414110 matches found
CVE-2026-96238: Origin Validation Error
Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network...
Microsoft ASP.NET: CVE-2026-70175: ASP.NET Core Elevation of Privilege Vulnerability
Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network...
Microsoft ASP.NET: CVE-2026-70181: ASP.NET Core Denial of Service Vulnerability
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...
Microsoft .NET: CVE-2026-66822: .NET Information Disclosure Vulnerability
Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network...
Microsoft .NET: CVE-2026-96238: .NET Security Feature Bypass Vulnerability
Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network...
Microsoft Office: CVE-2026-102867: Microsoft Office Word Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...
Microsoft Office: CVE-2026-105591: Microsoft Office Access Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...
Microsoft Office: CVE-2026-105592: Microsoft Office Access Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...
Microsoft Office: CVE-2026-105593: Microsoft Office Access Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...
Microsoft Office: CVE-2026-105596: Microsoft Office Access Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...
Microsoft Office: CVE-2026-105597: Microsoft Office Access Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...
Microsoft Office: CVE-2026-105717: Microsoft Office Access Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...
Microsoft Visual Studio: CVE-2026-96225: .NET Elevation of Privilege Vulnerability
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-105723: Windows Distributed File System (DFS) Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Distributed File System DFS allows an unauthorized attacker to elevate privileges over a network...
Microsoft Windows: CVE-2026-108399: Windows Hyper-V Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-70235: Windows Event Tracing Spoofing Vulnerability
Improper authentication in Windows Event Tracing allows an authorized attacker to perform spoofing locally...
Microsoft Windows: CVE-2026-96183: Windows Health and Optimized Experiences Service Information Disclosure Vulnerability
Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to disclose information locally...
CVE-2026-103558: Deadlock
Deadlock in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to deny service over a network...
CVE-2026-100116: Improper Certificate Validation
CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploit depends on conditions beyond the attacker's...
CVE-2026-71385: Incorrect Authorization
ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. The vulnerable component is restricted to an...
CVE-2026-83916: Double Free
Double free in Windows Error Reporting allows an authorized attacker to execute code locally...
CVE-2026-85800: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
CVE-2026-83840: Weak Authentication
Weak authentication in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
CVE-2026-83826: Untrusted Pointer Dereference
Untrusted pointer dereference in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
CVE-2026-83748: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network...
CVE-2026-83758: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to execute code locally...
CVE-2026-85354: Use After Free
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
Microsoft Office: CVE-2026-97739: Microsoft Office Excel Remote Code Execution Vulnerability
Integer underflow wrap or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...
CVE-2026-70186: Deadlock
Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network...
CVE-2026-70090: Use of Uninitialized Resource
Use of uninitialized resource in Windows Netlogon allows an authorized attacker to disclose information locally...
CVE-2026-70153: Heap-based Buffer Overflow
Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network...
CVE-2026-69651: Inefficient Algorithmic Complexity
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network...
CVE-2026-97750: Stack-based Buffer Overflow
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...
CVE-2026-108958: Deserialization of Untrusted Data
A weakness has been identified in TensorLayer up to 2.2.4. This affects the function loadhdf5graph of the file tensorlayer/files/utils.py of the component HDF5 Loading. Executing a manipulation of the argument modelconfig can lead to deserialization. The attack can be executed remotely. The explo...
Microsoft Windows: CVE-2026-85902: Windows Direct Composition Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-69783: Windows Update Elevation of Privilege Vulnerability
External control of file name or path in Windows Update allows an authorized attacker to elevate privileges locally...
CVE-2026-108132: Double Free
Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally...
CVE-2026-106618: Incorrect Authorization
ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction...
CVE-2026-96300: Allocation of Resources Without Limits or Throttling
Uncontrolled resource consumption in RPC Endpoint Mapper Service allows an unauthorized attacker to deny service over a network...
CVE-2026-70127: Use After Free
Use after free in DNS Server allows an unauthorized attacker to execute code over a network...
CVE-2026-69783: External Control of File Name or Path
External control of file name or path in Windows Update allows an authorized attacker to elevate privileges locally...
CVE-2026-109964: Buffer Underwrite
ImageMagick before 7.1.2-33 and 6.9.13-58 contains a heap buffer underwrite vulnerability in DecodeImage in coders/pict.c on 32-bit builds due to pointer arithmetic overflow. Attackers can supply a crafted PICT file with maximized row, column and bytes-per-line values to bypass bounds checks and...
CVE-2026-75994: Incorrect Authorization
ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. The vulnerable component is restricted to an administrative network zone by...
Microsoft Windows: CVE-2026-83916: Windows Error Reporting Remote Code Execution Vulnerability
Double free in Windows Error Reporting allows an authorized attacker to execute code locally...
Microsoft Windows: CVE-2026-85834: Windows TCP/IP Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-83748: Windows Error Reporting Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-83758: Windows Error Reporting Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to execute code locally...
Microsoft Windows: CVE-2026-85800: Windows Error Reporting Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-85354: Windows Error Reporting Elevation of Privilege Vulnerability
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-83840: Windows Error Reporting Elevation of Privilege Vulnerability
Weak authentication in Windows Error Reporting allows an authorized attacker to elevate privileges locally...