CVEs published September 8, 2026

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result in arbitrary code execution in the…

A memory safety vulnerability exists in the Extended Passport Protocol (EPP) processing library.

A vulnerability has been found in D-Link DIR-822A A_101.

For which no official release has yet been published, the Identity Manager (IdM) deployment included insecure default configurations and credentials for security-sensitive services.

A condition in the ScreenConnect client may allow files to be transferred and executed through an active remote session without authorization or Host confirmation in certain circumstances.

Missing authorization in Entra ID allows an authorized attacker to elevate privileges over a network.

A flaw was found in hawtio-operator.

ColdFusion is affected by an Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') vulnerability that could result in arbitrary code execution in the context of the current…

A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5.0.4 through 5.0.5, FortiSandbox PaaS 5.0.4 through 5.0.5 may…

Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or…

A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server.

A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server.

A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server.

A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server.

An issue in the /cas/login component of sso-master v1.0.0 allows attackers to authenticate into the application without a password via sending a crafted POST request.

An issue in the Single-Sign On (SSO) component of Digital-Infrastructure v9.6.7 allows attackers to authenticate as any user, including the Admin, without a password.

An issue in the gateway server of mpush v0.8.1 allows attackers to execute arbitrary code via sending a crafted broadcast message.

mfish-nocode-pro v1.0.0 was discovered to contain a SQL injection vulnerability in the tableName parameter at /sys/dbConnect/data.

Movie_Recommend v1.0.0 was discovered to contain a SQL injection vulnerability in the sort parameter at /loadingmore.

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network.

Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

Private Metrics Server contained an SQL injection condition affecting database operations.

Content Extractor contained a deserialization of untrusted data issue affecting privilege management.

Command Center API contained an authentication bypass issue affecting privilege management.

Weak authentication in Windows iSCSI allows an unauthorized attacker to bypass a security feature over a network.

Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.

Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.

Use after free in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to execute code over a network.

Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network.

Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

Command Argument Injection Vulnerability in Cosminexus Component Container.

OS command injection vulnerability in Cosminexus Component Container.

Deserialization of untrusted data vulnerability in Cosminexus Component Container.

Out-of-bounds write in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

Stack-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.

Integer underflow (wrap or wraparound) in Microsoft Standard XPS allows an unauthorized attacker to execute code over a network.

Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows HTTP Print Provider allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows RNDIS allows an unauthorized attacker to execute code over a network.

Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.

Out-of-bounds read in Windows Direct Show allows an unauthorized attacker to execute code over a network.

Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network.

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

Integer overflow or wraparound in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network.

Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.

Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows Compressed Folder allows an unauthorized attacker to execute code over a network.

Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Telnet Client allows an unauthorized attacker to execute code over a network.

Integer overflow or wraparound in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

Integer underflow (wrap or wraparound) in Microsoft UxTheme Library (uxtheme.dll) allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.

External control of file name or path in Skype for Business allows an unauthorized attacker to execute code over a network.

A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70).

Netis NX10 firmware V4.0.1.5808 and V3.0.0.4142 contain an information disclosure vulnerability that allows unauthenticated attackers to retrieve the administrator password by sending a request to the…

This could lead to remote code execution with no additional execution privileges needed.

SAP NetWeaver Message Server does not sufficiently validate the authenticity of internal application server components during registration.

This could lead to remote code execution with no additional execution privileges needed.

This could lead to remote escalation of privilege without user consent with no additional execution privileges needed.

A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthenticated attacker to execute arbitrary code on the server.

A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthenticated attacker to execute arbitrary code on the server.

A flaw has been found in D-Link DIR-895L A1_102b07.

DeepSeek Harness before 0.1.2-alpha.1 contains an authentication bypass vulnerability that grants unauthenticated access to its local HTTP agent-control API by accepting a client-supplied loopback Host…

Incomplete comparison with missing factors in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

Improper neutralization of special elements in output used by a downstream component ('injection') in SQL Server allows an unauthorized attacker to elevate privileges over a network.

@sap/cds-mtxs NPM library does not perform sufficient checks on certain functionality used in multitenant CAP applications with extensibility enabled.

UC Browser for Android (package com.UCMobile.intl, version 13.7.8.1314) contains a Universal Cross-Site Scripting vulnerability that allows an attacker to execute arbitrary JavaScript in the context of any…

Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields.

Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields.

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

All released versions of @eclipse-ditto/ditto-javascript-client-node from 2.0.0 to 3.9.0 and of its predecessor package @eclipse-ditto/ditto-javascript-client-node_1.0 from 1.0.0 to 2.1.0, the WebSocket…

The `vtoken-minting` and `slpx` pallets in Bifrost contain an improper authorization vulnerability in channel commission attribution.

