414831 matches found
CVE-2026-100214: Deserialization of Untrusted Data
Deserialization of untrusted data in Dynamics Business Central allows an authorized attacker to execute code over a network...
CVE-2026-110115: Improper Limitation of a Pathname to a Restricted Directory
Risesoft Digital-Infrastructure 9.6.5 through 9.6.11 contains a path traversal vulnerability in the fileManager Y9FileController.retrieveFileStream handler that allows unauthenticated attackers to read arbitrary files by supplying parent-directory segments in the fullPath and fileName parameters...
CVE-2026-89120: Initialization of a Resource with an Insecure Default
A regression caused by an API change in SAP ABAP Platform reintroduces a previously fixed authorization weakness. The session manager can be opened in single transaction mode, including from FLP. A low-privileged attacker could exploit this to bypass restrictions via specially crafted requests,...
CVE-2026-110224: Improper Neutralization of Input During Web Page Generation
QloApps through 1.7.0 contains a reflected cross-site scripting vulnerability in AdminSearchConfController::processSave that echoes rejected alias and search values unescaped in validation errors. Attackers can induce an authenticated back-office user to submit a crafted request, executing...
CVE-2026-56826: Missing Authorization
Shopper is a Headless e-commerce Admin Panel. From 2.0.0 until 2.9.2, authenticated users who could reach the Settings pages with only accesssetting could directly invoke destructive actions through the Livewire endpoint because...
CVE-2026-96911: Improper Link Resolution Before File Access
Improper link resolution before file access 'link following' in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
CVE-2026-96916: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally...
CVE-2026-108967: Improper Neutralization of Special Elements used in an SQL Command
A security flaw has been discovered in SourceCodester Performance Indicator System 1.0. Impacted is an unknown function of the file /opils/staff/editcredit.php. The manipulation of the argument credit results in sql injection. The attack may be launched remotely. The exploit has been released to...
Microsoft Windows: CVE-2026-62879: Windows SmartScreen Tampering Vulnerability
Missing authentication for critical function in Windows SmartScreen allows an authorized attacker to perform tampering locally...
CVE-2026-102074: Stack-based Buffer Overflow
A vulnerability has been identified in APOGEE MBC PPC BACnet All versions, APOGEE MBC PPC P2 Ethernet All versions, APOGEE MEC PPC BACnet All versions, APOGEE MEC PPC P2 Ethernet All versions, APOGEE PXC Compact BACnet All versions V3.5.7, APOGEE PXC Compact P2 Ethernet All versions V2.8.21, APOG...
CVE-2026-34633: Server-Side Request Forgery (SSRF)
ColdFusion is affected by a Server-Side Request Forgery SSRF vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does not require user interaction. Scope is...
Microsoft Windows: CVE-2026-102197: Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-102201: Microsoft Windows Media Foundation Elevation of Privilege Vulnerability
Use after free in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally...
CVE-2026-102197: Use After Free
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...
CVE-2026-102196: Use After Free
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-102196: Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...
CVE-2026-102195: Use After Free
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-102195: Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...
CVE-2026-102203: Access of Resource Using Incompatible Type
Access of resource using incompatible type 'type confusion' in RPC Runtime allows an unauthorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-102202: Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability
Improper access control in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to elevate privileges locally...
CVE-2026-75996: Uncontrolled Resource Consumption
ColdFusion is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not...
CVE-2026-75748: Server-Side Request Forgery (SSRF)
ColdFusion is affected by a Server-Side Request Forgery SSRF vulnerability that could result in privilege escalation. An attacker with high privileges could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does not require user interaction. Scop...
CVE-2026-100202: Use After Free
Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-100203: Windows Update Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally...
CVE-2026-102206: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Portable Device MTP Driver allows an unauthorized attacker to elevate privileges with a physical attack...
CVE-2026-102207: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-102211: Use After Free
Use after free in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...
CVE-2026-102191: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-102191: Windows Storage Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-102189: Windows Storage Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally...
CVE-2026-102188: Untrusted Pointer Dereference
Untrusted pointer dereference in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack...
Microsoft Windows: CVE-2026-102188: Windows Storage Port Driver Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack...
Microsoft Windows: CVE-2026-102187: Windows Kernel Information Disclosure Vulnerability
Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally...
CVE-2026-102186: Untrusted Pointer Dereference
Untrusted pointer dereference in Windows Network File System allows an authorized attacker to disclose information locally...
Microsoft Windows: CVE-2026-102186: Windows Network File System Information Disclosure Vulnerability
Untrusted pointer dereference in Windows Network File System allows an authorized attacker to disclose information locally...
Microsoft Windows: CVE-2026-102194: Windows Graphics Kernel Elevation of Privilege Vulnerability
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-102193: Use After Free
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-102193: Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...
CVE-2026-100219: Use After Free
Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-100220: Windows Media Video Decoder Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Media Video Decoder allows an unauthorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-100218: Remote Desktop Gateway Service Remote Code Execution Vulnerability
Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-100225: Windows Storage Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally...
CVE-2026-100225: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-100215: Microsoft Graphics Component Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code locally...
CVE-2026-100215: Heap-based Buffer Overflow
Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code locally...
Microsoft Windows: CVE-2026-100216: Windows Storage Elevation of Privilege Vulnerability
Stack-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally...
CVE-2026-100216: Stack-based Buffer Overflow
Stack-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-100200: Windows Update Service Elevation of Privilege Vulnerability
Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-100201: Windows Client License Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Client License Service allows an authorized attacker to elevate privileges locally...