414831 matches found
Gitlab Gitlab: CVE-2026-97229: Integer Overflow or Wraparound
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular...
CVE-2026-89107: Improper Control of Generation of Code
SAP S/4HANA Manage Substitution/Validation Rules does not sufficiently validate input processed by rule definition functionality that utilizes a domain-specific scripting language. An authenticated attacker with specific business privileges could submit specially crafted input, which is interpret...
CVE-2026-109680: Out-of-bounds Write
FreeRDP 3.18.0 before 3.32.0 has a heap-based out-of-bounds write in freerdpinterruptiblegetline, which shrinks the buffer to 32 bytes while keeping a pre-filled suggested username's length as its write offset. A malicious or compromised ARM routing service can return a long redirectedUsername th...
CVE-2026-70033: Missing Release of Memory after Effective Lifetime
Missing release of memory after effective lifetime in Remote Desktop Gateway Service allows an unauthorized attacker to deny service over a network...
CVE-2026-109697: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Brainstorm Force SureCart surecart allows Stored XSS.This issue affects SureCart: from n/a through 4.9.4...
CVE-2026-108974: Unrestricted Upload of File with Dangerous Type
A vulnerability was identified in SourceCodester E-Learning System 1.0. This affects the function saveusers of the file /classes/Users.php?f=save. Such manipulation of the argument img leads to unrestricted upload. The attack can be launched remotely. The exploit is publicly available and might b...
CVE-2026-95634: Server-Side Request Forgery (SSRF)
CAI Content Credentials is affected by a Server-Side Request Forgery SSRF vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed...
Microsoft Windows: CVE-2026-83668: Windows WLAN Service Information Disclosure Vulnerability
Out-of-bounds read in Windows WLAN Service allows an authorized attacker to disclose information locally...
Microsoft Windows: CVE-2026-100217: Windows Group Policy Elevation of Privilege Vulnerability
Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privileges locally...
CVE-2026-110211: Missing Authorization
iFlytek SkillHub through 0.2.22 contains a missing authorization vulnerability that allows any authenticated user to permanently delete other users' skills via DELETE /api/cli/v1/skills/namespace/slug. Attackers can locate targets through the anonymous search endpoint and trigger deletion without...
CVE-2026-54868: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in FolioVision FV Simpler SEO fv-all-in-one-seo-pack allows Stored XSS.This issue affects FV Simpler SEO: from n/a through 1.9.7...
Microsoft Windows: CVE-2026-69988: Remote Desktop Client Remote Code Execution Vulnerability
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
CVE-2026-69988: Use After Free
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-88071: Windows Hyper-V Elevation of Privilege Vulnerability
Double free in Windows Hyper-V allows an authorized attacker to elevate privileges locally...
CVE-2026-84011: Incorrect Authorization
Incorrect authorization in Windows SMB Client allows an authorized attacker to bypass a security feature locally...
CVE-2026-103499: Uncontrolled Resource Consumption
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 and IBM WebSphere Application Server 8.5, and 9.0 Liberty could allow a remote unauthenticated attacker to cause a denial of service due to uncontrolled resource consumption...
Microsoft Windows: CVE-2026-85863: Clipboard User Service Elevation of Privilege Vulnerability
Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-88194: Windows DWM Core Library Elevation of Privilege Vulnerability
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
CVE-2026-84008: Inefficient Algorithmic Complexity
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network...
Microsoft .NET Framework: CVE-2026-84008: .NET Denial of Service Vulnerability
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network...
Microsoft Windows: CVE-2026-69991: Remote Desktop Client Remote Code Execution Vulnerability
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
CVE-2026-69991: Use After Free
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
CVE-2026-96236: Allocation of Resources Without Limits or Throttling
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...
CVE-2026-86022: Improper Neutralization of Special Elements used in an OS Command
VNote is a note-taking platform. Prior to 4.3.0, SessionConfig::ExternalProgram::fetchCommand wraps a note path in double quotes and substitutes it into a command string that QProcess::startconst QString& reparses into arguments through ProcessUtils::startDetached. The automatic path in...
CVE-2026-104085: Improper Neutralization of Special Elements used in an OS Command
odt2spip plugin for SPIP before 4.4.0 contains an OS command injection vulnerability that allows authenticated authors to execute arbitrary commands by uploading a document with a maliciously crafted filename through the document import form. Attackers can embed shell metacharacters such as $id i...
CVE-2026-100126: Out-of-bounds Read
Bridge is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2026-100112: Out-of-bounds Write
Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2026-109679: NULL Pointer Dereference
FreeRDP 3.0.0-beta4 before 3.32.0 contains a NULL pointer dereference in armhandlerequestok when an ARM endpoint returns an empty HTTP 200 body. Attackers controlling the configured ARM gateway can return a zero-length body to pass NULL to strnlen and crash the connecting client...
CVE-2026-109945: Concurrent Execution using Shared Resource with Improper Synchronization
FreeRDP 3.0.0 before 3.32.0 contains a heap use-after-free vulnerability in smartcard emulation when SCARDIOCTLDISCONNECT and SCARDIOCTLTRANSMIT operate concurrently on one card handle. A malicious RDP server can overlap these IRPs through separate context workers to free and reuse the SCardHandl...
CVE-2026-109950: Out-of-bounds Read
FreeRDP from 3.0.0 before 3.32.0 contains a heap out-of-bounds read vulnerability that allows a malicious RD Gateway to crash clients by sending mismatched message lengths. Attackers controlling the gateway can set MsgBytes far larger than the NDR string ActualCount in consent or service messages...
CVE-2026-108490: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LeapWorx Premium Addons for Elementor premium-addons-for-elementor allows Stored XSS.This issue affects Premium Addons for Elementor: from n/a through 4.11.110...
CVE-2026-97774: Time-of-check Time-of-use (TOCTOU) Race Condition
Time-of-check time-of-use toctou race condition in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally...
CVE-2026-109162: Incorrect Behavior Order
Forms using FileUpload or ImageUpload elements with a custom saveToFileMount configured stored uploaded files in the default storage folder 1:/userupload/ instead of the configured destination. This could cause uploaded files to end up in a publicly accessible storage even though a restricted,...
Microsoft Windows: CVE-2026-85860: Windows Message Queuing Queue Manager Elevation of Privilege Vulnerability
Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-102073: Integer Underflow (Wrap or Wraparound)
A vulnerability has been identified in APOGEE MBC PPC BACnet All versions, APOGEE MBC PPC P2 Ethernet All versions, APOGEE MEC PPC BACnet All versions, APOGEE MEC PPC P2 Ethernet All versions, APOGEE PXC Compact BACnet All versions V3.5.7, APOGEE PXC Compact P2 Ethernet All versions V2.8.21, APOG...
CVE-2026-89097: Exposure of Sensitive Information to an Unauthorized Actor
The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.8.18 via the aiwpfooterhook. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract sensitive dat...
CVE-2026-96247: Use of Uninitialized Resource
Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally...
CVE-2026-70123: Numeric Truncation Error
Numeric truncation error in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-88179: Windows DWM Core Library Elevation of Privilege Vulnerability
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
CVE-2026-103030: Exposure of Sensitive Information to an Unauthorized Actor
Dio is a powerful HTTP client for Dart and Flutter. From 1.0.0 until 2.8.0, diohttp2adapter follows redirects in Http2Adapter.fetch by copying the original RequestOptions.headers into the redirected HTTP/2 request without comparing the source and destination origins. A server contacted by an...
CVE-2026-88106: Use After Free
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-103850: Out-of-bounds Read
Substance3D - Stager is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious...
Microsoft Windows: CVE-2026-96931: Windows NTFS Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-96848: Windows Win32 Kernel Subsystem Information Disclosure Vulnerability
Buffer over-read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...
Microsoft Windows: CVE-2026-83790: Windows Hello Elevation of Privilege Vulnerability
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...
CVE-2026-89203: Insertion of Sensitive Information Into Sent Data
A vulnerability has been identified in RUGGEDCOM CROSSBOW All versions V6.0. Affected devices do not properly restrict access to various database queries, allowing users to retrieve system-wide information that is not intended for their privilege level. This could allow an authenticated attacker ...
CVE-2026-88200: Privilege Context Switching Error
Privilege context switching error in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...
Microsoft Windows: CVE-2026-88181: Windows DWM Core Library Elevation of Privilege Vulnerability
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-88188: Windows DWM Core Library Elevation of Privilege Vulnerability
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...