Incorrect access control in the SellerAuthorizeAspect component of springboot-project v1.0.0 allows unauthenticated attackers to access all seller management interfaces and list all products/orders, put…

ColdFusion is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user.

Apache Airflow FAB provider versions 3.7.3 through 3.8.0 do not validate the issuer or audience of Azure AD `id_token`s during OAuth login.

Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

The Auth0 AD/LDAP Connector is vulnerable to stored Cross-Site Scripting (XSS) issues due to improper HTML encoding of data in search results and updater log content displayed in the admin panel.

Improper authentication in Spring Cloud Azure allows an unauthorized attacker to elevate privileges over a network.

Out-of-bounds read in SQL Server allows an unauthorized attacker to execute code over a network.

Untrusted pointer dereference in SQL Server allows an unauthorized attacker to execute code over a network.

SAP GUI for Java does not correctly enforce the trust level policy for certain functions invoked from a connected backend system.

A path traversal vulnerability in the NTP configuration module allows an attacker to overwrite arbitrary files on the system as the root user.

A vulnerability has been identified in Siveillance Control Pro V3.0 (All versions < V3.0.12.2173), Siveillance Control Pro V4.0 (All versions < V4.0.9.2178), Siveillance Control V3.0 (All versions <…

Craft CMS versions before 5.10.12 contain a remote code execution vulnerability in the element-index endpoint that allows authenticated content editors to instantiate arbitrary classes through the criteria…

Craft CMS versions before 5.10.12 fail to properly cleanse string-typed field-layout elements, allowing authenticated control-panel users to inject Yii2 behavior attachments and event handlers.

SiYuan before 3.8.2 trusts the attacker-writable text/siyuan clipboard MIME type and skips sanitization in the paste handler, allowing code execution in the Node-enabled desktop renderer.

2.37.7, and 2.38.2, the legacy expression engine generated source text by calling the mutable global JSON.stringify while printing synthetic string literals and interpolating timezone data.

2.37.7, and 2.38.2, the expression compiler sanitizer resolved through dynamically scoped this and did not reject reserved class member names.

Heap-based buffer overflow in Windows Print Spooler Components allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

Roo-Code through 3.54.0 contains an auto-approve bypass vulnerability that allows attackers to execute denied shell commands by exploiting a word-boundary mismatch in comment handling between the approval…

Roo-Code through 3.54.0 contains an auto-approve bypass vulnerability in the shell command parsing logic that allows attackers to execute denied shell commands by exploiting the omission of the bash pipe…

Acrobat Reader is affected by an Incorrect Authorization vulnerability that could result in privilege escalation.

Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Deserialization of untrusted data in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network.

Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to execute code locally.

Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.

Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

A guest with a PCI device assigned that has at least a BAR on the IO port space can trigger a BUG() in Xen.

An issue in the l2cap_handle_data() function of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a Denial of Service (DoS) via sending a crafted L2CAP packet.

A code execution vulnerability exists in CMSimple 5.22 in the CoAuthors plugin.

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

Out-of-bounds write in Microsoft Office allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Improper control of generation of code ('code injection') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to execute code over a network.

Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

Improper control of generation of code ('code injection') in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network.

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.

Integer overflow or wraparound in SQL Server allows an unauthorized attacker to execute code over a network.

Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.

Weak authentication in SQL Server allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network.

Cvlaunchd contained a missing authorization issue affecting command execution authorization.

CommServe contained a cryptographic signature verification issue affecting privilege management.

Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows Management Services allows an authorized attacker to elevate privileges over a network.

Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

Heap-based buffer overflow in Windows Schannel allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.

Integer underflow (wrap or wraparound) in Windows Remote Access Connection Manager allows an authorized attacker to execute code over a network.

Integer overflow or wraparound in Windows Work Folder Service allows an authorized attacker to execute code over a network.

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows Paint allows an unauthorized attacker to execute code over a network.

Integer overflow or wraparound in Microsoft WebP Image Extension allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows Network File System allows an unauthorized attacker to execute code over a network.

Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Integer overflow or wraparound in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network.

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to execute code over a network.

Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

Use after free in Windows Key Distribution Center allows an authorized attacker to execute code over a network.

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.

Authentication bypass by capture-replay in Windows Kerberos allows an authorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.

Use after free in Microsoft Office allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows iSCSI allows an authorized attacker to execute code over a network.

Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

Incorrect calculation of buffer size in Windows iSCSI allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Use after free in Windows DNS allows an authorized attacker to execute code over a network.

Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

Integer overflow or wraparound in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.

Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.

Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network.

Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

Stack-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Windows URL Moniker allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

External control of file name or path in Microsoft Exchange Server allows an authorized attacker to execute code over a network.

Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.

Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Integer overflow or wraparound in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Use after free in SQL Server allows an authorized attacker to execute code over a network.

Integer overflow or wraparound in SQL Server allows an authorized attacker to execute code over a network.

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

Improper link resolution before file access ('link following') in SQL Server allows an authorized attacker to elevate privileges over a network.

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.

Improper privilege management in SQL Server allows an authorized attacker to elevate privileges over a network.

Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network.

Deserialization of untrusted data in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network.

Permissive cross-domain policy with untrusted domains in Azure Arc allows an unauthorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70).

This could lead to remote code execution with no additional execution privileges needed.

This could lead to remote code execution with no additional execution privileges needed.

A memory corruption vulnerability exists in FFmpeg before 8.1.

This could lead to remote escalation of privilege with no additional execution privileges needed.

This could lead to remote code execution with no additional execution privileges needed.

This could lead to remote code execution with no additional execution privileges needed.

Missing authorization in Ivanti Endpoint Manager Mobile before version 12.10.0.0, 12.9.0.2, and 12.8.0.4 allows a remote authenticated attacker to escalate their privileges to admin.

The Live Composer – Free WordPress Website Builder plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.1.18 via deserialization of untrusted input .

A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server.

A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server.

Snipe-IT versions before 8.7.0 contain a CSS injection vulnerability in the Custom CSS field due to incomplete sanitization that reverses HTML encoding on greater-than and double-quote characters.

Improper input validation in the Vega expression function implementation in OpenSearch Dashboards allows a remote authenticated actor with dashboard write permissions to execute arbitrary JavaScript in the…

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass.

Maravel, a PHP framework oriented towards dependency injection, prior to version 10.74.0 has a high-severity Token Replay Vulnerability arising from a structural lifecycle mismatch between stateless token…

AMI APTIOV contains a vulnerability in BIOS where a privileged user may cause the “Incomplete List of Disallowed Inputs” by local access.

A client may issue HTTP/2 requests to a Jetty server that result in blocking writes that are never unblocked, eventually causing all threads to be blocked and the whole server to become unresponsive.

Improper authentication in Microsoft Authenticator allows an unauthorized attacker to elevate privileges locally.

Code execution can occur in versions of the MLflow platform running version 0.0.1 or newer, enabling a maliciously crafted model artifact to execute arbitrary code on an end user's system when loaded by the…

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass.

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation.

Photoshop Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user.

ColdFusion is affected by an Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') vulnerability that could result in arbitrary code execution in the context of the current…

Illustrator is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user.

Illustrator is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.

XenForo before 2.3.13 contains a server-side request forgery vulnerability in the PayPal REST webhook handler that allows unauthenticated attackers to cause the server to make outbound HTTP requests to…

A vulnerability has been identified in SIMOVE Fleetmanager V3.1 (All versions < V3.1.13), SIMOVE Fleetmanager V3.2 (All versions < V3.2.4), SIMOVE Fleetmanager V3.3 (All versions < V3.3.2), SIMOVE…

A stack-based buffer overflow vulnerability exists in the httpd component of RE210 AC750 due to improper bounds checking in the splitString function when processing an uploaded configuration file.

SAP Integration Suite does not sufficiently validate XML documents accepted from untrusted sources in certain internal components.

ColdFusion is affected by a reflected Cross-Site Scripting (XSS) vulnerability.

A flaw was found in libxml2 with Python bindings enabled.

Stack-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

The vulnerability, if exploited, could allow a miscreant with read access to PIMBoards project files to reverse engineer PIMBoards users’ app-native passwords through computational brute-forcing of weak…

The vulnerability, if exploited, could allow a miscreant with read access to PIMBoards project files to decrypt and view sensitive information.

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.

ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user.

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

Improper verification of cryptographic signature in Skype for Business allows an unauthorized attacker to perform spoofing over an adjacent network.

A client may issue specially crafted HTTP/1.1 chunked requests to a Jetty server that cause Jetty and an intermediary proxy to interpret different request boundaries, potentially resulting in HTTP request…

An attacker who can modify the connection configuration can cause the driver to mint a fresh attestation and send it to a host they control.

Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.

Acrobat Reader is affected by an Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') vulnerability that could lead to arbitrary file system read.

Not failing securely ('failing open') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

Interpretation conflict in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

Server-side request forgery (ssrf) in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

Inconsistent interpretation of http requests ('http request/response smuggling') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally.

A flaw was found in hawtio-operator.

Private Metrics Server contained a missing authentication condition affecting metrics upload functionality and service availability.

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation.

Animate is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user.

Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

Double free in Windows Credential Guard allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.

Untrusted pointer dereference in Windows ALPC allows an authorized attacker to elevate privileges locally.

Integer overflow or wraparound in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally.

A vulnerability has been identified in Desigo CC ClickOnce Client V6 (All versions), Desigo CC ClickOnce Client V7 (All versions), Desigo CC family V8 (All versions), Desigo CC family V9 (All versions),…

AVideo through c3edcc274c389816d434acadac07ee78eaf330c1 contains an authentication bypass vulnerability in LoginControl::verifyChallenge() that uses loose comparison (==) instead of strict comparison (===)…

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains an authentication bypass vulnerability where sqlDAL caches empty result sets that writeSql never invalidates.

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate ownership of live_restreams_id in resendRestreamer.json.php, allowing authenticated users with canStream to access other…

A improper validation of certificate with host mismatch vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6, FortiProxy 7.6.2 through 7.6.6 may allow attacker to information disclosure via <insert attack…

Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.

An Authentication Bypass vulnerability in Sentry before R10.8.2, R10.7.3 and R10.6.4 allows a remote unauthenticated attacker to gain administrative level access.

Insufficient validation of storage engine configuration options in MongoDB Server allows an authenticated user with write privileges to supply crafted parameters during collection creation that override…

Improper handling of case sensitivity in the configuration validation component of MongoDB Server may cause the authorization subsystem to remain in a default disabled state during server startup.

A use-after-free security issue exists in the server's query execution memory tracking subsystem.

A security issue exists in MongoDB's LDAP authorization integration where pooled LDAP connections can retain stale authentication identities after user authentication under certain configurations.

The Okta Access Gateway improperly handles input sanitization and regular expression evaluation within its Protected Rule authorization check, resulting in an authorization bypass when an administrator has…

Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network.

Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network.

Untrusted pointer dereference in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.

Use after free in DNS Server allows an unauthorized attacker to execute code over a network.

fastify-cli starts the Node.js Inspector when a debug flag is used, but it ignores the explicit bind address the user supplies and binds the Inspector to a broadly reachable address instead of the intended…

Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.

Use after free in IP Helper allows an unauthorized attacker to execute code over a network.

Use after free in Windows SMB Client allows an unauthorized attacker to execute code over a network.

Improper link resolution before file access ('link following') in Windows Shell allows an unauthorized attacker to perform spoofing over a network.

Use after free in Windows Ancillary Function Driver for WinSock allows an unauthorized attacker to elevate privileges over a network.

Use after free in DNS Server allows an unauthorized attacker to execute code over a network.

Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.

Concurrent execution using shared resource with improper synchronization ('race condition') in DNS Server allows an unauthorized attacker to execute code over a network.

Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.

Concurrent execution using shared resource with improper synchronization ('race condition') in DNS Server allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Windows Link Layer Topology Discovery Protocol allows an unauthorized attacker to execute code over a network.

Origin validation error in Windows DNS allows an unauthorized attacker to perform spoofing over a network.

Stack-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.

Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network.

Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.

Stack-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

Incorrect conversion between numeric types in Microsoft JScript allows an unauthorized attacker to execute code over a network.

Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Microsoft JScript allows an unauthorized attacker to execute code over a network.

Double free in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.

Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network.

Improper neutralization of special elements used in a command ('command injection') in Microsoft Azure CLI allows an authorized attacker to execute code over a network.

Use after free in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network.

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network.

Improper limitation of a pathname to a restricted directory ('path traversal') in Windows PowerShell allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges over an adjacent network.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network.

Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network.

Untrusted pointer dereference in Windows Group Policy allows an authorized attacker to elevate privileges over a network.

Stack-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges over a network.

Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Windows HTTP Print Provider allows an authorized attacker to execute code over a network.

Out-of-bounds read in Windows exFAT File System allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges over a network.

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network.

Stack-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network.

Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges over a network.

Out-of-bounds read in Windows VOLSNAP.SYS allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Volume Manager Driver allows an authorized attacker to elevate privileges over a network.

Stack-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network.

Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges over a network.

Out-of-bounds read in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network.

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network.

Double free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network.

Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.

Stack-based buffer overflow in Windows Fast FAT Driver allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges over a network.

Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.

Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.

Integer underflow (wrap or wraparound) in Windows GDI+ allows an authorized attacker to elevate privileges over a network.

This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed.

This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed.

Use After Free vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to…

The Auth0 AD/LDAP Connector improperly processes a configuration value during service startup.

Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to execute code locally.

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Use after free in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Use after free in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.

Missing authorization in Windows Kernel allows an authorized attacker to elevate privileges locally.

Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.

Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user.

Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user.

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.

Acrobat Reader is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user.

Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user.

Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user.

Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user.

Acrobat Reader is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user.

Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user.

Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user.

Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.

Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.

Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.

Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.

Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user.

Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user.

Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user.

Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Double free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally.

Acrobat Reader is affected by an Access of Resource Using Incompatible Type ('Type Confusion') vulnerability that could result in arbitrary code execution in the context of the current user.

Heap-based buffer overflow in Windows Work Folders allows an authorized attacker to elevate privileges locally.

Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user.

Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.

Acrobat Reader is affected by a Double Free vulnerability that could result in arbitrary code execution in the context of the current user.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.

Release of invalid pointer or reference in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

Null pointer dereference in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

DataCube contained a path traversal issue affecting security feature enforcement.

SAP NetWeaver Business Client does not perform sufficient validation when processing certain locally stored data during application startup.

Illustrator is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.

Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user.

Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user.

Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user.

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.

Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform…

Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform…

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Missing authorization in Data Sharing Service Client allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.

Use after free in Windows WebClient Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to execute code locally.

Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Storage Port Driver allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Improper validation of integrity check value in Windows Installer allows an authorized attacker to elevate privileges locally.

Out-of-bounds write in Windows Spaceport.sys allows an authorized attacker to execute code locally.

Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to execute code locally.

Stack-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows NFS Portmapper allows an authorized attacker to elevate privileges locally.

Access of resource using incompatible type ('type confusion') in Windows Core Messaging allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally.

Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.

Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

Incomplete list of disallowed inputs in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

Improper handling of insufficient permissions or privileges in Windows Enterprise App Management allows an authorized attacker to elevate privileges locally.

Untrusted pointer dereference in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally.

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally.

Numeric truncation error in Windows Kerberos allows an authorized attacker to elevate privileges locally.

Improper encoding or escaping of output in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hello allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Untrusted search path in Windows Smart Card allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.

Double free in Windows Hello allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.

Integer overflow or wraparound in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.

Integer underflow (wrap or wraparound) in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.

Absolute path traversal in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

Integer overflow or wraparound in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Incorrect type conversion or cast in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

Integer overflow or wraparound in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Buffer over-read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Use after free in Graphic Fonts allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to execute code locally.

Numeric truncation error in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.

Improper neutralization of special elements used in a command ('command injection') in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

Missing authentication for critical function in Windows Shell allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally.

Stack-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Untrusted pointer dereference in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Power Dependency Coordinator allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.

Improper limitation of a pathname to a restricted directory ('path traversal') in Windows Compressed Folder allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows State Repository Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Volume Manager Driver allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to execute code locally.

Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally.

Integer underflow (wrap or wraparound) in Windows Kernel Mode Driver allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to elevate privileges locally.

Integer overflow or wraparound in Volume Manager Driver allows an authorized attacker to elevate privileges locally.

Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.

Stack-based buffer overflow in Windows Broker Infrastructure Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally.

Missing authorization in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.

Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally.

Access of resource using incompatible type ('type confusion') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.

Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows USB Driver allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Stack-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.

Improper link resolution before file access ('link following') in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows DCOM Server allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally.

Stack-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.

Integer underflow (wrap or wraparound) in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

Absolute path traversal in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to execute code locally.

Buffer over-read in Windows NTFS allows an authorized attacker to execute code locally.

Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to execute code locally.

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.

Heap-based buffer overflow in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges locally.

External control of file name or path in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

This could lead to local escalation of privilege with no additional execution privileges needed.

This could lead to local escalation of privilege with no additional execution privileges needed.

This could lead to local escalation of privilege with no additional execution privileges needed.

This could lead to local escalation of privilege with no additional execution privileges needed.

This could lead to local escalation of privilege with no additional execution privileges needed.

This could lead to local escalation of privilege with no additional execution privileges required.

Improper authorization in XBox Gaming Services allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to elevate privileges locally.

Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally.

Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform valid GPU processing operations to…

Out-of-bounds read in Microsoft Trace Data Helper allows an authorized attacker to elevate privileges locally.

Use after free in Windows Server allows an authorized attacker to elevate privileges locally.

Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally.

This could lead to local escalation of privilege with no additional execution privileges needed.

This could lead to local escalation of privilege with no additional execution privileges needed.

This could lead to local escalation of privilege with no additional execution privileges needed.

This could lead to local escalation of privilege with no additional execution privileges needed.

This could lead to local escalation of privilege with no additional execution privileges needed.

This could lead to local escalation of privilege with no additional execution privileges needed.

This could lead to local escalation of privilege with no additional execution privileges needed.

This could lead to local escalation of privilege with no additional execution privileges needed.

This could lead to local escalation of privilege with no additional execution privileges needed.

This could lead to local escalation of privilege with no additional execution privileges needed.

This could lead to local escalation of privilege with no additional execution privileges needed.

This could lead to local escalation of privilege with no additional execution privileges needed.

This could lead to local escalation of privilege with no additional execution privileges needed.

This could lead to local escalation of privilege with no additional execution privileges needed.

This could lead to local escalation of privilege with no additional execution privileges needed.

This could lead to local escalation of privilege with no additional execution privileges needed.

This could lead to local escalation of privilege with no additional execution privileges needed.

