414110 matches found
CVE-2026-65150: Out-of-bounds Read
NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds read. A successful exploit of this vulnerability mighty lead to information disclosure, data tampering, and denial of service...
Microsoft Windows: CVE-2026-85318: Servicing Stack Updates Elevation of Privilege Vulnerability
Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally...
CVE-2026-85318: Heap-based Buffer Overflow
Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-83506: Servicing Stack Updates Elevation of Privilege Vulnerability
Untrusted search path in Servicing Stack Updates allows an authorized attacker to elevate privileges locally...
CVE-2026-70168: Use After Free
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...
CVE-2026-88161: Use After Free
Use after free in Windows Local Security Authority LSA allows an authorized attacker to elevate privileges locally...
CVE-2026-88149: Double Free
Double free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...
CVE-2026-75826: Improper Neutralization of Special Elements used in an OS Command
Command injection in the backup function in Teltonika Networks RUTOS 7.22 before 7.24.6 and 7.25 before 7.25.2 RUT, RUTX, RUTM, RUTC, ATRM, CAP, OXA, DAP, TRB, OTD, and EBG devices, RUTOS 7.22 before 7.25.2 TAP devices, and TSWOS 1.9 before 1.10.4 TSW and SWM devices allows a remote authenticated...
CVE-2026-83923: Relative Path Traversal
Relative path traversal in OpenSSH for Windows allows an unauthorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-83923: Microsoft OpenSSH for Windows Remote Code Execution Vulnerability
Relative path traversal in OpenSSH for Windows allows an unauthorized attacker to execute code over a network...
CVE-2026-108944: Improper Control of Generation of Code
A security vulnerability has been detected in repository RAE up to a4d18c4db766419cbe7cb8c02cd9f7ceb0ec9041. Affected by this vulnerability is the function getobjfromstr of the file src/utils/modelutils.py of the component Config-Driven Model Instantiation. Such manipulation of the argument Targe...
CVE-2026-101899: Protection Mechanism Failure
Axios is a promise-based HTTP client for the browser and Node.js. From 1.15.0 until 1.20.0, Axios shouldBypassProxy treats the NOPROXY CIDR form as a textual hostname suffix instead of evaluating the network range. A request targets an address covered by a CIDR entry in NOPROXY while a proxy is...
CVE-2026-85798: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Distributed File System DFS allows an authorized attacker to execute code over a network...
CVE-2026-88157: Heap-based Buffer Overflow
Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network...
CVE-2026-96927: Out-of-bounds Read
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally...
CVE-2026-83704: Improper Link Resolution Before File Access
Improper link resolution before file access 'link following' in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
CVE-2026-96535: Improper Neutralization of Input During Web Page Generation
Cross-Site Scripting on the YouMind portal, specifically in the avatar update endpoint, when setting a profile picture via an arbitrary URL. This occurs due to a lack of sanitisation and validation of SVG content when setting an SVG image containing embedded JavaScript code as the avatar. The fil...
CVE-2026-97757: Heap-based Buffer Overflow
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...
CVE-2026-106175: Double Free
A Double Free vulnerability CWE-415 vulnerability in Fortinet FortiOS 7.6.0 through 7.6.7, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiProxy 7.6.0 through 7.6.6, FortiProxy 7.4 all versions, FortiProxy 7.2 all versions, FortiSwitch 7.6.0 through 7.6.6, FortiSwitch 7.4 all versions,...
CVE-2026-70049: Improper Neutralization of Special Elements used in an SQL Command
Improper neutralization of special elements used in an sql command 'sql injection' in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over an adjacent network...
CVE-2026-96202: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network...
CVE-2026-77361: Improper Link Resolution Before File Access
obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, read access-control list ACL checks use a lexical vault-relative path while containment checks use the resolved path. An in-vault symlink under an allowed glob that resolves into a denied...
CVE-2026-103965: Improper Control of Generation of Code
An issue in MongoDB Server's aggregation framework can cause certain constant values to be handled incorrectly during internal query rewriting. Under certain conditions, an authenticated user with read access may receive field values in aggregation output that the query did not intend to return...
CVE-2026-107832: Improper Handling of Case Sensitivity
fastify is a fast and low overhead web framework for Node.js. In versions 5.12.2 through 5.12.5, the routine that lowercases header names declared in a route schema does not lowercase the enum or const header names nested inside a propertyNames subschema. As a result, a header allow-list or...
CVE-2026-16753: Undefined Security Weakness
Incorrect authorization in the library-query execution endpoint in Lowcoder version, up to and including 2.4.10, allows an authenticated administrator or developer in one organization to execute a library query belonging to another organization via a crafted request containing the victim...
Microsoft Windows: CVE-2026-70277: Windows Fast FAT File System Driver Information Disclosure Vulnerability
Out-of-bounds read in Windows Fast FAT Driver allows an unauthorized attacker to disclose information locally...
CVE-2026-108400: Integer Overflow or Wraparound
Integer overflow or wraparound in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network...
CVE-2026-100114: Improper Access Control
CAI Content Credentials is affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interactio...
CVE-2026-70302: Heap-based Buffer Overflow
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
CVE-2026-70123: Numeric Truncation Error
Numeric truncation error in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-88071: Windows Hyper-V Elevation of Privilege Vulnerability
Double free in Windows Hyper-V allows an authorized attacker to elevate privileges locally...
CVE-2026-85809: Heap-based Buffer Overflow
Remote Code Execution in Windows Routing and Remote Access Service RRAS allows attacker to gain an unauthorized access to victim's machine...
CVE-2026-83896: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-96852: Windows TCP/IP Elevation of Privilege Vulnerability
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally...
CVE-2026-70114: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-88219: Untrusted Pointer Dereference
Untrusted pointer dereference in RPC Runtime allows an unauthorized attacker to execute code over a network...
CVE-2026-109957: Authorization Bypass Through User-Controlled Key
EspoCRM before 10.0.7 contains an insecure direct object reference vulnerability that allows authenticated users with Import scope access to read other users' attachments by supplying a foreign attachmentId to the Import endpoint. Attackers can create an Import record referencing a known attachme...
CVE-2026-104937: Undefined Security Weakness
Shopware version 6.7 allows the upload of attacker‑controlled HTML files and serves them as text/html without effective security headers, enabling stored cross-site scripting XSS. When a malicious uploaded file containing an embedded JavaScript payload is viewed by an administrator, the attacker...
CVE-2026-110124: Authorization Bypass Through User-Controlled Key
FastBee through 2.1.0 contains an insecure direct object reference vulnerability in DeviceController that allows authenticated low-privilege users to read and modify other tenants' devices by supplying sequential device IDs. Self-registered attackers can enumerate deviceId or serialNumber values ...
CVE-2026-83913: Use After Free
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-85932: Improper Limitation of a Pathname to a Restricted Directory
Improper limitation of a pathname to a restricted directory 'path traversal' in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network...
CVE-2026-83724: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally...
CVE-2026-88194: Out-of-bounds Read
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
CVE-2026-83932: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Group Policy allows an authorized attacker to elevate privileges locally...
CVE-2026-16301: Incorrect Authorization
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with Developer role to execute CI/CD pipelines on protected branches without...
CVE-2026-83863: Heap-based Buffer Overflow
Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-96859: Windows Imaging Component Information Disclosure Vulnerability
Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally...
CVE-2026-69950: Buffer Over-read
Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...
CVE-2026-102599: Uncaught Exception
Socket.IO enables bidirectional and low-latency communication for every platform. From Engine.IO 6.6.0 until 6.6.10, a transport upgrade can independently derive an Engine.IO protocol revision from the upgrade request instead of enforcing the revision stored on the existing session. A malicious...