414831 matches found
Microsoft Windows: CVE-2026-96096: Windows Media Player Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-85926: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
Use after free in Windows Secure Socket Tunneling Protocol SSTP allows an unauthorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-88147: Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Secure Socket Tunneling Protocol SSTP allows an authorized attacker to elevate privileges locally...
CVE-2026-85926: Use After Free
Use after free in Windows Secure Socket Tunneling Protocol SSTP allows an unauthorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-96847: WebDAV Elevation of Privilege Vulnerability
Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally...
CVE-2026-77816: Improper Certificate Validation
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 administrative client could allow man-in-the-middle attacks. An attacker could exploit this vulnerability to obtain sensitive information...
CVE-2026-75994: Incorrect Authorization
ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. The vulnerable component is restricted to an administrative network zone by...
CVE-2026-70255: Heap-based Buffer Overflow
Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-96316: Missing Authorization
Improper access control in Windows Routing and Remote Access Service RRAS allows an authorized attacker to perform tampering locally...
CVE-2026-95633: Improper Verification of Cryptographic Signature
CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does no...
CVE-2026-110076: Improper Neutralization of Input During Web Page Generation
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in...
CVE-2026-85856: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Internet Connection Sharing ICS allows an authorized attacker to execute code over an adjacent network...
CVE-2026-85805: Improperly Implemented Security Check for Standard
Improperly implemented security check for standard in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-49950: Deserialization of Untrusted Data
Xorbits Xoscar through 0.11.2 contains an unauthenticated deserialization vulnerability that allows remote attackers to execute arbitrary code by sending crafted data over the actor-pool TCP channel. Attackers can exploit SocketChannel.recv passing unvalidated data to cloudpickle.loads, which...
CVE-2026-97774: Time-of-check Time-of-use (TOCTOU) Race Condition
Time-of-check time-of-use toctou race condition in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally...
CVE-2026-88183: Out-of-bounds Read
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network...
CVE-2026-78335: Incorrect Authorization
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user holding a project-scoped fine-grained Personal Access Token to modify integrations...
CVE-2026-89118: Files or Directories Accessible to External Parties
SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to access restricted resources and retrieve non-critical application information, which leads to Low impact on Confidentiality, but there is no impact on Integrity and Availability of the application...
CVE-2026-70025: Use After Free
Use after free in Windows Netlogon allows an authorized attacker to deny service over a network...
CVE-2026-88192: Out-of-bounds Read
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network...
CVE-2026-88102: Use After Free
Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network...
CVE-2026-69227: Missing Authentication for Critical Function
A flaw in Portal for ArcGIS allows unauthenticated access to certain Portal Administrator API endpoints under specific conditions. This could enable an attacker to access administrative functionality that should require authentication...
Microsoft Office: CVE-2026-100212: Microsoft Office Excel Remote Code Execution Vulnerability
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-83776: Windows Bluetooth Driver Elevation of Privilege Vulnerability
Out-of-bounds read in Microsoft Bluetooth Driver allows an unauthorized attacker to elevate privileges with a physical attack...
Microsoft Office: CVE-2026-88185: Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-96844: Microsoft Bluetooth Driver Elevation of Privilege Vulnerability
Integer underflow wrap or wraparound in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges over an adjacent network...
CVE-2026-70244: Out-of-bounds Read
Out-of-bounds read in DNS Server allows an unauthorized attacker to disclose information over a network...
Microsoft Windows: CVE-2026-69634: Windows iSCSI Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-70235: Windows Event Tracing Spoofing Vulnerability
Improper authentication in Windows Event Tracing allows an authorized attacker to perform spoofing locally...
CVE-2026-100200: Use After Free
Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-70299: Windows Bind Filter Driver Elevation of Privilege Vulnerability
Improper access control in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally...
Microsoft SharePoint: CVE-2026-88155: Microsoft Office SharePoint Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
CVE-2026-85808: Out-of-bounds Read
Out-of-bounds read in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to deny service over a network...
Microsoft Windows: CVE-2026-83567: Windows NTFS Elevation of Privilege Vulnerability
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally...
CVE-2026-83567: Out-of-bounds Read
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-100222: Network Policy Server (NPS) Remote Code Execution Vulnerability
Heap-based buffer overflow in Network Policy Server NPS allows an unauthorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-102208: Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...
CVE-2026-97751: Heap-based Buffer Overflow
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...
CVE-2025-58774: Buffer Access with Incorrect Length Value
AMI APTIOV contains vulnerabilities in BIOS where users may cause “Buffer Access with Incorrect Length Value” by local access. Successful exploitation of this vulnerability could lead to buffer overflows, memory corruption, and arbitrary code execution, and also impact Confidentiality, Integrity,...
CVE-2026-88833: Integer Underflow (Wrap or Wraparound)
A flaw was found in BusyBox's udhcpc DHCP client. When processing raw DHCP packets, the client replaces the validated packet length with an attacker-controlled value from the IP header without re-validating the minimum size. This leads to an integer underflow when subtracting header sizes, causin...
CVE-2026-83712: Out-of-bounds Write
Out-of-bounds write in Windows NTFS allows an authorized attacker to execute code locally...
CVE-2026-96217: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-108136: Microsoft Windows Search Component Elevation of Privilege Vulnerability
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
CVE-2026-83862: Use After Free
Use after free in Windows Network Load Balancing allows an unauthorized attacker to execute code over a network...
CVE-2026-70297: Absolute Path Traversal
Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-102211: Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
Use after free in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-85329: Microsoft Account Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Account allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-85810: Windows Telephony Server Elevation of Privilege Vulnerability
Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally...
CVE-2026-84013: Use After Free
Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-84013: Windows Telephony Server Elevation of Privilege Vulnerability
Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally...