412514 matches found
CVE-2026-107460: Server-Side Request Forgery (SSRF)
Server-Side Request Forgery SSRF protection in the UrlImageConverter component of Apache Fesod Incubating fesod-sheet 2.0.2-incubating can be bypassed through DNS rebinding. When an application accepts an attacker-controlled image URL for spreadsheet writing, the converter checks the hostname's...
CVE-2026-102194: Use After Free
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-104935: Authentication Bypass by Spoofing
Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands. This does not impact ICS version 22.7R2.14 or prior...
CVE-2026-96956: Stack-based Buffer Overflow
Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-102700: Undefined Security Weakness
With its original introduction, GNTTABcacheflush was made available uniformly. XSA-232 CVE-2017-14318 then covered an omitted NULL pointer check, yet the addition of that check failed to adjust the subsequent error path. That error path fails to drop a page reference in case the specified page is...
Microsoft .NET: CVE-2026-70007: .NET Framework Remote Code Execution Vulnerability
Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network...
Microsoft SQL Server: CVE-2026-96956: SQL Server Elevation of Privilege Vulnerability
Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network...
Microsoft .NET: CVE-2026-70174: .NET Remote Code Execution Vulnerability
Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network...
Microsoft .NET: CVE-2026-85363: .NET Framework Elevation of Privilege Vulnerability
Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network...
Microsoft .NET: CVE-2026-83520: .NET Remote Code Execution Vulnerability
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network...
CVE-2026-96938: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Distributed File System DFS allows an authorized attacker to elevate privileges locally...
CVE-2026-70007: Out-of-bounds Write
Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network...
CVE-2026-85363: Integer Overflow or Wraparound
Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-79609: Undefined Security Weakness
XPTI Xen Page Table Isolation was introduced to mitigate Meltdown CVE-2017-5754, one aspect of XSA-254. This involves copying 64-bit PV guest page table entries from guest-chosen root page tables to the Xen- chosen one which is in actual use by hardware. To read the guest root page table, the...
CVE-2026-70174: Improperly Implemented Security Check for Standard
Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network...
CVE-2026-83520: Deserialization of Untrusted Data
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network...
CVE-2026-87699: Heap-based Buffer Overflow
Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally...
CVE-2026-97789: Use After Free
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
CVE-2026-69998: Use After Free
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
CVE-2026-85807: Integer Overflow or Wraparound
Integer overflow or wraparound in Windows USB Video Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-69996: Use After Free
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
CVE-2026-70249: Use After Free
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...
CVE-2026-69970: Heap-based Buffer Overflow
Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally...
CVE-2026-96853: Time-of-check Time-of-use (TOCTOU) Race Condition
Time-of-check time-of-use toctou race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...
CVE-2026-70089: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code over a network...
CVE-2026-70012: Use After Free
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
CVE-2026-78628: Improper Input Validation
The Okta Credential Provider for Windows does not validate a serialized credential buffer before interpreting it as a Kerberos logon structure. The buffer size and packed string offsets are not checked. Processing a malformed buffer can cause the credential provider process to terminate...
CVE-2026-69997: Use After Free
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
CVE-2026-69988: Use After Free
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
CVE-2026-83897: Exposure of Sensitive System Information to an Unauthorized Control Sphere
Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...
Microsoft Windows: CVE-2026-70076: Windows Win32k Elevation of Privilege Vulnerability
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...
CVE-2026-69882: Untrusted Search Path
Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally...
CVE-2026-85939: Weak Authentication
Weak authentication in Windows Kernel allows an authorized attacker to bypass a security feature over a network...
CVE-2026-83681: Weak Authentication
Weak authentication in Microsoft PowerToys allows an authorized attacker to perform tampering locally...
Microsoft Windows: CVE-2026-83644: Windows Audio Service Elevation of Privilege Vulnerability
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-70176: Windows Win32k Elevation of Privilege Vulnerability
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-69963: Kernel Streaming Service Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally...
CVE-2026-85931: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Distributed File System DFS allows an authorized attacker to execute code over a network...
CVE-2026-61931: Use After Free
Use after free in Windows Perception Simulation Service allows an authorized attacker to elevate privileges locally...
CVE-2026-83752: Use After Free
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-103822: Out-of-bounds Read
Substance3D - Designer is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious...
Microsoft Windows: CVE-2026-83582: Windows Graphics Kernel Information Disclosure Vulnerability
Use after free in Windows Graphics Kernel allows an authorized attacker to disclose information locally...
CVE-2026-85881: Stack-based Buffer Overflow
Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges over a network...
CVE-2026-83521: Out-of-bounds Read
Out-of-bounds read in Windows IKE Extension allows an authorized attacker to disclose information over a network...
CVE-2026-85990: Improper Privilege Management
Leantime is an open source project management system. Prior to 3.10.0, for the provisionally grouped account-creation and plugin-management surfaces, Leantime's JSON-RPC dispatcher in app/Domain/Api/Controllers/Jsonrpc.php exposes public API service methods, while PermissionEnforcer::enforce allo...
Microsoft Windows: CVE-2026-96248: Windows Host Guardian Service Denial of Service Vulnerability
Stack-based buffer overflow in Windows Host Guardian Service allows an unauthorized attacker to deny service over a network...
CVE-2026-85473: Improper Handling of Exceptional Conditions
The auth0/java-jwt library may terminate a thread if it receives a JWT with a timestamp claim exp, nbf, iat containing an out-of-range value. The condition occurs during token parsing, prior to signature verification. Repeated requests of this nature may lead to degraded availability of the...
CVE-2026-83876: Use After Free
Use after free in Windows Shell allows an authorized attacker to elevate privileges locally...
CVE-2026-70097: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to perform spoofing locally...