412514 matches found
CVE-2026-85363: Integer Overflow or Wraparound
Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-79609: Undefined Security Weakness
XPTI Xen Page Table Isolation was introduced to mitigate Meltdown CVE-2017-5754, one aspect of XSA-254. This involves copying 64-bit PV guest page table entries from guest-chosen root page tables to the Xen- chosen one which is in actual use by hardware. To read the guest root page table, the...
CVE-2026-70174: Improperly Implemented Security Check for Standard
Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network...
CVE-2026-83520: Deserialization of Untrusted Data
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network...
CVE-2026-87699: Heap-based Buffer Overflow
Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally...
CVE-2026-97789: Use After Free
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
CVE-2026-69998: Use After Free
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
CVE-2026-85807: Integer Overflow or Wraparound
Integer overflow or wraparound in Windows USB Video Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-69996: Use After Free
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
CVE-2026-70249: Use After Free
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...
CVE-2026-69970: Heap-based Buffer Overflow
Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally...
CVE-2026-96853: Time-of-check Time-of-use (TOCTOU) Race Condition
Time-of-check time-of-use toctou race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...
CVE-2026-70089: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code over a network...
CVE-2026-70012: Use After Free
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
CVE-2026-78628: Improper Input Validation
The Okta Credential Provider for Windows does not validate a serialized credential buffer before interpreting it as a Kerberos logon structure. The buffer size and packed string offsets are not checked. Processing a malformed buffer can cause the credential provider process to terminate...
CVE-2026-69997: Use After Free
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
CVE-2026-69988: Use After Free
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
CVE-2026-83897: Exposure of Sensitive System Information to an Unauthorized Control Sphere
Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...
Microsoft Windows: CVE-2026-70076: Windows Win32k Elevation of Privilege Vulnerability
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...
CVE-2026-85939: Weak Authentication
Weak authentication in Windows Kernel allows an authorized attacker to bypass a security feature over a network...
CVE-2026-83681: Weak Authentication
Weak authentication in Microsoft PowerToys allows an authorized attacker to perform tampering locally...
Microsoft Windows: CVE-2026-83644: Windows Audio Service Elevation of Privilege Vulnerability
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-70176: Windows Win32k Elevation of Privilege Vulnerability
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-69963: Kernel Streaming Service Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally...
CVE-2026-85931: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Distributed File System DFS allows an authorized attacker to execute code over a network...
CVE-2026-61931: Use After Free
Use after free in Windows Perception Simulation Service allows an authorized attacker to elevate privileges locally...
CVE-2026-103822: Out-of-bounds Read
Substance3D - Designer is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious...
Microsoft Windows: CVE-2026-83582: Windows Graphics Kernel Information Disclosure Vulnerability
Use after free in Windows Graphics Kernel allows an authorized attacker to disclose information locally...
CVE-2026-85881: Stack-based Buffer Overflow
Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges over a network...
CVE-2026-83521: Out-of-bounds Read
Out-of-bounds read in Windows IKE Extension allows an authorized attacker to disclose information over a network...
CVE-2026-85990: Improper Privilege Management
Leantime is an open source project management system. Prior to 3.10.0, for the provisionally grouped account-creation and plugin-management surfaces, Leantime's JSON-RPC dispatcher in app/Domain/Api/Controllers/Jsonrpc.php exposes public API service methods, while PermissionEnforcer::enforce allo...
Microsoft Windows: CVE-2026-96248: Windows Host Guardian Service Denial of Service Vulnerability
Stack-based buffer overflow in Windows Host Guardian Service allows an unauthorized attacker to deny service over a network...
CVE-2026-85473: Improper Handling of Exceptional Conditions
The auth0/java-jwt library may terminate a thread if it receives a JWT with a timestamp claim exp, nbf, iat containing an out-of-range value. The condition occurs during token parsing, prior to signature verification. Repeated requests of this nature may lead to degraded availability of the...
CVE-2026-83876: Use After Free
Use after free in Windows Shell allows an authorized attacker to elevate privileges locally...
CVE-2026-70097: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to perform spoofing locally...
CVE-2026-83891: Stack-based Buffer Overflow
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-85853: Windows DWM Core Library Elevation of Privilege Vulnerability
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-87709: Windows Host Guardian Service Tampering Vulnerability
Improper access control in Windows Host Guardian Service allows an authorized attacker to perform tampering locally...
Microsoft Windows: CVE-2026-85855: Windows DWM Core Library Elevation of Privilege Vulnerability
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
CVE-2026-69913: Use After Free
Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network...
CVE-2026-83658: Missing Authorization
Improper access control in Windows Error Reporting allows an authorized attacker to disclose information locally...
CVE-2026-104345: Improper Input Validation
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user...
CVE-2026-108377: Improper Control of Generation of Code
dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.62.3 through 0.70.5, ClassRepresentation.rendermetaclass inserts a schema-controlled Avro record name into the quoted Meta.schemana...
CVE-2026-102988: Improper Neutralization of Special Elements in Data Query Logic
Plane is an open-source project management tool. Prior to 1.4.0, multiple issue-listing endpoints, including unauthenticated public deploy boards handled by IssueListSpaceEndpoint in apps/api/plane/space/views/issue.py, pass the user-controlled orderby parameter through orderissuequeryset in...
Microsoft Windows: CVE-2026-69840: Windows Certificates Elevation of Privilege Vulnerability
Use after free in Windows Certificates allows an authorized attacker to elevate privileges locally...
CVE-2026-83732: Use After Free
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...
CVE-2026-103825: Out-of-bounds Read
Substance3D - Designer is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious...
CVE-2026-83840: Weak Authentication
Weak authentication in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
CVE-2026-88081: Out-of-bounds Read
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...
CVE-2026-96863: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack...