414110 matches found
CVE-2026-105725: Use After Free
Use after free in Windows Security App allows an authorized attacker to elevate privileges locally...
CVE-2026-105598: Heap-based Buffer Overflow
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...
CVE-2026-105595: Out-of-bounds Read
Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to execute code over a network...
CVE-2026-105013: Deserialization of Untrusted Data
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
CVE-2026-97829: Out-of-bounds Read
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
CVE-2026-70122: Time-of-check Time-of-use (TOCTOU) Race Condition
Time-of-check time-of-use toctou race condition in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...
CVE-2026-105005: Out-of-bounds Write
Out-of-bounds write in Windows Schannel allows an unauthorized attacker to execute code over a network...
CVE-2026-97800: Incorrect Permission Assignment for Critical Resource
Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally...
CVE-2026-105009: Incorrect Default Permissions
Incorrect default permissions in Windows Server Update Service allows an authorized attacker to elevate privileges locally...
CVE-2026-97839: Out-of-bounds Read
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
CVE-2026-105007: Out-of-bounds Read
An elevation of privilege vulnerability exists in the Network Driver Interface Specification NDIS when ndis.sys fails to check the length of a buffer prior to copying memory to it. To exploit the vulnerability, in a local attack scenario, an attacker could run a specially crafted application to...
CVE-2026-105008: Authentication Bypass by Spoofing
No cwe for this issue in Windows Schannel allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-104343: NULL Pointer Dereference
Adobe Framemaker is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in...
Microsoft Windows: CVE-2026-96946: Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-83909: Windows Win32 Kernel Subsystem Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...
Microsoft Windows: CVE-2026-83897: Windows Win32 Kernel Subsystem Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...
CVE-2026-14552: Incorrect Authorization
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with Guest access to read confidential epic content meant to be restricted by external...
CVE-2026-88107: Use After Free
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-84016: Out-of-bounds Write
Out-of-bounds write in Windows EAPHost Service allows an authorized attacker to elevate privileges locally...
CVE-2026-83579: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Smart Card allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-85368: Windows TCP/IP Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally...
CVE-2026-84011: Incorrect Authorization
Incorrect authorization in Windows SMB Client allows an authorized attacker to bypass a security feature locally...
CVE-2026-88197: Heap-based Buffer Overflow
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-83665: Windows DHCP Server Denial of Service Vulnerability
Null pointer dereference in Windows DHCP Server allows an unauthorized attacker to deny service over a network...
Microsoft Windows: CVE-2026-96913: Windows Kernel Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-85832: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Background Intelligent Transfer Service BITS allows an authorized attacker to elevate privileges locally...
CVE-2026-105458: Reliance on Untrusted Inputs in a Security Decision
GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user holding a specific granular permission to obtain a GitLab Duo Agent Platform token that...
CVE-2026-55601: Improper Neutralization of Special Elements used in an OS Command
MultiTail is a utility for monitoring multiple log files in one terminal. In version 7.1.5 and earlier, the -ex and -eX execute-on-match feature appended attacker-controlled matched input to a configured command inside double quotes, then checkfilterexec in mt.c passed the constructed command...
CVE-2026-69922: Out-of-bounds Read
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network...
CVE-2026-70229: Incorrect Authorization
Incorrect authorization in Active Directory Domain Services allows an unauthorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-70164: Windows TCP/IP Elevation of Privilege Vulnerability
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally...
CVE-2026-102861: Missing Authorization
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...
CVE-2026-70051: Access of Resource Using Incompatible Type
Access of resource using incompatible type 'type confusion' in Windows SmartScreen allows an authorized attacker to elevate privileges locally...
CVE-2026-70054: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows NetBIOS allows an authorized attacker to elevate privileges locally...
CVE-2026-83688: Heap-based Buffer Overflow
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
CVE-2026-70006: Use After Free
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-88179: Windows DWM Core Library Elevation of Privilege Vulnerability
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
CVE-2026-69991: Use After Free
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
CVE-2026-69949: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Client for NFS allows an authorized attacker to elevate privileges locally...
CVE-2026-83854: Missing Authentication for Critical Function
Improper access control in Windows Notification allows an authorized attacker to disclose information locally...
CVE-2026-69802: Weak Authentication
Weak authentication in Network Device Enrollment Service NDES allows an unauthorized attacker to execute code over a network...
CVE-2026-69882: Untrusted Search Path
Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-83828: Windows MIDI Service Module Elevation of Privileges Vulnerability
Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...
CVE-2026-69521: Integer Overflow or Wraparound
Integer overflow or wraparound in Windows iSCSI allows an unauthorized attacker to execute code over a network...
CVE-2026-69935: Use After Free
Use after free in Windows Storage allows an authorized attacker to elevate privileges locally...
CVE-2026-85936: Double Free
Double free in Windows Shell allows an unauthorized attacker to execute code over a network...
CVE-2026-84015: Heap-based Buffer Overflow
Heap-based buffer overflow in Remote Access Point-to-Point Protocol PPP EAP-TLS allows an unauthorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-85810: Windows Telephony Server Elevation of Privilege Vulnerability
Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-88226: Windows Storage Port Driver Information Disclosure Vulnerability
Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack...
CVE-2026-85900: Deserialization of Untrusted Data
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...