414831 matches found
CVE-2026-106625: Out-of-bounds Write
Adobe Framemaker is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
Microsoft Windows: CVE-2026-85912: Clipboard User Service Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally...
Microsoft Office: CVE-2026-97742: Microsoft Office Excel Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...
CVE-2026-110204: Interpretation Conflict
Roo Code through 3.54.0 contains a command approval bypass vulnerability that allows attackers to run denied shell commands because parseCommandLine treats $ command; substitutions as parameter expansions. Attackers using indirect prompt injection can embed denied commands inside an allowlisted...
CVE-2026-110121: Authorization Bypass Through User-Controlled Key
PickMall lilishop through 4.4 contains an insecure direct object reference vulnerability that allows authenticated sellers to overwrite any store's product by supplying another store's goodsId to the goods update endpoint. Attackers can send PUT requests to /store/goods/goods/update/goodsId to...
CVE-2026-85837: Out-of-bounds Read
Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-96324: Use After Free
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
CVE-2026-106034: Improper Limitation of a Pathname to a Restricted Directory
A Path Traversal vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to create, modify, arbitrary directories the host file system...
CVE-2026-83830: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...
CVE-2026-95640: NULL Pointer Dereference
Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in...
CVE-2026-108942: Improper Neutralization of Input During Web Page Generation
A security flaw has been discovered in philz1337x clarity-upscaler up to cfbdb842c6c839c8e97741722b8cf9a4b7662d98. This impacts the function createhtmlforitem of the file modules/uiextranetworks.py of the component Extra Networks Card Rendering. The manipulation of the argument Description result...
CVE-2026-65147: Out-of-bounds Read
NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds read. A successful exploit of this vulnerability might lead to information disclosure and denial of service...
CVE-2026-96939: Time-of-check Time-of-use (TOCTOU) Race Condition
Time-of-check time-of-use toctou race condition in Servicing Stack Updates allows an authorized attacker to elevate privileges locally...
CVE-2026-96918: Incorrect Authorization
Improper access control in Windows NTFS allows an authorized attacker to elevate privileges locally...
CVE-2026-96923: Use After Free
Use after free in Windows Workstation Service allows an authorized attacker to elevate privileges locally...
CVE-2026-83585: Use of Externally-Controlled Format String
Use of externally-controlled format string in Windows NTFS allows an authorized attacker to elevate privileges locally...
CVE-2026-93886: Improper Neutralization of Input During Web Page Generation
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to execute arbitrary script code due to improper validation of user-supplied input...
CVE-2026-88836: Undefined Security Weakness
Rejected reason: Red Hat Product Security determined this is not a security vulnerability. BusyBox internal TLS is intentionally minimal and documents in FEATUREWGETHTTPS that it does not verify peer identity or provide full TLS security; missing Finished verifydata checking is consistent with th...
CVE-2026-83792: Incorrect Authorization
Incorrect authorization in Windows Device Install Service allows an authorized attacker to elevate privileges locally...
CVE-2026-95638: Heap-based Buffer Overflow
Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2026-85362: Release of Invalid Pointer or Reference
Release of invalid pointer or reference in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally...
CVE-2026-96044: Improper Privilege Management
No cwe for this issue in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...
CVE-2026-108467: Heap-based Buffer Overflow
Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an authorized attacker to execute code over a network...
CVE-2026-85872: Use After Free
Use after free in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-105142: Undefined Security Weakness
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2026-88070: Out-of-bounds Read
Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges locally...
CVE-2026-96844: Integer Underflow (Wrap or Wraparound)
Integer underflow wrap or wraparound in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges over an adjacent network...
CVE-2026-83790: Use After Free
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...
CVE-2026-110139: Use After Free
Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
Microsoft Windows: CVE-2026-70133: Windows SMB Server Denial of Service Vulnerability
Allocation of resources without limits or throttling in Windows SMB Server allows an unauthorized attacker to deny service over a network...
CVE-2026-97820: Out-of-bounds Read
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
CVE-2026-88080: Use After Free
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-85807: Integer Overflow or Wraparound
Integer overflow or wraparound in Windows USB Video Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-83676: Integer Underflow (Wrap or Wraparound)
Integer underflow wrap or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-108457: Out-of-bounds Write
Out-of-bounds write in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network...
CVE-2026-85835: Buffer Over-read
Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally...
CVE-2026-96204: Server-Side Request Forgery (SSRF)
Server-side request forgery ssrf in Azure Arc allows an authorized attacker to elevate privileges over a network...
CVE-2026-85901: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...
CVE-2026-97789: Use After Free
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
CVE-2026-110123: Missing Authorization
Makunet maku-boot 4.3.0 through 5.0.0 contains a missing authorization vulnerability that allows authenticated users to read mail and SMS configurations by calling /sys/mail/config/list and /sys/sms/config/list without the required authority checks. Attackers can retrieve unmasked SMTP passwords...
CVE-2026-83570: Use After Free
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-70216: Windows Mobile Device Management Tampering Vulnerability
Insufficient granularity of access control in Windows Mobile Device Management allows an authorized attacker to perform tampering locally...
CVE-2026-106616: Improper Restriction of XML External Entity Reference
ColdFusion is affected by an Improper Restriction of XML External Entity Reference 'XXE' vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issu...
CVE-2026-97762: Out-of-bounds Write
Out-of-bounds write in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...
CVE-2026-70270: Untrusted Pointer Dereference
Untrusted pointer dereference in Windows Container Isolation FS Filter Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-69934: Integer Overflow or Wraparound
Integer overflow or wraparound in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally...
CVE-2026-109403: Server-Side Request Forgery (SSRF)
A vulnerability was determined in conductor-oss conductor up to 3.32.5. Affected by this vulnerability is the function A2AService.getAgentCard of the file ai/src/main/java/org/conductoross/conductor/ai/a2a/A2AService.java of the component Agent Card Fetching. Executing a manipulation of the...
CVE-2026-96863: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack...
CVE-2026-63161: Session Fixation
Omnispace Agora Project before 26.10.0 contains a session fixation vulnerability that allows remote attackers to hijack authenticated sessions by planting a known session identifier in a victim's browser prior to login. Attackers can exploit the application's failure to regenerate the session id...