412514 matches found
CVE-2026-96925: Integer Underflow (Wrap or Wraparound)
Integer underflow wrap or wraparound in Windows NTFS allows an authorized attacker to disclose information locally...
CVE-2026-96943: Integer Overflow or Wraparound
Integer overflow or wraparound in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network...
CVE-2026-63152: Improper Neutralization of Special Elements used in an SQL Command
Omnispace Agora Project before 26.10.0 contains a second-order SQL injection vulnerability that allows authenticated attackers to inject malicious SQL via the idCategoryFilter parameter, which is persisted into the session and later concatenated into a SQL statement without parameterization...
CVE-2026-109964: Buffer Underwrite
ImageMagick before 7.1.2-33 and 6.9.13-58 contains a heap buffer underwrite vulnerability in DecodeImage in coders/pict.c on 32-bit builds due to pointer arithmetic overflow. Attackers can supply a crafted PICT file with maximized row, column and bytes-per-line values to bypass bounds checks and...
CVE-2026-70151: Use After Free
Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally...
CVE-2026-89198: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in RUGGEDCOM CROSSBOW All versions V6.0. Affected devices do not properly validate or sanitize the filename of firmware files uploaded to the system. This could allow an authenticated attacker with specific privileges to execute arbitrary SQL commands on the...
CVE-2026-96953: NULL Pointer Dereference
Null pointer dereference in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to execute code locally...
CVE-2026-48398: Improper Neutralization of Input During Web Page Generation
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in...
CVE-2026-96866: Out-of-bounds Read
Out-of-bounds read in Network Device Enrollment Service NDES allows an unauthorized attacker to deny service over a network...
CVE-2026-83756: Use After Free
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...
CVE-2026-96856: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally...
CVE-2026-74041: Improper Handling of Case Sensitivity
Wazuh 4.14.3 before 4.14.8 contains a case-sensitivity mismatch between the ossec.conf validator and wazuh-logcollector that bypasses remote-command validation. Authenticated users with manager:updateconfig can inject an uppercase LOGFORMAT command localfile that the collector runs as root on...
CVE-2026-85375: Use After Free
Use after free in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-96300: RPC Endpoint Mapper Service Denial of Service Vulnerability
Uncontrolled resource consumption in RPC Endpoint Mapper Service allows an unauthorized attacker to deny service over a network...
CVE-2026-96916: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally...
CVE-2026-63154: Improper Neutralization of Special Elements used in an SQL Command
Omnispace Agora Project before 26.10.0 contains a SQL identifier injection vulnerability that allows a space administrator to escalate privileges by supplying caller-controlled agoraFields names as unvalidated SQL column identifiers during the user import flow. Attackers can inject privileged...
CVE-2026-109725: Use After Free
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...
CVE-2026-109724: Use After Free
Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...
CVE-2026-107682: Improper Neutralization of Input During Web Page Generation
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in...
CVE-2026-83758: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to execute code locally...
CVE-2026-96096: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network...
CVE-2026-97009: Heap-based Buffer Overflow
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
Microsoft Windows: CVE-2026-83846: Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability
Use after free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...
CVE-2026-97016: Heap-based Buffer Overflow
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...
CVE-2026-70138: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally...
CVE-2026-97826: Out-of-bounds Read
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
CVE-2026-87702: Integer Overflow or Wraparound
Integer overflow or wraparound in Windows Resource Management MRM allows an authorized attacker to elevate privileges locally...
CVE-2026-84013: Use After Free
Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally...
CVE-2026-85376: Weak Authentication
Weak authentication in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...
CVE-2026-96949: Concurrent Execution using Shared Resource with Improper Synchronization
Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...
CVE-2026-104085: Improper Neutralization of Special Elements used in an OS Command
odt2spip plugin for SPIP before 4.4.0 contains an OS command injection vulnerability that allows authenticated authors to execute arbitrary commands by uploading a document with a maliciously crafted filename through the document import form. Attackers can embed shell metacharacters such as $id i...
Microsoft Windows: CVE-2026-69970: Kernel Streaming Service Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-69639: Windows libarchive Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-85324: Active Directory Federation Services (AD FS) Denial of Service Vulnerability
Memory allocation with excessive size value in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...
CVE-2026-70118: Use After Free
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally...
CVE-2026-97799: Improper Verification of Cryptographic Signature
Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally...
CVE-2026-97761: Stack-based Buffer Overflow
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...
CVE-2026-83770: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network...
CVE-2026-83919: Heap-based Buffer Overflow
Heap-based buffer overflow in Microsoft Internet Messaging API allows an authorized attacker to execute code locally...
CVE-2026-109680: Out-of-bounds Write
FreeRDP 3.18.0 before 3.32.0 has a heap-based out-of-bounds write in freerdpinterruptiblegetline, which shrinks the buffer to 32 bytes while keeping a pre-filled suggested username's length as its write offset. A malicious or compromised ARM routing service can return a long redirectedUsername th...
CVE-2026-104348: Heap-based Buffer Overflow
Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
Microsoft Windows: CVE-2026-83703: Windows Wi-Fi Driver Denial of Service Vulnerability
Out-of-bounds read in Windows Wi-Fi Driver allows an unauthorized attacker to deny service over an adjacent network...
CVE-2026-97007: Heap-based Buffer Overflow
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-100201: Windows Client License Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Client License Service allows an authorized attacker to elevate privileges locally...
CVE-2026-83674: Weak Authentication
Weak authentication in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-85800: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
CVE-2026-108973: Unrestricted Upload of File with Dangerous Type
A vulnerability was determined in SourceCodester Contact Tracing System 1.0. Affected by this issue is the function moveuploadedfile of the file /classes/Users.php?f=save. This manipulation of the argument img/id causes unrestricted upload. The attack can be initiated remotely. The exploit has be...
CVE-2026-97001: Heap-based Buffer Overflow
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally...