-2026-109898: Missing Authorization
Missing Authorization vulnerability in Arraytics WP Event Solution wp-event-solution allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Event Solution: from n/a through 4.1.25...
CVE-2026-85854: Use After Free
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
CVE-2026-85857: Insertion of Sensitive Information into Log File
Insertion of sensitive information into log file in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally...
CVE-2026-87695: Inclusion of Functionality from Untrusted Control Sphere
Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally...
CVE-2026-70273: Use After Free
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...
CVE-2026-69931: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Storage allows an authorized attacker to elevate privileges locally...
CVE-2026-88179: Out-of-bounds Read
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
CVE-2026-83721: Use After Free
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...
CVE-2026-109155: Improper Limitation of a Pathname to a Restricted Directory
A flaw has been found in DeepPavlov up to 1.7.0. This impacts the function untar of the component Model Download Handler. This manipulation causes path traversal. The attack is possible to be carried out remotely. The project was informed of the problem early through an issue report but has not...
Microsoft Windows: CVE-2026-96316: Windows Routing and Remote Access Service (RRAS) Tampering Vulnerability
Improper access control in Windows Routing and Remote Access Service RRAS allows an authorized attacker to perform tampering locally...
CVE-2026-96926: Missing Authorization
Missing authorization in DNS Server allows an authorized attacker to perform tampering locally...
CVE-2026-88072: Improper Link Resolution Before File Access
Improper access control in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally...
CVE-2026-105010: Use After Free
Use after free in Microsoft Windows Search Component allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-96925: Integer Underflow (Wrap or Wraparound)
Integer underflow wrap or wraparound in Windows NTFS allows an authorized attacker to disclose information locally...
CVE-2026-96943: Integer Overflow or Wraparound
Integer overflow or wraparound in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network...
CVE-2026-96953: NULL Pointer Dereference
Null pointer dereference in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to execute code locally...
CVE-2026-107682: Improper Neutralization of Input During Web Page Generation
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in...
CVE-2026-96096: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network...
CVE-2026-97009: Heap-based Buffer Overflow
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
Microsoft Windows: CVE-2026-83846: Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability
Use after free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...
CVE-2026-97016: Heap-based Buffer Overflow
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...
CVE-2026-97826: Out-of-bounds Read
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
CVE-2026-84013: Use After Free
Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally...
CVE-2026-85376: Weak Authentication
Weak authentication in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...
CVE-2026-96949: Concurrent Execution using Shared Resource with Improper Synchronization
Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...
CVE-2026-104085: Improper Neutralization of Special Elements used in an OS Command
odt2spip plugin for SPIP before 4.4.0 contains an OS command injection vulnerability that allows authenticated authors to execute arbitrary commands by uploading a document with a maliciously crafted filename through the document import form. Attackers can embed shell metacharacters such as $id i...
Microsoft Windows: CVE-2026-69970: Kernel Streaming Service Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-69639: Windows libarchive Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-85324: Active Directory Federation Services (AD FS) Denial of Service Vulnerability
Memory allocation with excessive size value in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...