415636 matches found
CVE-2026-100217: Missing Authorization
Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privileges locally...
CVE-2026-100214: Deserialization of Untrusted Data
Deserialization of untrusted data in Dynamics Business Central allows an authorized attacker to execute code over a network...
CVE-2026-100216: Stack-based Buffer Overflow
Stack-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally...
CVE-2026-108396: Time-of-check Time-of-use (TOCTOU) Race Condition
Time-of-check time-of-use toctou race condition in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...
CVE-2026-102851: Incorrect Privilege Assignment
Incorrect privilege assignment in Visual Studio Code allows an authorized attacker to bypass a security feature locally...
CVE-2026-100212: Use After Free
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...
CVE-2026-100210: Heap-based Buffer Overflow
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...
CVE-2026-100209: Use After Free
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...
CVE-2026-100211: Use After Free
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...
CVE-2026-100205: Untrusted Pointer Dereference
Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally...
CVE-2026-100203: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally...
CVE-2026-88094: Improper Neutralization of Special Elements in Output Used by a Downstream Component
Improper neutralization of special elements in output used by a downstream component 'injection' in Azure Storage Library allows an authorized attacker to elevate privileges over a network...
CVE-2026-96937: Use After Free
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
CVE-2026-85866: Exposure of Sensitive System Information to an Unauthorized Control Sphere
Exposure of sensitive system information to an unauthorized control sphere in Windows ALPC allows an authorized attacker to disclose information locally...
CVE-2026-96929: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-96931: Untrusted Pointer Dereference
Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally...
CVE-2026-96934: Use After Free
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network...
CVE-2026-96930: Out-of-bounds Read
Out-of-bounds read in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to disclose information locally...
CVE-2026-96927: Out-of-bounds Read
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally...
CVE-2026-96933: Untrusted Pointer Dereference
Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...
CVE-2026-96923: Use After Free
Use after free in Windows Workstation Service allows an authorized attacker to elevate privileges locally...
CVE-2026-96917: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-96915: Integer Overflow or Wraparound
Integer overflow or wraparound in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally...
CVE-2026-96913: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-96912: Use After Free
Use after free in Windows Client License Service allows an authorized attacker to elevate privileges locally...
CVE-2026-96911: Improper Link Resolution Before File Access
Improper link resolution before file access 'link following' in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
CVE-2026-96909: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to execute code over a network...
CVE-2026-96852: Use After Free
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally...
CVE-2026-96847: Untrusted Pointer Dereference
Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally...
CVE-2026-96844: Integer Underflow (Wrap or Wraparound)
Integer underflow wrap or wraparound in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges over an adjacent network...
CVE-2026-61642: Inconsistent Interpretation of HTTP Requests
Squid is a caching proxy for the Web. From 3.3.0.1 to before 7.6, due to an improper enforcement of behavioral workflow bug, Squid is vulnerable to a Request Smuggling attack against HTTP/1.1 Transfer-Encoding. HTTP header parsing src/HttpHeader.cc accepted the bare Transfer-Encoding: identity...
CVE-2026-102870: Improper Control of Generation of Code
Improper control of generation of code 'code injection' in ASP.NET Core allows an unauthorized attacker to execute code over a network...
CVE-2026-105016: Heap-based Buffer Overflow
Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network...
CVE-2026-58280: Uncontrolled Recursion
Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network...
CVE-2026-66822: Insertion of Sensitive Information Into Sent Data
Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network...
CVE-2026-69651: Inefficient Algorithmic Complexity
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network...
CVE-2026-70007: Out-of-bounds Write
Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network...
CVE-2026-70035: Deserialization of Untrusted Data
Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code over a network...
CVE-2026-70159: Allocation of Resources Without Limits or Throttling
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...
CVE-2026-70161: Improper Limitation of a Pathname to a Restricted Directory
Improper limitation of a pathname to a restricted directory 'path traversal' in .NET allows an authorized attacker to elevate privileges locally...
CVE-2026-70162: Asymmetric Resource Consumption (Amplification)
A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET web application. A remote unauthenticated attacker could exploit this...
CVE-2026-70165: Improper Link Resolution Before File Access
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...
CVE-2026-70174: Improperly Implemented Security Check for Standard
Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network...
CVE-2026-70175: Weak Password Recovery Mechanism for Forgotten Password
Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-70179: Authentication Bypass by Spoofing
Authentication bypass by spoofing in ASP.NET Core allows an authorized attacker to elevate privileges over a network...
CVE-2026-70181: Allocation of Resources Without Limits or Throttling
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...
CVE-2026-70183: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent execution using shared resource with improper synchronization 'race condition' in ASP.NET Core allows an authorized attacker to elevate privileges over a network...
CVE-2026-70186: Deadlock
Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network...
CVE-2026-70188: Inconsistent Interpretation of HTTP Requests
Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-70190: Improper Link Resolution Before File Access
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...