Microsoft Windows: CVE-2026-100219: Microsoft QUIC Remote Code Execution Vulnerability

Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network...

CVE-2026-87689: Missing Authentication for Critical Function

The Metasploit Framework Web Service REST API msf-ws exposes the credential store through Msf::WebServices::CredentialServlet. Every mutating and read route in this servlet calls warden.authenticate! before processing a request, except the updatecredential PUT and deletecredentials DELETE handler...

CVE-2026-58249: Integer Underflow (Wrap or Wraparound)

SAP NetWeaver and SAP Web Dispatcher do not properly validate certain fields in specially crafted requests handled by an internal protocol component. An unauthenticated attacker could send a malicious request that triggers a memory-handling error, causing the affected process to crash. Successful...

CVE-2026-69977: Use After Free

Use after free in Quality Windows Audio/Video Experience QWAVE service allows an authorized attacker to elevate privileges locally...

CVE-2026-70299: Incorrect Authorization

Improper access control in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-105728: Missing Authentication for Critical Function

Improper authentication in Dynamics Business Central allows an unauthorized attacker to disclose information over a network...

CVE-2026-106170: Uncaught Exception

An Uncaught Exception vulnerability CWE-248 vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4 all versions may allow a privileged attacker to deny access to the GUI and CLI persistently via crafted HTTP requests...

Microsoft Windows: CVE-2026-70111: Windows Kernel Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges over a network...

Microsoft Office: CVE-2026-70257: Microsoft Office Outlook Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...

CVE-2026-10759: Improper Neutralization of Special Elements used in an LDAP Query

A flaw in Portal for ArcGIS could allow LDAP injection through administrative functionality that constructs Active Directory or LDAP search queries without sufficient input neutralization. An authenticated administrator could supply crafted input that modifies the intended LDAP query and causes...

Microsoft Windows: CVE-2026-83869: Windows Domain Name Service Remote Code Execution Vulnerability

Integer underflow wrap or wraparound in DNS Server allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-83838: Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability

Integer underflow wrap or wraparound in Windows Bluetooth A2DP driver allows an authorized attacker to elevate privileges over an adjacent network...

CVE-2026-83678: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally...

CVE-2026-70242: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-85375: Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability

Use after free in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...

CVE-2026-109963: Authorization Bypass Through User-Controlled Key

Froxlor before 2.3.14 contains an insecure direct object reference vulnerability in the email template editor admintemplates.php because the mail body is fetched by mailbodyid without an adminid ownership check. Authenticated reseller admins can pair their own subjectid with sequential foreign...

Microsoft Windows: CVE-2026-96866: Network Device Enrollment Service (NDES) Denial of Service Vulnerability

Out-of-bounds read in Network Device Enrollment Service NDES allows an unauthorized attacker to deny service over a network...

CVE-2026-70142: Untrusted Search Path

Untrusted search path in Windows Update Service allows an authorized attacker to elevate privileges locally...

CVE-2026-83737: Out-of-bounds Read

Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally...

CVE-2026-88964: Integer Underflow (Wrap or Wraparound)

An integer underflow in OpenVPN version 2.7alpha3 through 2.7.7 on Windows and Android allows remote authenticated servers to cause a denial of service or memory disclosure via crafted domain search options...

CVE-2026-48378: Improper Input Validation

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue does not require user...

CVE-2026-110129: Authorization Bypass Through User-Controlled Key

fuintCatering through commit 122c9e6 contains an insecure direct object reference vulnerability in the ClientRefundController refund detail endpoint that lets authenticated members read other members' refund records. Attackers can register freely and enumerate sequential refundId values to obtain...

CVE-2026-69991: Use After Free

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

CVE-2026-110107: Authorization Bypass Through User-Controlled Key

RuoYi-Cloud-Plus through 6.0.0 contains an insecure direct object reference vulnerability that allows authenticated users to delete other users' social login bindings by supplying their socialId. Attackers can send DELETE /auth/unlock/socialId, which deletes syssocial rows by primary key without...

CVE-2026-88110: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83770: Windows Text Shaping Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network...

CVE-2026-76975: Improper Neutralization of Input During Web Page Generation

Due to a DOM-Based Cross-Site Scripting XSS vulnerability, an unauthenticated attacker could generate a malicious link and make it publicly accessible. If an authenticated user accesses this link, client-side code reads the attacker-controlled input and writes it into the DOM without proper...

CVE-2026-89200: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been identified in RUGGEDCOM CROSSBOW All versions V6.0. Affected devices do not properly validate or sanitize input in the Name and Value fields for custom file labels. This could allow an authenticated attacker with administrative privileges to execute arbitrary SQL commands...

CVE-2026-83829: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

CVE-2026-70158: Double Free

Remote Code Execution in Windows Routing and Remote Access Service RRAS allows attacker to gain an unauthorized access to victim's machine...

CVE-2026-93346: Improper Restriction of Excessive Authentication Attempts

Wazuh from 4.0.0 before 4.14.8 contains a race condition in API login throttling that allows unauthenticated attackers to bypass maxloginattempts by sending concurrent requests. Attackers can fire concurrent login bursts to the authenticate and runas endpoints, each passing the block check before...

CVE-2026-96947: Use After Free

Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...

CVE-2026-85339: Integer Underflow (Wrap or Wraparound)

Remote Code Execution in Windows Routing and Remote Access Service RRAS allows attacker to gain an unauthorized access to victim's machine...

Microsoft Office: CVE-2026-97770: Microsoft Office Excel Remote Code Execution Vulnerability

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-103567: Windows Broadcast DVR User Service Information Disclosure Vulnerability

Buffer over-read in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally...

CVE-2026-85810: Use After Free

Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-97800: Windows Mobile Broadband Elevation of Privilege Vulnerability

Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally...

CVE-2026-70157: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to execute code over a network...

CVE-2026-83643: Stack-based Buffer Overflow

Stack-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-97815: Windows Error Reporting Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network...

CVE-2026-83669: Use of Uninitialized Resource

Use of uninitialized resource in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2026-69387: Use After Free

Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2026-85818: Improper Verification of Cryptographic Signature

Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-104011: Undefined Security Weakness

Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-94257. Reason: This candidate is a reservation duplicate of CVE-2026-94257. Notes: All CVE users should reference CVE-2026-94257 instead of this candidate. All references and descriptions in this candidate have been...

CVE-2026-90531: Improper Restriction of XML External Entity Reference

Adobe Experience Manager is affected by an Improper Restriction of XML External Entity Reference 'XXE' vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does...

CVE-2026-83860: Stack-based Buffer Overflow

Stack-based buffer overflow in Windows GDI allows an unauthorized attacker to deny service over a network...

CVE-2026-108128: Out-of-bounds Read

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...

CVE-2026-100138: Uncontrolled Resource Consumption

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue...

CVE-2026-83883: Use After Free

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-97811: Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability

Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally...