414831 matches found
Microsoft Office: CVE-2026-97012: Microsoft Office Outlook Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...
CVE-2026-97763: Heap-based Buffer Overflow
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-96113: Windows Domain Name Service Remote Code Execution Vulnerability
Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-96932: Windows Embedded Mode Service Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally...
CVE-2026-23706: Improper Neutralization of Special Elements used in an SQL Command
An Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability CWE-89 vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all versions, FortiAnalyzer Cloud 7.6.2 through 7.6.4, FortiAnalyzer Cloud...
CVE-2026-97229: Integer Overflow or Wraparound
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular...
Gitlab Gitlab: CVE-2026-97229: Integer Overflow or Wraparound
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular...
CVE-2026-108948: Improperly Controlled Modification of Dynamically-Determined Object Attributes
A vulnerability has been found in code-projects Online Reviewer System 1.0. This vulnerability affects unknown code of the file /reviewer/system/system/admins/manage/users/btnfunctions.php of the component User Profile Update Handler. The manipulation of the argument usertypeid leads to...
CVE-2026-102074: Stack-based Buffer Overflow
A vulnerability has been identified in APOGEE MBC PPC BACnet All versions, APOGEE MBC PPC P2 Ethernet All versions, APOGEE MEC PPC BACnet All versions, APOGEE MEC PPC P2 Ethernet All versions, APOGEE PXC Compact BACnet All versions V3.5.7, APOGEE PXC Compact P2 Ethernet All versions V2.8.21, APOG...
CVE-2026-96218: External Control of System or Configuration Setting
Improper access control in Windows Update Stack allows an authorized attacker to perform tampering locally...
CVE-2026-87696: Improper Verification of Cryptographic Signature
Improper verification of cryptographic signature in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-96305: Use After Free
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-96247: Use of Uninitialized Resource
Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally...
CVE-2026-97803: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-96220: Improper Control of Generation of Code
Improper control of generation of code 'code injection' in Windows Assigned Access allows an authorized attacker to elevate privileges locally...
CVE-2026-96308: Use After Free
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-96319: Use After Free
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-96314: Out-of-bounds Read
Out-of-bounds read in Windows Audio Service allows an authorized attacker to disclose information locally...
CVE-2026-96309: Use After Free
Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-70262: WebDAV Elevation of Privilege Vulnerability
Heap-based buffer overflow in WebDAV allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-96952: Heap-based Buffer Overflow
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-85903: Windows Domain Name Service Remote Code Execution Vulnerability
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-85941: Windows Installer Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-96315: Missing Authorization
Missing authorization in Windows Overlay Filter allows an authorized attacker to perform tampering locally...
CVE-2026-70343: Heap-based Buffer Overflow
Heap-based buffer overflow in Microsoft MPEG-2 Video Extension allows an unauthorized attacker to execute code over a network...
CVE-2026-90532: Incorrect Authorization
Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user...
Microsoft Windows: CVE-2026-85852: Windows Management Instrumentation Information Disclosure Vulnerability
Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally...
CVE-2026-83838: Integer Underflow (Wrap or Wraparound)
Integer underflow wrap or wraparound in Windows Bluetooth A2DP driver allows an authorized attacker to elevate privileges over an adjacent network...
CVE-2026-70201: Out-of-bounds Read
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service locally...
CVE-2026-88093: Heap-based Buffer Overflow
Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-68836: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows kernel32.dll allows an authorized attacker to elevate privileges locally...
CVE-2026-70301: Heap-based Buffer Overflow
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
CVE-2026-83635: Out-of-bounds Read
Out-of-bounds read in DNS Server allows an unauthorized attacker to deny service over a network...
CVE-2026-96956: Stack-based Buffer Overflow
Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network...
Microsoft .NET: CVE-2026-70007: .NET Framework Remote Code Execution Vulnerability
Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network...
Microsoft .NET: CVE-2026-85363: .NET Framework Elevation of Privilege Vulnerability
Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-70007: Out-of-bounds Write
Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network...
CVE-2026-85363: Integer Overflow or Wraparound
Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-69998: Use After Free
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
CVE-2026-69996: Use After Free
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
CVE-2026-69970: Heap-based Buffer Overflow
Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally...
CVE-2026-70089: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code over a network...
CVE-2026-70012: Use After Free
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
CVE-2026-69988: Use After Free
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-70076: Windows Win32k Elevation of Privilege Vulnerability
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...
CVE-2026-85939: Weak Authentication
Weak authentication in Windows Kernel allows an authorized attacker to bypass a security feature over a network...
Microsoft Windows: CVE-2026-83644: Windows Audio Service Elevation of Privilege Vulnerability
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-69963: Kernel Streaming Service Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally...