414110 matches found
CVE-2026-88156: Stack-based Buffer Overflow
Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...
CVE-2026-108376: Improper Control of Generation of Code
dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.47.3 through 0.70.5, FieldRepresentation.getfielddefault inserts a schema-controlled referenced record name into the callable...
CVE-2026-108383: Improper Control of Generation of Code
dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 through 0.70.5, FieldRepresentation.getfielddefault renders a schema-controlled enum field default as an enum member reference...
Microsoft Windows: CVE-2026-85840: Windows Event Viewer Information Disclosure Vulnerability
Files or directories accessible to external parties in Windows Event Viewer allows an authorized attacker to disclose information over a network...
CVE-2026-85323: Weak Authentication
Weak authentication in Network Device Enrollment Service NDES allows an authorized attacker to perform spoofing over a network...
CVE-2026-83642: Access of Resource Using Incompatible Type
Access of resource using incompatible type 'type confusion' in DNS Server allows an unauthorized attacker to execute code over a network...
CVE-2026-109115: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This issue affects some unknown processing of the file User/forgot3.php of the component Password Reset. Performing a manipulation of the argument email/password results in sql...
Microsoft Windows: CVE-2026-70201: Windows DHCP Server Denial of Service Vulnerability
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service locally...
CVE-2026-102501: Improper Input Validation
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue does not require user...
CVE-2026-83832: Out-of-bounds Read
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally...
CVE-2026-88114: Untrusted Pointer Dereference
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-88096: Windows DCOM Server Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows DCOM Server allows an authorized attacker to elevate privileges locally...
CVE-2026-108128: Out-of-bounds Read
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
CVE-2026-75995: Improper Input Validation
ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. The vulnerable component is restricted to an...
CVE-2025-58772: Buffer Copy without Checking Size of Input
AMI APTIOV contains vulnerabilities in BIOS where users may cause “Classic Buffer Overflow” by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corruption, and arbitrary code execution, and also impact Confidentiality, Integrity, and Availability...
CVE-2026-88086: Out-of-bounds Read
Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over an adjacent network...
CVE-2026-88116: Untrusted Pointer Dereference
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network...
CVE-2026-88082: Heap-based Buffer Overflow
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally...
CVE-2026-96930: Out-of-bounds Read
Out-of-bounds read in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to disclose information locally...
CVE-2026-88136: Improper Resolution of Path Equivalence
Improper resolution of path equivalence in WebDAV allows an authorized attacker to execute code over a network...
CVE-2026-69918: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-96920: Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-72968: Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability
Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...
CVE-2026-72968: Use After Free
Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...
CVE-2026-72969: Use After Free
Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...
CVE-2026-72934: Use After Free
Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69596: Use After Free
Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69743: Use After Free
Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-88079: Windows MIDI Service Module Elevation of Privileges Vulnerability
Null pointer dereference in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-83773: Windows MIDI Service Module Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally...
Microsoft Windows: CVE-2026-70288: Win32k Information Disclosure Vulnerability
Time-of-check time-of-use toctou race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...
Microsoft Windows: CVE-2026-96938: Windows Distributed File System (DFS) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Distributed File System DFS allows an authorized attacker to elevate privileges locally...
CVE-2026-83759: Improper Control of Generation of Code
Improper control of generation of code 'code injection' in Windows Encrypting File System EFS allows an authorized attacker to execute code over a network...
CVE-2026-87700: Use After Free
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-83580: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Client-Side Caching CSC Service allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-70054: Windows NetBIOS Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows NetBIOS allows an authorized attacker to elevate privileges locally...
CVE-2026-88071: Double Free
Double free in Windows Hyper-V allows an authorized attacker to elevate privileges locally...
CVE-2026-70113: Integer Overflow or Wraparound
Integer overflow or wraparound in Windows Client for NFS allows an authorized attacker to elevate privileges locally...
CVE-2026-69926: Access of Resource Using Incompatible Type
Access of resource using incompatible type 'type confusion' in Desktop Window Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-70056: Use After Free
Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally...
CVE-2026-97768: Heap-based Buffer Overflow
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...
CVE-2026-69957: Integer Overflow or Wraparound
Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...
CVE-2026-97815: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network...
CVE-2026-70260: Exposure of Sensitive System Information to an Unauthorized Control Sphere
Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally...
CVE-2026-85361: Use After Free
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-89116: Improper Neutralization of Special Elements used in an OS Command
The affected code used childprocess.execSync with a shell string for generator installation and uninstallation. This allowed an attacker to execute arbitrary OS commands with the developer's privileges by manipulating the ApplicationWizard.installationLocation VS Code workspace configuration valu...
Microsoft Windows: CVE-2026-85795: Windows Text Services Framework Elevation of Privilege Vulnerability
Use after free in Windows Text Services Framework allows an authorized attacker to elevate privileges locally...
CVE-2026-108975: Unrestricted Upload of File with Dangerous Type
A security flaw has been discovered in SourceCodester Library Management System 1.0. This vulnerability affects the function moveuploadedfile of the file admin/addadmin.php. Performing a manipulation of the argument image results in unrestricted upload. The attack may be initiated remotely. The...