414831 matches found
CVE-2026-83570: Use After Free
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-70216: Windows Mobile Device Management Tampering Vulnerability
Insufficient granularity of access control in Windows Mobile Device Management allows an authorized attacker to perform tampering locally...
CVE-2026-97762: Out-of-bounds Write
Out-of-bounds write in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...
CVE-2026-70270: Untrusted Pointer Dereference
Untrusted pointer dereference in Windows Container Isolation FS Filter Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-69934: Integer Overflow or Wraparound
Integer overflow or wraparound in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally...
CVE-2026-109403: Server-Side Request Forgery (SSRF)
A vulnerability was determined in conductor-oss conductor up to 3.32.5. Affected by this vulnerability is the function A2AService.getAgentCard of the file ai/src/main/java/org/conductoross/conductor/ai/a2a/A2AService.java of the component Agent Card Fetching. Executing a manipulation of the...
CVE-2026-96863: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack...
CVE-2026-63161: Session Fixation
Omnispace Agora Project before 26.10.0 contains a session fixation vulnerability that allows remote attackers to hijack authenticated sessions by planting a known session identifier in a victim's browser prior to login. Attackers can exploit the application's failure to regenerate the session id...
CVE-2026-83850: Heap-based Buffer Overflow
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
CVE-2026-88155: Heap-based Buffer Overflow
Heap-based buffer overflow in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
CVE-2026-83517: Heap-based Buffer Overflow
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network...
CVE-2026-83650: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally...
CVE-2026-110202: Interpretation Conflict
Roo Code through 3.54.0 contains a command approval bypass vulnerability in getCommandDecision that allows attackers to auto-approve denied shell commands by prefixing them with a bare & redirect. Attackers using indirect prompt injection can make the allowlist match a redirect target like echo...
Microsoft Windows: CVE-2026-97804: HID Class Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally...
CVE-2026-105903: Improper Control of Generation of Code
ColdFusion is affected by an Improper Control of Generation of Code 'Code Injection' vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue doe...
CVE-2026-85321: Allocation of Resources Without Limits or Throttling
Allocation of resources without limits or throttling in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...
Microsoft Windows: CVE-2026-85806: Network Policy Server (NPS) Remote Code Execution Vulnerability
Integer underflow wrap or wraparound in Network Policy Server NPS allows an unauthorized attacker to execute code over a network...
CVE-2026-85342: Use After Free
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69640: Incorrect Authorization
Incorrect authorization in Windows Key Distribution Center allows an authorized attacker to bypass a security feature over a network...
Microsoft Windows: CVE-2026-85871: Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally...
CVE-2026-83777: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Bluetooth Service allows an unauthorized attacker to elevate privileges over an adjacent network...
CVE-2026-110074: Improper Neutralization of Input During Web Page Generation
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in...
Microsoft SQL Server: CVE-2026-96956: SQL Server Elevation of Privilege Vulnerability
Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network...
Microsoft Windows: CVE-2026-85333: Windows Performance Monitor Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Performance Monitor allows an authorized attacker to elevate privileges locally...
CVE-2026-88202: Heap-based Buffer Overflow
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
Microsoft Visual Studio: CVE-2026-85790: Microsoft QUIC Information Disclosure Vulnerability
Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network...
CVE-2026-83523: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Image Acquisition allows an unauthorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-83798: Windows Update Stack Spoofing Vulnerability
Improper verification of cryptographic signature in Windows Update Stack allows an authorized attacker to perform spoofing locally...
CVE-2026-70131: Heap-based Buffer Overflow
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to elevate privileges locally...
CVE-2026-108970: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. This affects the function MySQLDB::addNewUser of the file include/database.php of the component Registration Form. Performing a manipulation of the argument branch results in s...
CVE-2026-109696: Missing Authorization
Missing Authorization vulnerability in WP ManageNinja LLC FluentBoards fluent-boards allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FluentBoards: from n/a through 2.1.0...
CVE-2026-103856: Out-of-bounds Read
Adobe Framemaker is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2026-89201: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in RUGGEDCOM CROSSBOW All versions V6.0. Affected devices do not properly validate or sanitize input in device group or facility names processed during the Bulk Export workflow. This could allow an authenticated attacker with specific privileges to execute...
CVE-2026-52394: Insertion of Sensitive Information Into Sent Data
DeepSeek V4 is vulnerable to Incorrect Access Control via a crafted input...
Microsoft SharePoint: CVE-2026-70267: Microsoft Office SharePoint Remote Code Execution Vulnerability
Inclusion of functionality from untrusted control sphere in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
CVE-2026-108135: Improper Link Resolution Before File Access
Improper link resolution before file access 'link following' in Windows Backup Engine allows an authorized attacker to elevate privileges locally...
CVE-2026-83783: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-70079: Windows DNS Denial of Service Vulnerability
Improper enforcement of behavioral workflow in Windows DNS allows an unauthorized attacker to deny service over a network...
CVE-2026-69633: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Update allows an authorized attacker to elevate privileges locally...
CVE-2026-83569: Heap-based Buffer Overflow
Heap-based buffer overflow in HID Parser Library allows an authorized attacker to elevate privileges locally...
CVE-2026-97804: Heap-based Buffer Overflow
Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-85376: Windows Print Spooler Components Elevation of Privilege Vulnerability
Weak authentication in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...
CVE-2026-97809: Use After Free
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-85933: Windows Print Spooler Components Elevation of Privilege Vulnerability
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-83736: Windows Kernel Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-108974: Unrestricted Upload of File with Dangerous Type
A vulnerability was identified in SourceCodester E-Learning System 1.0. This affects the function saveusers of the file /classes/Users.php?f=save. Such manipulation of the argument img leads to unrestricted upload. The attack can be launched remotely. The exploit is publicly available and might b...
CVE-2026-102226: Improper Limitation of a Pathname to a Restricted Directory
Improper limitation of a pathname to a restricted directory 'path traversal' in Dynamics Business Central allows an authorized attacker to elevate privileges over a network...
CVE-2026-69634: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network...