180343 matches found
CVE-2026-69621 Role: Windows Fax Service Elevation of Privilege Vulnerability
...
CVE-2026-69504 Windows NTFS Information Disclosure Vulnerability
...
CVE-2026-69507 Microsoft Windows Search Component Information Disclosure Vulnerability
...
CVE-2026-69496 Windows Compressed Folder Remote Code Execution Vulnerability
...
CVE-2026-69473 Windows Kernel Elevation of Privilege Vulnerability
...
CVE-2026-69450 Windows Error Reporting Elevation of Privilege Vulnerability
...
CVE-2026-69513 Windows Error Reporting Elevation of Privilege Vulnerability
...
CVE-2026-69491 Microsoft DirectMusic Remote Code Execution Vulnerability
...
CVE-2026-69432 Volume Manager Driver Elevation of Privilege Vulnerability
...
CVE-2026-69457 Windows USB Driver Information Disclosure Vulnerability
...
CVE-2026-69406 Windows Kernel Information Disclosure Vulnerability
...
CVE-2026-69390 Windows Spaceport.sys Information Disclosure Vulnerability
...
CVE-2026-69404 Windows TCP/IP Elevation of Privilege Vulnerability
...
CVE-2026-69371 Windows Overlay Filter Elevation of Privilege Vulnerability
...
CVE-2026-69359 Active Directory Domain Services Elevation of Privilege Vulnerability
...
CVE-2026-69367 Microsoft Standard XPS Information Disclosure Vulnerability
...
CVE-2026-69349 Windows Management Instrumentation Information Disclosure Vulnerability
...
CVE-2026-69345 Microsoft Standard XPS Information Disclosure Vulnerability
...
CVE-2026-69338 Remote Desktop Gateway Service Elevation of Privilege Vulnerability
...
CVE-2026-69339 Windows MIDI Service Module Information Disclosure Vulnerability
...
CVE-2026-69333 Windows Win32k Elevation of Privilege Vulnerability
...
CVE-2026-69325 Microsoft JScript Remote Code Execution Vulnerability
...
CVE-2026-69292 Remote Desktop Gateway Service Elevation of Privilege Vulnerability
...
CVE-2026-69267 Windows Connected User Experiences and Telemetry Information Disclosure Vulnerability
...
CVE-2026-69276 Microsoft UxTheme Library (uxtheme.dll) Remote Code Execution Vulnerability
...
CVE-2026-69271 Microsoft Standard XPS Elevation of Privilege Vulnerability
...
CVE-2026-68890 Microsoft Standard XPS Elevation of Privilege Vulnerability
...
CVE-2026-68881 Microsoft Standard XPS Information Disclosure Vulnerability
...
CVE-2026-68851 Windows NTFS Information Disclosure Vulnerability
...
CVE-2026-68847 Connected User Experiences and Telemetry Elevation of Privilege Vulnerability
...
CVE-2026-68849 Windows Bluetooth Port Driver Information Disclosure Vulnerability
...
CVE-2026-68824 Connected User Experiences and Telemetry Elevation of Privilege Vulnerability
...
CVE-2026-68830 Windows Universal Plug and Play (UPnP) Device Host Information Disclosure Vulnerability
...
CVE-2026-68784 Microsoft SQL Server Information Disclosure Vulnerability
...
CVE-2026-67633 Microsoft SQL Server Denial of Service Vulnerability
...
CVE-2026-68781 Microsoft SQL Server Information Disclosure Vulnerability
...
CVE-2026-67630 Microsoft SQL Server Information Disclosure Vulnerability
...
CVE-2026-67629 Microsoft SQL Server Information Disclosure Vulnerability
...
CVE-2026-62801 Microsoft PowerShell Security Feature Bypass Vulnerability
...
CVE-2026-57098 Microsoft Remote Desktop App for Windows Information Disclosure Vulnerability
...
CVE-2026-70091 Windows DNS Denial of Service Vulnerability
...
CVE-2026-69522 .NET and Visual Studio Remote Code Execution Vulnerability
...
CVE-2026-62706 Microsoft Windows Media Foundation Remote Code Execution Vulnerability
...
CVE-2026-9216 Insufficient input validation vulnerability exists in certain NETGEAR RAX Models
An insufficient input validation vulnerability in the listed NETGEAR RAX series models allows a network-adjacent attacker having network access such as WiFi credentials to crash the router's management UI. There is no confidentiality or integrity impact. A crash of the router's management UI does...
CVE-2026-9215 A CSRF vulnerability exists in certain NETGEAR XR series devices
A cross site request forgery CSRF vulnerability in the listed NETGEAR models allows an attacker who can leverage social engineering techniques on a router administrator to tamper with router configuration and disrupt router operations with active assistance from the router administrator. There is...
CVE-2026-75156 Apache Airflow FAB provider: FAB Azure AD OAuth: id_token issuer/audience not validated — cross-tenant authentication bypass
Apache Airflow FAB provider versions 3.7.3 through 3.8.0 do not validate the issuer or audience of Azure AD idtokens during OAuth login. Deployments are affected only when the FAB auth manager is configured with Azure AD as an OAuth provider. Because the signing keys are fetched from Microsoft's...
CVE-2026-86667 aircheng-org iWebShop-5 member.php member_list sql injection
A weakness has been identified in aircheng-org iWebShop-5 up to 5.15. The affected element is the function memberlist of the file controllers/member.php. This manipulation of the argument Search causes sql injection. The attack is possible to be carried out remotely. The exploit has been made...
CVE-2026-82076 Integer Overflow in Query Planner Leads to Unbounded Memory Allocation and Denial of Service in MongoDB Server
An integer overflow in the query planning component of MongoDB Server can allow an authenticated user with ordinary database-level read/write privileges to bypass an internal resource limit. Submitting a specially crafted query causes the server to consume memory without bound during query...
CVE-2026-82075 Uncontrolled Resource Consumption in MongoDB Sharded Cluster Router Allows Unauthenticated Denial of Service
An uncontrolled resource consumption weakness exists in the request-handling path of the MongoDB sharded-cluster router process. A client that has network access to a router port and has not authenticated can supply connection-monitoring parameters that cause the server to expend CPU resources...
CVE-2026-82074 Incorrect Authorization in MongoDB Server Aggregation Framework Allows Unauthorized Read Access to Collection Data
MongoDB Server contains an incorrect authorization vulnerability in the aggregation framework. An authenticated user with minimal privileges can craft a specially formatted aggregation request that causes the server's authorization subsystem to evaluate a different operation than what is actually...