412514 matches found
CVE-2026-96934: Use After Free
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network...
CVE-2026-96217: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally...
CVE-2026-96219: Out-of-bounds Write
Out-of-bounds write in Windows Local Security Authority Subsystem Service LSASS allows an unauthorized attacker to execute code over a network...
CVE-2026-96850: Use of Uninitialized Resource
Use of uninitialized resource in Windows Modern Device Management MDM allows an authorized attacker to disclose information locally...
CVE-2026-96924: Untrusted Pointer Dereference
Untrusted pointer dereference in Windows OLE allows an unauthorized attacker to execute code over a network...
CVE-2026-96846: Out-of-bounds Read
Out-of-bounds read in WebDAV allows an authorized attacker to disclose information locally...
CVE-2026-96915: Integer Overflow or Wraparound
Integer overflow or wraparound in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally...
CVE-2026-96216: Use After Free
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-96118: Out-of-bounds Read
Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-96183: Missing Authentication for Critical Function
Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to disclose information locally...
CVE-2026-96186: Deserialization of Untrusted Data
Deserialization of untrusted data in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally...
CVE-2026-96306: Out-of-bounds Read
Out-of-bounds read in Windows Sysmain Service allows an authorized attacker to elevate privileges locally...
CVE-2026-96209: Out-of-bounds Read
Out-of-bounds read in Windows Network File System allows an authorized attacker to elevate privileges locally...
CVE-2026-96243: Improper Link Resolution Before File Access
Improper link resolution before file access 'link following' in Windows WalletService allows an authorized attacker to elevate privileges locally...
CVE-2026-96244: Use After Free
Use after free in Windows Internal System User Profile allows an authorized attacker to elevate privileges locally...
CVE-2026-96849: Use of Uninitialized Resource
Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally...
CVE-2026-96253: Use After Free
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-96325: Missing Reference to Active Allocated Resource
Missing reference to active allocated resource in Windows SMB Server allows an unauthorized attacker to deny service over a network...
CVE-2026-96304: Use After Free
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-81839: Incorrect Authorization
GitLab has remediated an issue in GitLab EE affecting all versions from 18.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to execute arbitrary CI/CD pipelines in a transferred project with the new group's...
Microsoft SQL Server: CVE-2026-85886: Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...
CVE-2026-109828: Use of Uninitialized Variable
A vulnerability was found in libsndfile up to 1.2.2. This issue affects the function wavlikesubchunkparse of the file src/wavlike.c of the component WAV Parsing. Performing a manipulation results in use of uninitialized variable. Remote exploitation of the attack is possible. The exploit has been...
Microsoft Windows: CVE-2026-96917: Windows PCI Bus Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-83781: Improper Null Termination
Improper null termination in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...
CVE-2026-96860: Out-of-bounds Read
Out-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose information locally...
CVE-2026-15468: Authorization Bypass Through User-Controlled Key
Authorization bypass through User-Controlled key vulnerability in HYPR Passwordless on Windows allows Privilege Escalation. This issue affects HYPR Passwordless: before 11.3.3...
CVE-2026-95633: Improper Verification of Cryptographic Signature
CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does no...
CVE-2026-69942: Buffer Over-read
Buffer over-read in Windows Overlay Filter allows an authorized attacker to execute code locally...
CVE-2026-83587: Untrusted Pointer Dereference
Untrusted pointer dereference in Windows Core Messaging allows an authorized attacker to elevate privileges locally...
CVE-2026-70116: Stack-based Buffer Overflow
Stack-based buffer overflow in Windows Resilient File System ReFS allows an unauthorized attacker to bypass a security feature with a physical attack...
Microsoft Windows: CVE-2026-96950: Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...
CVE-2026-85352: Use After Free
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...
CVE-2026-70121: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-105003: Heap-based Buffer Overflow
Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally...
CVE-2026-70256: Heap-based Buffer Overflow
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-85797: Windows GDI Information Disclosure Vulnerability
Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network...
CVE-2026-70017: Access of Resource Using Incompatible Type
Access of resource using incompatible type 'type confusion' in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally...
CVE-2026-69675: Out-of-bounds Read
Out-of-bounds read in Windows Network File System allows an authorized attacker to disclose information locally...
CVE-2026-97763: Heap-based Buffer Overflow
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...
CVE-2026-70086: Use After Free
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
CVE-2026-104192: Double Free
Dragonfly is an in-memory data store built for modern application workloads. Prior to 1.40, OpaqueObjLoader::CreateStream in src/server/rdbload.cc can associate one streamNACK with a consumer group's global PEL and a consumer-local PEL, then free the shared object when a duplicate consumer entry ...
CVE-2026-97739: Integer Underflow (Wrap or Wraparound)
Integer underflow wrap or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...
CVE-2026-70202: Server-Side Request Forgery (SSRF)
Server-side request forgery ssrf in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...
CVE-2026-77459: Incorrect Authorization
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.10.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, Argo CD creates PostDelete resource hooks without applying the AppProject destination and resource authorization checks used during ordinary synchronization. The omitt...
CVE-2026-96234: Origin Validation Error
Origin validation error in .NET allows an unauthorized attacker to disclose information over a network...
Microsoft .NET: CVE-2026-96234: .NET Information Disclosure Vulnerability
Origin validation error in .NET allows an unauthorized attacker to disclose information over a network...
Microsoft Visual Studio: CVE-2026-70162: .NET Denial of Service Vulnerability
A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET web application. A remote unauthenticated attacker could exploit this...
CVE-2026-83935: Heap-based Buffer Overflow
Heap-based buffer overflow in Microsoft XML allows an unauthorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-96953: Windows Universal Disk Format File System Driver (UDFS) Remote Code Execution Vulnerability
Null pointer dereference in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to execute code locally...
CVE-2026-104340: Heap-based Buffer Overflow
Adobe Framemaker is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...