414110 matches found
Microsoft Windows: CVE-2026-102194: Windows Graphics Kernel Elevation of Privilege Vulnerability
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-102193: Use After Free
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-102193: Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...
CVE-2026-102192: Integer Underflow (Wrap or Wraparound)
Integer underflow wrap or wraparound in Windows Failover Cluster allows an unauthorized attacker to deny service over a network...
Microsoft Windows: CVE-2026-102192: Windows Failover Cluster Denial of Service Vulnerability
Integer underflow wrap or wraparound in Windows Failover Cluster allows an unauthorized attacker to deny service over a network...
CVE-2026-100218: Use After Free
Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network...
CVE-2026-100219: Use After Free
Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-100220: Windows Media Video Decoder Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Media Video Decoder allows an unauthorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-100218: Remote Desktop Gateway Service Remote Code Execution Vulnerability
Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-100222: Network Policy Server (NPS) Remote Code Execution Vulnerability
Heap-based buffer overflow in Network Policy Server NPS allows an unauthorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-100225: Windows Storage Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally...
CVE-2026-100225: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-100215: Microsoft Graphics Component Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code locally...
CVE-2026-100215: Heap-based Buffer Overflow
Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code locally...
Microsoft Windows: CVE-2026-100216: Windows Storage Elevation of Privilege Vulnerability
Stack-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally...
CVE-2026-100216: Stack-based Buffer Overflow
Stack-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-100200: Windows Update Service Elevation of Privilege Vulnerability
Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-100201: Windows Client License Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Client License Service allows an authorized attacker to elevate privileges locally...
CVE-2026-102855: Heap-based Buffer Overflow
Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network...
Microsoft Office: CVE-2026-102855: Microsoft Office Visio Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network...
CVE-2026-100201: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Client License Service allows an authorized attacker to elevate privileges locally...
CVE-2026-83714: Use of Uninitialized Resource
Use of uninitialized resource in Windows HTTP.sys allows an authorized attacker to disclose information locally...
CVE-2026-85792: Use After Free
Remote Code Execution in Windows Routing and Remote Access Service RRAS allows attacker to gain an unauthorized access to victim's machine...
CVE-2026-83852: Use After Free
Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-63163: Authorization Bypass Through User-Controlled Key
Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability in the MobileFileDownload route that allows unauthenticated attackers to download arbitrary files by computing an md5filename token instead of passing a proper authorization check. Attackers can guess or determi...
Microsoft Windows: CVE-2026-96868: Windows Kernel Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-104348: Heap-based Buffer Overflow
Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2026-89279: Cross-Site Request Forgery (CSRF)
Cross-Site request forgery CSRF vulnerability in AuthTake Technology Inc. Authtake allows Encryption Brute Forcing. This issue affects authtake: from v1.3 before v1.4...
CVE-2026-85372: Use After Free
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...
Microsoft Office: CVE-2026-70214: Microsoft Office Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...
CVE-2026-102205: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...
CVE-2026-102208: Use After Free
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-102208: Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-102210: Windows Text Shaping Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network...
CVE-2026-102210: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network...
CVE-2026-102209: Heap-based Buffer Overflow
Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-102209: Microsoft Graphics Component Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-102207: Windows Kernel Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Kernel allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-100202: Windows Message Queuing Queue Manager Remote Code Execution Vulnerability
Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network...
CVE-2026-107460: Server-Side Request Forgery (SSRF)
Server-Side Request Forgery SSRF protection in the UrlImageConverter component of Apache Fesod Incubating fesod-sheet 2.0.2-incubating can be bypassed through DNS rebinding. When an application accepts an attacker-controlled image URL for spreadsheet writing, the converter checks the hostname's...
CVE-2026-100203: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally...
CVE-2026-34634: Server-Side Request Forgery (SSRF)
ColdFusion is affected by a Server-Side Request Forgery SSRF vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed...
CVE-2026-85368: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally...
CVE-2026-97010: Use After Free
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...
CVE-2026-91013: Improper Neutralization of Input During Web Page Generation
Adobe Commerce is affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field,...
CVE-2026-65149: Out-of-bounds Write
NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds write. A successful exploit of this vulnerability might lead to denial of service, information disclosure, and data tampering...
CVE-2026-65150: Out-of-bounds Read
NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds read. A successful exploit of this vulnerability mighty lead to information disclosure, data tampering, and denial of service...
Microsoft Windows: CVE-2026-85318: Servicing Stack Updates Elevation of Privilege Vulnerability
Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally...
CVE-2026-85318: Heap-based Buffer Overflow
Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-83506: Servicing Stack Updates Elevation of Privilege Vulnerability
Untrusted search path in Servicing Stack Updates allows an authorized attacker to elevate privileges locally...