414110 matches found
CVE-2026-83677: Missing Release of Memory after Effective Lifetime
Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over a network...
Microsoft Windows: CVE-2026-83573: Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows Kernel Mode Driver allows an unauthorized attacker to elevate privileges with a physical attack...
CVE-2026-88110: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-83925: Use of Uninitialized Resource
Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally...
CVE-2026-70262: Heap-based Buffer Overflow
Heap-based buffer overflow in WebDAV allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-83795: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows IKE Extension allows an unauthorized attacker to deny service over a network...
CVE-2026-70202: Server-Side Request Forgery (SSRF)
Server-side request forgery ssrf in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...
CVE-2026-70266: Improper Neutralization of Special Elements used in an SQL Command
Improper neutralization of special elements used in an sql command 'sql injection' in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...
Microsoft Windows: CVE-2026-83795: Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
Heap-based buffer overflow in Windows IKE Extension allows an unauthorized attacker to deny service over a network...
CVE-2026-70217: Improper Access Control
Improper access control in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network...
Microsoft SharePoint: CVE-2026-70217: Microsoft Office SharePoint Information Disclosure Vulnerability
Improper access control in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network...
Microsoft Windows: CVE-2026-83685: Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
Buffer over-read in Windows IKE Extension allows an authorized attacker to deny service over a network...
CVE-2026-83788: Buffer Over-read
Buffer over-read in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack...
CVE-2026-70251: Server-Side Request Forgery (SSRF)
Server-side request forgery ssrf in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...
Microsoft SharePoint: CVE-2026-70202: Microsoft Office SharePoint Elevation of Privilege Vulnerability
Server-side request forgery ssrf in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...
Microsoft SharePoint: CVE-2026-70266: Microsoft Office SharePoint Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an sql command 'sql injection' in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...
Microsoft Windows: CVE-2026-96853: Windows Win32 Kernel Subsystem Information Disclosure Vulnerability
Time-of-check time-of-use toctou race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...
CVE-2026-70298: Improper Limitation of a Pathname to a Restricted Directory
Improper limitation of a pathname to a restricted directory 'path traversal' in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network...
Microsoft SharePoint: CVE-2026-70251: Microsoft Office SharePoint Elevation of Privilege Vulnerability
Server-side request forgery ssrf in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...
CVE-2026-83674: Weak Authentication
Weak authentication in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...
Microsoft SharePoint: CVE-2026-70246: Microsoft Office SharePoint Elevation of Privilege Vulnerability
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...
Microsoft SharePoint: CVE-2026-70298: Microsoft Office SharePoint Information Disclosure Vulnerability
Improper limitation of a pathname to a restricted directory 'path traversal' in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network...
CVE-2026-70246: Incorrect Authorization
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...
CVE-2026-83685: Buffer Over-read
Buffer over-read in Windows IKE Extension allows an authorized attacker to deny service over a network...
CVE-2026-89105: Initialization of a Resource with an Insecure Default
The HybridTokenAuthenticator component of the SAP/cloud-security-services-integration-library accepts tokens from unintended ambient IAS/XSUAA bindings, potentially allowing unauthorized access. This vulnerability allows an attacker to gain unauthorized access to the system by using tokens that...
CVE-2026-84020: Use After Free
Use after free in Windows Routing and Remote Access Service RRAS allows an authorized attacker to elevate privileges locally...
CVE-2026-70057: Incorrect Authorization
Incorrect authorization in Windows Routing and Remote Access Service RRAS allows an authorized attacker to bypass a security feature locally...
CVE-2026-70134: Use After Free
Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally...
CVE-2026-85329: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Account allows an authorized attacker to elevate privileges locally...
Microsoft Windows Defender: CVE-2026-70264: Microsoft Defender Information Disclosure Vulnerability
Improper link resolution before file access 'link following' in Microsoft Defender allows an authorized attacker to disclose information locally...
Microsoft Office: CVE-2026-70282: Microsoft Office Outlook Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-83728: Windows Hyper-V Spoofing Vulnerability
Improper validation of syntactic correctness of input in Windows Hyper-V allows an authorized attacker to perform spoofing locally...
CVE-2026-63356: Improper Neutralization of Input During Web Page Generation
Affected devices do not properly sanitize calculated signal names contained in imported CSV trace files before including them in error messages on the Trace page. This could allow an attacker to social engineer an authorized user who holds the function right “Read diagnostics” into importing a...
Microsoft SharePoint: CVE-2026-70259: Microsoft Office SharePoint Information Disclosure Vulnerability
Server-side request forgery ssrf in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network...
CVE-2026-54700: Improper Input Validation
ConnectBot SSH Client Library is written in Kotlin with Kaitai Struct and KStateMachine. Prior to 0.3.1, the SSH protocol parser trusts attacker-controlled inner byte lengths and element counts without verifying that they fit in the containing packet. A malicious or compromised SSH server can...
Microsoft Windows: CVE-2026-70126: Windows Bluetooth Port Driver Remote Code Execution
Out-of-bounds read in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code over an adjacent network...
CVE-2026-65674: Deserialization of Untrusted Data
Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network...
CVE-2026-87705: Improper Verification of Source of a Communication Channel
Improper verification of source of a communication channel in Windows Hyper-V allows an unauthorized attacker to bypass a security feature over an adjacent network...
CVE-2026-84012: Double Free
Double free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network...
CVE-2026-78632: Incorrect Permission Assignment for Critical Resource
The Okta RADIUS Agent Windows installer assigns write permissions to the NT SERVICE\ALL SERVICES and CREATOR OWNER security principals on the directories containing the agent configuration, AES encryption key, and logs. These permissions allow any local service account on the host to read the AES...
CVE-2026-77096: Missing Authentication for Critical Function
CVFS contained a missing authentication condition affecting command execution. Software customers upgrade to resolved maintenance release. Update CVFS...
CVE-2026-102867: Out-of-bounds Read
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...
CVE-2026-105591: Heap-based Buffer Overflow
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...
CVE-2026-105592: Heap-based Buffer Overflow
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...
CVE-2026-105593: Heap-based Buffer Overflow
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...
CVE-2026-105596: Heap-based Buffer Overflow
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...
CVE-2026-105597: Heap-based Buffer Overflow
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...
CVE-2026-105717: Heap-based Buffer Overflow
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...
CVE-2026-105723: Untrusted Pointer Dereference
Untrusted pointer dereference in Windows Distributed File System DFS allows an unauthorized attacker to elevate privileges over a network...