414831 matches found
CVE-2026-110140: Access of Resource Using Incompatible Type
Type confusion in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-110144: Incorrect Authorization
Incorrect authorization in Mojo in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: High...
CVE-2026-100114: Improper Access Control
CAI Content Credentials is affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interactio...
Microsoft Windows: CVE-2026-85324: Active Directory Federation Services (AD FS) Denial of Service Vulnerability
Memory allocation with excessive size value in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...
CVE-2026-85935: Buffer Over-read
Buffer over-read in Windows USB Driver allows an authorized attacker to disclose information locally...
CVE-2026-88169: Out-of-bounds Read
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...
Microsoft Windows: CVE-2026-88098: Windows Security Support Provider Interface Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Security Support Provider Interface allows an authorized attacker to elevate privileges locally...
CVE-2026-85337: Out-of-bounds Read
Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network...
Microsoft Windows: CVE-2026-85374: Windows Installer Information Disclosure Vulnerability
Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally...
Microsoft Windows: CVE-2026-83679: Windows Defender Firewall Service Elevation of Privilege Vulnerability
Use after free in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally...
CVE-2026-85852: Out-of-bounds Read
Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally...
CVE-2026-102201: Use After Free
Use after free in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally...
CVE-2026-85938: Missing Authorization
Improper access control in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally...
CVE-2026-110145: Use After Free
Use after free in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-70207: Heap-based Buffer Overflow
Heap-based buffer overflow in Network Policy Server NPS allows an authorized attacker to execute code over a network...
CVE-2026-85830: Out-of-bounds Read
Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally...
CVE-2026-0893: Exposure of Sensitive Information Due to Incompatible Policies
AMI APTIOV contains a vulnerability in BIOS where an attacker may cause “Exposure of Sensitive Information to an Unauthorized Actor” by local access. Successful exploitation of this vulnerability can lead to information disclosure, privilege escalation, and further impact on Confidentiality,...
CVE-2026-89206: Client-Side Enforcement of Server-Side Security
A vulnerability has been identified in RUGGEDCOM CROSSBOW All versions V6.0. Affected devices do not properly perform server-side authorization checks for requests to modify the state of scheduled actions. This could allow an authenticated attacker with minimal privileges to retry, stop, or delet...
CVE-2026-74033: Improper Limitation of a Pathname to a Restricted Directory
Wazuh from 4.1.1 before 4.14.8 contains a path traversal vulnerability in the getlists and deletelistfile CDB list handlers that allows compromised cluster workers to read or delete master files. Attackers can send traversal or absolute-path filenames through the internal cluster RPC path,...
Microsoft Windows: CVE-2026-96245: Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
Out-of-bounds read in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to disclose information over a network...
Microsoft Windows: CVE-2026-83568: Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability
Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally...
Microsoft .NET: CVE-2026-96224: .NET Remote Code Execution Vulnerability
Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network...
Microsoft .NET: CVE-2026-96235: .NET Remote Code Execution Vulnerability
Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network...
Microsoft .NET: CVE-2026-70174: .NET Remote Code Execution Vulnerability
Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network...
Microsoft .NET: CVE-2026-96232: .NET Information Disclosure Vulnerability
Out-of-bounds read in .NET allows an unauthorized attacker to disclose information over a network...
CVE-2026-109950: Out-of-bounds Read
FreeRDP from 3.0.0 before 3.32.0 contains a heap out-of-bounds read vulnerability that allows a malicious RD Gateway to crash clients by sending mismatched message lengths. Attackers controlling the gateway can set MsgBytes far larger than the NDR string ActualCount in consent or service messages...
CVE-2026-79609: Undefined Security Weakness
XPTI Xen Page Table Isolation was introduced to mitigate Meltdown CVE-2017-5754, one aspect of XSA-254. This involves copying 64-bit PV guest page table entries from guest-chosen root page tables to the Xen- chosen one which is in actual use by hardware. To read the guest root page table, the...
CVE-2026-70174: Improperly Implemented Security Check for Standard
Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network...
CVE-2026-96224: Out-of-bounds Write
Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network...
CVE-2026-96229: Permissive List of Allowed Inputs
Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information over a network...
CVE-2026-96232: Out-of-bounds Read
Out-of-bounds read in .NET allows an unauthorized attacker to disclose information over a network...
CVE-2026-96235: Out-of-bounds Write
Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network...
CVE-2026-85792: Use After Free
Remote Code Execution in Windows Routing and Remote Access Service RRAS allows attacker to gain an unauthorized access to victim's machine...
CVE-2026-85794: Out-of-bounds Read
Out-of-bounds read in Windows Routing and Remote Access Service RRAS allows an authorized attacker to disclose information locally...
CVE-2026-104250: Improper Neutralization of Input During Web Page Generation
The unstructured library provides open-source components for ingesting and pre-processing images and text documents, such as PDFs, HTML, Word docs, and many more. Prior to 0.24.1, partitionhtmlhtmlparserversion="v2" and the VLM partitioner can preserve untrusted document tags, attributes, text, a...
CVE-2026-107605: Missing Authentication for Critical Function
SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to view live video feed without authentication...
CVE-2026-9218: Improper Input Validation
Insufficient input validation vulnerability in time server NTP setting of the listed NETGEAR models allows an attacker who is connected to the router’s local network and has the router’s administrator credentials to run unauthorized commands on the router. This vulnerability could impact the...
CVE-2026-69997: Use After Free
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
CVE-2026-108964: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodester Performance Indicator System 1.0. This affects an unknown part of the file /opils/admin/addproduct.php. Performing a manipulation of the argument prodcategory results in sql injection. The attack can be initiated remotely. The exploit has been made publ...
Microsoft SharePoint: CVE-2026-105713: Microsoft Office SharePoint Spoofing Vulnerability
Server-side request forgery ssrf in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over an adjacent network...
Microsoft Office: CVE-2026-105715: Microsoft Office Word Remote Code Execution Vulnerability
Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
Microsoft SharePoint: CVE-2026-105720: Microsoft Office SharePoint Elevation of Privilege Vulnerability
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...
Microsoft VS Code: CVE-2026-69370: Visual Studio Code Remote Code Execution Vulnerability
Improper neutralization of special elements used in a command 'command injection' in Visual Studio Code allows an unauthorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-108462: Windows Kernel Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally...
Microsoft Windows: CVE-2026-108466: Windows Kernel Denial of Service Vulnerability
Out-of-bounds read in Windows Kernel allows an unauthorized attacker to deny service over a network...
Microsoft Windows: CVE-2026-108465: Windows Update Delivery Optimization Elevation of Privilege Vulnerability
Use after free in Windows Update Delivery Optimization allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-49785: UEFI Secure Boot Security Feature Bypass Vulnerability
Improper resource shutdown or release in Windows UEFI allows an authorized attacker to bypass a security feature locally...
Microsoft Windows: CVE-2026-72968: Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability
Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-69363: Windows Error Reporting Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network...
Microsoft Windows: CVE-2026-70566: Windows Schannel Elevation of Privilege Vulnerability
Null pointer dereference in Windows Schannel allows an authorized attacker to elevate privileges locally...