414831 matches found
CVE-2026-90530: Improper Limitation of a Pathname to a Restricted Directory
ColdFusion RDS is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope...
CVE-2026-110149: Use After Free
Use after free in Browser in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...
CVE-2026-102989: Improper Neutralization of Input During Web Page Generation
TanStack Router is a client-first, server-capable, fully type-safe router and full-stack framework for the web. From 1.143.12 until 1.169.39 for @tanstack/start-server-core, 1.168.60 for @tanstack/react-start, 1.168.57 for @tanstack/solid-start, and 1.168.56 for @tanstack/vue-start, an...
CVE-2026-70060: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...
CVE-2026-88128: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
CVE-2026-84014: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally...
CVE-2026-70058: Out-of-bounds Write
Out-of-bounds write in Windows DHCP Server allows an unauthorized attacker to execute code over a network...
CVE-2026-100136: Integer Overflow or Wraparound
CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not requir...
CVE-2026-83720: Use After Free
Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally...
CVE-2026-85933: Use After Free
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...
CVE-2026-83636: NULL Pointer Dereference
Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally...
CVE-2026-85855: Use After Free
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
CVE-2026-77090: Improper Restriction of XML External Entity Reference
CVFS contained an XML external entity XXE reference handling issue affecting information dislcosure. Software customers upgrade to resolved maintenance release. Update CVFS...
CVE-2026-110162: Use After Free
Use after free in Desktop in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-109699: Missing Authorization
Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Registration: from n/a through 5.2.8...
CVE-2026-69913: Use After Free
Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network...
CVE-2026-89198: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in RUGGEDCOM CROSSBOW All versions V6.0. Affected devices do not properly validate or sanitize the filename of firmware files uploaded to the system. This could allow an authenticated attacker with specific privileges to execute arbitrary SQL commands on the...
CVE-2026-70136: Use After Free
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
CVE-2026-108972: Improper Authentication
A vulnerability was found in SourceCodester Human Resource Management System 1.0. Affected by this vulnerability is the function sessionstart of the file controller/employee.php of the component Employee Endpoint. The manipulation of the argument role/pfimg/EmpId results in improper authenticatio...
CVE-2026-53564: Improper Limitation of a Pathname to a Restricted Directory
Vulnerability in Citrix UniconOS leading to Arbitrary file read and write This issue affects UniconOS: before 2607.2 CR and before 2603 LTSR CU2...
CVE-2026-77100: Heap-based Buffer Overflow
MediaAgent contained a heap-based buffer overflow issue affecting service availability. Software customers upgrade to resolved maintenance release. Update Commvault installation of MediaAgents and HyperScale...
CVE-2026-97748: Heap-based Buffer Overflow
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...
CVE-2026-96313: Missing Authentication for Critical Function
Missing authentication for critical function in Windows Push Notifications allows an authorized attacker to elevate privileges locally...
CVE-2026-48398: Improper Neutralization of Input During Web Page Generation
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in...
CVE-2026-97813: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information over a network...
CVE-2026-85871: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally...
CVE-2026-106625: Out-of-bounds Write
Adobe Framemaker is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
Microsoft Windows: CVE-2026-85912: Clipboard User Service Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally...
Microsoft Office: CVE-2026-97742: Microsoft Office Excel Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...
CVE-2026-110204: Interpretation Conflict
Roo Code through 3.54.0 contains a command approval bypass vulnerability that allows attackers to run denied shell commands because parseCommandLine treats $ command; substitutions as parameter expansions. Attackers using indirect prompt injection can embed denied commands inside an allowlisted...
CVE-2026-110121: Authorization Bypass Through User-Controlled Key
PickMall lilishop through 4.4 contains an insecure direct object reference vulnerability that allows authenticated sellers to overwrite any store's product by supplying another store's goodsId to the goods update endpoint. Attackers can send PUT requests to /store/goods/goods/update/goodsId to...
CVE-2026-85837: Out-of-bounds Read
Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-96324: Use After Free
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
CVE-2026-106034: Improper Limitation of a Pathname to a Restricted Directory
A Path Traversal vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to create, modify, arbitrary directories the host file system...
CVE-2026-83830: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...
CVE-2026-95640: NULL Pointer Dereference
Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in...
CVE-2026-108942: Improper Neutralization of Input During Web Page Generation
A security flaw has been discovered in philz1337x clarity-upscaler up to cfbdb842c6c839c8e97741722b8cf9a4b7662d98. This impacts the function createhtmlforitem of the file modules/uiextranetworks.py of the component Extra Networks Card Rendering. The manipulation of the argument Description result...
CVE-2026-65147: Out-of-bounds Read
NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds read. A successful exploit of this vulnerability might lead to information disclosure and denial of service...
CVE-2026-96939: Time-of-check Time-of-use (TOCTOU) Race Condition
Time-of-check time-of-use toctou race condition in Servicing Stack Updates allows an authorized attacker to elevate privileges locally...
CVE-2026-96918: Incorrect Authorization
Improper access control in Windows NTFS allows an authorized attacker to elevate privileges locally...
CVE-2026-96923: Use After Free
Use after free in Windows Workstation Service allows an authorized attacker to elevate privileges locally...
CVE-2026-83585: Use of Externally-Controlled Format String
Use of externally-controlled format string in Windows NTFS allows an authorized attacker to elevate privileges locally...
CVE-2026-93886: Improper Neutralization of Input During Web Page Generation
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to execute arbitrary script code due to improper validation of user-supplied input...
CVE-2026-88836: Undefined Security Weakness
Rejected reason: Red Hat Product Security determined this is not a security vulnerability. BusyBox internal TLS is intentionally minimal and documents in FEATUREWGETHTTPS that it does not verify peer identity or provide full TLS security; missing Finished verifydata checking is consistent with th...
CVE-2026-83792: Incorrect Authorization
Incorrect authorization in Windows Device Install Service allows an authorized attacker to elevate privileges locally...
CVE-2026-95638: Heap-based Buffer Overflow
Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2026-85362: Release of Invalid Pointer or Reference
Release of invalid pointer or reference in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally...
CVE-2026-96044: Improper Privilege Management
No cwe for this issue in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...