414831 matches found
Microsoft Windows: CVE-2026-96852: Windows TCP/IP Elevation of Privilege Vulnerability
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally...
CVE-2026-70114: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-88219: Untrusted Pointer Dereference
Untrusted pointer dereference in RPC Runtime allows an unauthorized attacker to execute code over a network...
CVE-2026-109957: Authorization Bypass Through User-Controlled Key
EspoCRM before 10.0.7 contains an insecure direct object reference vulnerability that allows authenticated users with Import scope access to read other users' attachments by supplying a foreign attachmentId to the Import endpoint. Attackers can create an Import record referencing a known attachme...
CVE-2026-83913: Use After Free
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-85932: Improper Limitation of a Pathname to a Restricted Directory
Improper limitation of a pathname to a restricted directory 'path traversal' in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network...
CVE-2026-83724: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally...
CVE-2026-88194: Out-of-bounds Read
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
CVE-2026-83932: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Group Policy allows an authorized attacker to elevate privileges locally...
CVE-2026-16301: Incorrect Authorization
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with Developer role to execute CI/CD pipelines on protected branches without...
CVE-2026-69950: Buffer Over-read
Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...
CVE-2026-102599: Uncaught Exception
Socket.IO enables bidirectional and low-latency communication for every platform. From Engine.IO 6.6.0 until 6.6.10, a transport upgrade can independently derive an Engine.IO protocol revision from the upgrade request instead of enforcing the revision stored on the existing session. A malicious...
CVE-2026-70112: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to execute code locally...
CVE-2026-89108: Missing Authorization
SAP Manufacturing Integration and Intelligence does not sufficiently enforce authorization boundaries within certain administrative functionality. An attacker with MII administrator privileges could submit a specially crafted request to provision an account with elevated privileges on the...
Microsoft Office: CVE-2026-97768: Microsoft Office Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...
CVE-2026-103418: Improper Neutralization of Input During Web Page Generation
Firefox for iOS directly interpolated the page’s HTML language attribute into translation JavaScript, allowing attacker-controlled markup to execute code in Firefox’s privileged content world and bypass the page’s Content Security Policy. This vulnerability was fixed in Firefox for iOS 157.1...
Microsoft SQL Server: CVE-2026-70189: Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally...
Microsoft Windows: CVE-2026-85851: Windows SmartScreen Elevation of Privilege Vulnerability
Use after free in Windows SmartScreen allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-83725: Microsoft Windows Search Component Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Windows Search Component allows an unauthorized attacker to execute code over a network...
CVE-2026-88193: Heap-based Buffer Overflow
Heap-based buffer overflow in Microsoft Scripting Engine allows an authorized attacker to elevate privileges locally...
CVE-2026-85828: Heap-based Buffer Overflow
Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally...
CVE-2026-97745: Use After Free
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...
CVE-2026-70024: Stack-based Buffer Overflow
Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker to execute code over a network...
CVE-2026-109143: Improper Privilege Management
A vulnerability was determined in calcom cal.com and cal.diy up to 6.2.0. This vulnerability affects the function credentials.delete of the file /api/trpc/credentials/delete of the component Credentials Handler. This manipulation of the argument teamId causes improper privilege management. The...
Microsoft Windows: CVE-2026-70247: HTTP.sys Remote Code Execution Vulnerability
Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to execute code locally...
Microsoft Windows: CVE-2026-83586: Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability
Weak authentication in Windows Resilient File System ReFS Deduplication Service allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-102227: Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Resilient File System ReFS allows an authorized attacker to execute code locally...
Microsoft Windows: CVE-2026-105733: Windows Hyper-V Remote Code Execution Vulnerability
Improper access control in Windows Hyper-V allows an authorized attacker to execute code locally...
Microsoft Windows: CVE-2026-70116: Windows Resilient File System (ReFS) Security Feature Bypass Vulnerability
Stack-based buffer overflow in Windows Resilient File System ReFS allows an unauthorized attacker to bypass a security feature with a physical attack...
CVE-2026-83586: Weak Authentication
Weak authentication in Windows Resilient File System ReFS Deduplication Service allows an authorized attacker to elevate privileges locally...
CVE-2026-102227: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Resilient File System ReFS allows an authorized attacker to execute code locally...
Microsoft Windows: CVE-2026-83523: Windows Image Acquisition Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Image Acquisition allows an unauthorized attacker to execute code over a network...
CVE-2026-105733: Incorrect Initialization of Resource
Improper access control in Windows Hyper-V allows an authorized attacker to execute code locally...
Microsoft Windows: CVE-2026-103576: Active Directory Federation Services (AD FS) Spoofing Vulnerability
Url redirection to untrusted site 'open redirect' in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-63355: Improper Neutralization of Input During Web Page Generation
Affected devices do not properly sanitize signal names contained in imported CSV trace files before rendering them in selection menus on the Trace page. This could allow an attacker to social engineer an authorized user who holds the function right “Read diagnostics” into importing a specially...
Microsoft Windows: CVE-2026-108131: Active Directory Federation Services (AD FS) Spoofing Vulnerability
No cwe for this issue in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-54868: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in FolioVision FV Simpler SEO fv-all-in-one-seo-pack allows Stored XSS.This issue affects FV Simpler SEO: from n/a through 1.9.7...
Microsoft Windows: CVE-2026-100217: Windows Group Policy Elevation of Privilege Vulnerability
Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-88112: Windows Domain Name Service Remote Code Execution Vulnerability
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-83642: Windows Domain Name Service Remote Code Execution Vulnerability
Access of resource using incompatible type 'type confusion' in DNS Server allows an unauthorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-88116: Windows Domain Name Service Remote Code Execution Vulnerability
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network...
CVE-2026-109697: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Brainstorm Force SureCart surecart allows Stored XSS.This issue affects SureCart: from n/a through 4.9.4...
Microsoft Windows: CVE-2026-69882: Windows Update Elevation of Privilege Vulnerability
Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-88180: Windows DWM Core Library Elevation of Privilege Vulnerability
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
CVE-2026-102229: Improper Limitation of a Pathname to a Restricted Directory
Improper limitation of a pathname to a restricted directory 'path traversal' in Visual Studio Code allows an authorized attacker to disclose information over a network...
CVE-2026-103853: Out-of-bounds Read
Dimension is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2026-103847: Untrusted Search Path
Dimension is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. A local attacker with user permissions could exploit this vulnerability to...
Microsoft Windows: CVE-2026-97821: Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
CVE-2026-66057: URL Redirection to Untrusted Site
Frappe is a full-stack web application framework. Prior to 15.116.0 and 16.29.0, the OAuth login flow uses an unsanitized client-controlled state parameter to select post-authentication navigation, allowing a crafted state value to redirect a user to an attacker-chosen location. This issue is fix...