414830 matches found
CVE-2026-97761: Stack-based Buffer Overflow
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...
CVE-2026-83770: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network...
CVE-2026-97001: Heap-based Buffer Overflow
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally...
CVE-2026-104585: Improper Neutralization of Special Elements used in a Command
Mobile Security Framework MobSF v4.5.2 is vulnerable to Command Injection in /downloaddata/, /api/v1/scan, Dynamic Analyzer ADB integration module...
CVE-2026-70172: Untrusted Pointer Dereference
Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally...
CVE-2026-96320: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network...
CVE-2026-96254: Use After Free
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-81969: Insufficient Granularity of Access Control
Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally...
CVE-2026-87715: Use After Free
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-88186: Heap-based Buffer Overflow
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
CVE-2026-103565: Use After Free
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-83747: Windows Error Reporting Information Disclosure Vulnerability
Out-of-bounds read in Windows Error Reporting allows an authorized attacker to disclose information locally...
Microsoft Windows: CVE-2026-83720: Windows Kerberos Elevation of Privilege Vulnerability
Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally...
CVE-2026-96860: Out-of-bounds Read
Out-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose information locally...
Microsoft Windows: CVE-2026-83792: Windows Device Install Service Elevation of Privilege Vulnerability
Incorrect authorization in Windows Device Install Service allows an authorized attacker to elevate privileges locally...
CVE-2026-14308: Improper Input Validation
Zohocorp ManageEngine Malware Protection Plus versions before 1.0.64.12 are affected by insufficient driver signature validation in MEARWService...
CVE-2026-104346: Out-of-bounds Write
Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2026-96919: Use After Free
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-108467: Microsoft PostScript Printer Driver Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an authorized attacker to execute code over a network...
CVE-2026-96243: Improper Link Resolution Before File Access
Improper link resolution before file access 'link following' in Windows WalletService allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-88129: Role: DNS Server Denial of Service Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network...
CVE-2026-87693: Use After Free
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-87692: Deserialization of Untrusted Data
Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally...
CVE-2026-70138: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally...
CVE-2026-96853: Time-of-check Time-of-use (TOCTOU) Race Condition
Time-of-check time-of-use toctou race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...
CVE-2026-69919: Out-of-bounds Read
Out-of-bounds read in Windows Cryptographic Services allows an authorized attacker to disclose information locally...
CVE-2026-109677: Out-of-bounds Read
FreeRDP from 2.0.0-beta1 before 3.28.0 contains an out-of-bounds read vulnerability in smartcardLocateCardsByATRACall because the ATR pattern cbAtr byte count is not capped. Malicious RDP servers can send crafted ATR mask arrays to use query timing as an oracle, leaking heap memory bit-by-bit to...
CVE-2026-96253: Use After Free
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-17484: Exposure of Sensitive Information to an Unauthorized Actor
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to cause a denial of service due to improper access control...
CVE-2026-85804: Use After Free
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...
CVE-2026-83702: Use After Free
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-84009: Time-of-check Time-of-use (TOCTOU) Race Condition
Time-of-check time-of-use toctou race condition in Windows Projected File System allows an authorized attacker to perform tampering locally...
CVE-2026-83508: Out-of-bounds Read
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally...
CVE-2026-87702: Integer Overflow or Wraparound
Integer overflow or wraparound in Windows Resource Management MRM allows an authorized attacker to elevate privileges locally...
CVE-2026-95631: Improper Input Validation
Adobe Commerce is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user...
CVE-2026-96312: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-88103: Use After Free
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...
CVE-2026-102734: Protection Mechanism Failure
asteval is a Python expression evaluator designed for restricted execution. Prior to 1.0.9, in asteval/astutils.py, the default Interpreter with numpy enabled exposes a ctypes type and permits fromaddress memory access. safegetattr blocks the ctypes module but not reachable ctypes type objects,...
CVE-2026-109404: Server-Side Request Forgery (SSRF)
A vulnerability was identified in conductor-oss conductor up to 3.33.0-rc10. Affected by this issue is some unknown functionality of the file AgentController.java of the component Agentspan Agent Runtime. The manipulation leads to server-side request forgery. Remote exploitation of the attack is...
CVE-2026-88173: Use After Free
Use after free in Windows Background Intelligent Transfer Service BITS allows an unauthorized attacker to execute code over a network...
CVE-2026-88189: Out-of-bounds Read
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
CVE-2026-97811: Double Free
Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally...
CVE-2026-88121: Use After Free
Use after free in Windows Background Intelligent Transfer Service BITS allows an unauthorized attacker to execute code over a network...
CVE-2026-97794: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to elevate privileges locally...
CVE-2026-110120: Authorization Bypass Through User-Controlled Key
Yshopmall through 2.0.0 contains an insecure direct object reference vulnerability in the after-sales API that allows authenticated members to access other members' data by supplying their after-sales id and orderCode. Attackers can call deleteAfterSalesOrder, addLogisticsInformation, or GET...
CVE-2026-77094: Out-of-bounds Write
CvFWD contained an out-of-bounds write affecting service availability. Software customers upgrade to resolved maintenance release. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommServe, Webserver, Command Center, MediaAgents, Clients a...
CVE-2026-85320: Use of Uninitialized Resource
Use of uninitialized resource in Windows Print Spooler Components allows an authorized attacker to disclose information locally...
CVE-2026-85327: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...
CVE-2026-88142: Heap-based Buffer Overflow
Use after free in Windows Background Intelligent Transfer Service BITS allows an unauthorized attacker to execute code over a network...