This could lead to local escalation of privilege with no additional execution privileges needed.

This could lead to local escalation of privilege with no additional execution privileges needed.

This could lead to local escalation of privilege with no additional execution privileges needed.

This could lead to local escalation of privilege with no additional execution privileges needed.

This could lead to local escalation of privilege with no additional execution privileges needed.

This could lead to local escalation of privilege with no additional execution privileges needed.

This could lead to local escalation of privilege with no additional execution privileges needed.

This could lead to local escalation of privilege with no additional execution privileges needed.

This could lead to local escalation of privilege with no additional execution privileges needed.

This could lead to local escalation of privilege with no additional execution privileges needed.

This could lead to local escalation of privilege with no additional execution privileges needed.

This could lead to local escalation of privilege with no additional execution privileges needed.

This could lead to local escalation of privilege with no additional execution privileges needed.

This could lead to local escalation of privilege with no additional execution privileges needed.

This could lead to local escalation of privilege with no additional execution privileges needed.

This could lead to local escalation of privilege with no additional execution privileges needed.

This could lead to local escalation of privilege with no additional execution privileges needed.

This could lead to local escalation of privilege with no additional execution privileges needed.

This could lead to local escalation of privilege with no additional execution privileges needed.

This could lead to local escalation of privilege with no additional execution privileges needed.

This could lead to local escalation of privilege with no additional execution privileges needed.

This could lead to local escalation of privilege with no additional execution privileges needed.

This could lead to local escalation of privilege with no additional execution privileges needed.

This could lead to local escalation of privilege with no additional execution privileges needed.

This could lead to local escalation of privilege with no additional execution privileges needed.

This could lead to local escalation of privilege with no additional execution privileges needed.

This could lead to local escalation of privilege with no additional execution privileges needed.

This could lead to local escalation of privilege with no additional execution privileges needed.

This could lead to local escalation of privilege with User execution privileges needed.

A race condition vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to…

The Okta Access Gateway does not sanitize SAML assertion values before interpolating them into database queries in the advanced mode datastore configuration.

Insufficiently protected credentials in Azure CycleCloud allows an authorized attacker to disclose information over a network.

SAP NetWeaver Application Server for ABAP and ABAP Platform allows an unauthenticated user to send a specially crafted packet that triggers reprocessing of a previously buffered user request, potentially…

Missing authentication for a critical function in ASUS Control Center Express Agent allows an unauthenticated nearby user to control the host via a direct connection to the agent when the host has an active…

The OAuth token endpoint bound an authorization code's first access token to the consented resource but did not bind its refresh token.

Adobe Commerce is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in a Security feature bypass.

AVideo through 29.0 contains an authentication bypass vulnerability in plugin/PlayLists/epg.json.php that exposes live-stream keys and private EPG schedules to unauthenticated users.

AVideo through 29.0 contains an information disclosure vulnerability in plugin/Live/stats.json.php that allows unauthenticated attackers to retrieve stream keys and m3u8 URLs by accessing the endpoint…

AVideo through commit c3edcc274c contains an authorization bypass vulnerability where a session cookie named 'key' with value 'value' overrides the $_REQUEST['key'] parameter in saveLive.php and related…

The OAuth Dynamic Client Registration endpoint bounded redirect_uris but accepted arbitrarily large client_name and grant_types values.

Backend administrators without system maintainer privileges were able to schedule any of the configuration:read, configuration:set, and configuration:show commands.

Out-of-bounds read in Windows Key Distribution Center allows an unauthorized attacker to deny service over a network.

Out-of-bounds read in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to deny service over a network.

An uncontrolled resource consumption weakness exists in the request-handling path of the MongoDB sharded-cluster router process.

A security issue in MongoDB Server allows an unauthenticated network user to cause a denial of service on a specific type of replica set member.

Missing Authorization vulnerability in Viszt Péter Csomagpontok és szállítási címkék WooCommerce-hez allows Exploiting Incorrectly Configured Access Control Security Levels.

Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to execute code locally.

The JWT signing secret in yfexam-exam v2.0 is derived from the username and the current month instead of a random server-side key, making the secret key easily obtainable via a bruteforce attack.

An XXE (XML External Entity) vulnerability in the level-rule module of Distribution Management v1.0.0 allows attackers to read sensitive files, scan internal networks, or launch server attacks via supplying…

An issue in the btm_acl_handle() function of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a Denial of Service (DoS) via sending a crafted L2CAP packet.

A heap overflow in the a2dp_decoder_sbc.cpp component of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a Denial of Service (DoS) via sending a crafted…

A SQL injection vulnerability in the ap_form_{id} parameter in AppNitro MachForm v30 allows attackers to access sensitive database information via a crafted SQL statement.

The Okta Hyperdrive Integration plugin resolves a required assembly using a registry path within the current user's hive without integrity verification.

Use after free in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.

Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation.

CommServe contained a path traversal issue affecting information disclosure.

CommServe contained an authentication bypass issue affecting access authorization and information disclosure.

CommServe contained a heap-based buffer overflow issue affecting service availability.

CommServe contained a stack-based buffer overflow issue affecting service availability.

ColdFusion is affected by an Improper Access Control vulnerability that could lead to arbitrary file system read.

XenForo before 2.3.13 contains a payment replay vulnerability in the PayPal REST payment provider that allows attackers to process the same webhook payload multiple times by exploiting a missing duplicate…

XenForo before 2.3.13 contains a signature verification logic error in the PayPal REST webhook handler that allows unauthenticated attackers to bypass payment signature validation by submitting a webhook…

Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to execute code locally.

Use of uninitialized resource in Windows Failover Cluster allows an unauthorized attacker to disclose information over a network.

Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network.

Null pointer dereference in Windows SMB Server Network Transport Driver (srvnet.sys) allows an unauthorized attacker to deny service over a network.

Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network.

Buffer over-read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network.

Use after free in Windows DNS allows an authorized attacker to execute code over a network.

The OpenAPI.NET SDK contains a useful object model for OpenAPI documents in .NET along with common serializers to extract raw OpenAPI JSON and YAML documents from the model.

Exposure of sensitive system information to an unauthorized control sphere in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to disclose information over a network.

Improper null termination in Windows Remote Desktop Protocol allows an unauthorized attacker to disclose information over a network.

Out-of-bounds read in Windows Mobile Broadband allows an unauthorized attacker to disclose information over a network.

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

Missing release of memory after effective lifetime in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

Use after free in Windows Virtual Trusted Platform Module allows an authorized attacker to elevate privileges locally.

Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service over a network.

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

Missing release of memory after effective lifetime in Active Directory Domain Services allows an unauthorized attacker to deny service over a network.

External control of file name or path in .NET allows an unauthorized attacker to elevate privileges over a network.

Time-of-check time-of-use (toctou) race condition in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Improper validation of consistency within input in Windows TCP/IP allows an unauthorized attacker to bypass a security feature over a network.

Out-of-bounds read in Windows Kerberos allows an unauthorized attacker to deny service over a network.

Null pointer dereference in Windows Kerberos allows an unauthorized attacker to deny service over a network.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hello allows an authorized attacker to elevate privileges locally.

Integer overflow or wraparound in Windows DNS allows an unauthorized attacker to deny service over a network.

Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network.

Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.

Missing release of memory after effective lifetime in Windows TCP/IP allows an unauthorized attacker to deny service over a network.

Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service over a network.

Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.

Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.

Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a network.

Heap-based buffer overflow in Windows IKE Extension allows an authorized attacker to execute code over a network.

Out-of-bounds read in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network.

Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.

Uncontrolled recursion in Microsoft Exchange Server allows an unauthorized attacker to deny service over a network.

Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

Out-of-bounds read in BranchCache allows an unauthorized attacker to deny service over a network.

Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to deny service over a network.

Integer overflow or wraparound in SQL Server allows an unauthorized attacker to deny service over a network.

Integer underflow (wrap or wraparound) in Skype for Business allows an unauthorized attacker to deny service over a network.

Server-side request forgery (ssrf) in Skype for Business allows an unauthorized attacker to disclose information over a network.

Use after free in Active Directory Domain Services allows an authorized attacker to execute code over a network.

Authentication bypass by spoofing in Windows Netlogon allows an unauthorized attacker to perform spoofing over an adjacent network.

A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70).

A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70).

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

Improper verification of cryptographic signature in Windows RDP Client allows an unauthorized attacker to disclose information over a network.

Allocation of Resources Without Limits or Throttling vulnerability in Automattic WooCommerce allows HTTP DoS.

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could abuse missing authorization.

An improper certificate/host key validation vulnerability was discovered in the Smart Polling functionality, which established encrypted connections to target devices without validating the remote host's…

The Event Tickets and Registration plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the Stripe OAuth return endpoint in all versions up to, and…

This could lead to remote code execution with no additional execution privileges needed.

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause excessive iteration.

Observable timing discrepancy vulnerability in PayTR Payment and Electronic Money Institution Inc.

Improper validation of specified quantity in input vulnerability in PayTR Payment and Electronic Money Institution Inc.

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process…

WWBN AVideo through commit e01e41ecc (no patched version available) exposes get_api_preauthorize in plugin/API/API.php as a second, undocumented login path.

electerm before 5.3.15 exposes 40+ main-process functions through an unvalidated Electron IPC handler with no function-name allowlist or sender validation.

Authentication bypass by capture-replay in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorized attacker to perform spoofing over a network.

Use of incorrectly-resolved name or reference in Visual Studio Code allows an unauthorized attacker to disclose information over a network.

Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

Photoshop Mobile is affected by a Session Fixation vulnerability that could result in privilege escalation.

XenForo before 2.3.13 contains a refresh token replay vulnerability that allows attackers to reuse a refresh token multiple times by exploiting the failure to mark tokens as consumed when the parent access…

XenForo before 2.3.13 contains an OAuth2 authorization code reuse vulnerability that allows attackers to obtain unauthorized token pairs by submitting a previously used authorization code.

XenForo before 2.3.13 contains an authentication bypass vulnerability in the OAuth2 token endpoint that allows unauthenticated attackers to obtain valid token pairs by submitting empty values for…

Improper restriction of XML external entity reference vulnerability in Cosminexus Component Container.

Heap-based buffer overflow in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally.

A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70).

A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70).

An access control vulnerability was discovered in the Credentials Manager functionality due to insufficient validation of user privileges.

IBM Enterprise Build of Quarkus 3.27.1 through 3.27.5, and 3.33.1 through 3.33.3 could allow an attacker to bypass authorization by manipulating URL query parameters due to incorrect mapping of values to…

A vulnerability was detected in Open-Web-Analytics up to 1.9.1.

A security vulnerability has been detected in moltis-org moltis up to 20260818.10.

A weakness has been identified in opengeos GeoLibre up to 2.3.0.

A vulnerability was determined in Cesanta mJS up to 1.26.

A vulnerability was determined in ningzichun Student Management System up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf.

A vulnerability was detected in aircheng-org iWebShop-5 up to 5.15.

A security flaw has been discovered in aircheng-org iWebShop-5 up to 5.15.

A vulnerability was identified in aircheng-org iWebShop-5 up to 5.15.

The Okta Hyperdrive Integration installer does not mask the OAuth client secret when passed as an MSI property.

Heap-based buffer overflow in Microsoft Office Access allows an authorized attacker to execute code locally.

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

This could lead to local escalation of privilege with no additional execution privileges needed.

This could lead to local escalation of privilege with no additional execution privileges needed.

This could lead to local escalation of privilege with no additional execution privileges needed.

This could lead to local escalation of privilege with no additional execution privileges needed.

Snipe-IT before 8.7.0 streams the SQL entry from an uploaded backup archive directly into the MySQL/MariaDB command-line client (`mysql`) without the --binary-mode flag, so the client interprets lines…

A improper neutralization of special elements used in a command ('command injection') vulnerability in Fortinet FortiSandbox 5.2.0, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4.0 through 4.4.9 may…

Server-Side Request Forgery (SSRF) vulnerability in John Darrel Hide My WP Ghost allows Server Side Request Forgery.

Improper neutralization of special elements used in an os command ('os command injection') in Azure HDInsights allows an authorized attacker to elevate privileges over a network.

A flaw was found in Dogtag PKI, as used by FreeIPA's certificate authority component.

XenForo before 2.3.13 contains a path traversal vulnerability in the style archive importer on Windows deployments that allows authenticated non-super administrators with style permissions to write…

Netis NX10 firmware V4.0.1.5808 and V3.0.0.4142 contain an OS command injection vulnerability in the ping diagnostic handler that allows authenticated administrators to execute arbitrary shell commands as…

The EDD Product Catalog Feed by PixelYourSite plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the…

Waves Central for macOS contains a local privilege escalation in the privileged helper service.

AVideo through c3edcc274c389816d434acadac07ee78eaf330c1 contains a missing authorization vulnerability in the SocialMediaPublisher plugin's add.json.php endpoint that allows authenticated users to modify…

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a cross-site request forgery vulnerability in deleteHistory.json.php and finishAll.json.php that allows unauthenticated attackers…

PX4 Autopilot through 1.17.0 contains a use-after-free vulnerability in the load_mon module's stop path where exit_and_cleanup() deletes the LoadMon object and frees the performance counter before…

2.37.7, and 2.38.2, the Git node clone operation matched an attacker-controlled destination path against the default N8N_BLOCK_FILE_PATTERNS regular expression.

The Instance AI credential setup flow accepted a credential test or verification URL without checking that it matched the workflow node's origin.

Unauthenticated Cross Site Scripting (XSS) in Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 2.0.17 versions.

Unauthenticated Cross Site Scripting (XSS) in Open User Map <= 1.4.50 versions.

Unauthenticated Cross Site Scripting (XSS) in JetFormBuilder <= 3.6.5.1 versions.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Easy Appointments allows DOM-Based XSS.

Missing Authorization vulnerability in Unbounce Unbounce Landing Pages unbounce allows Exploiting Incorrectly Configured Access Control Security Levels.

Maono Link 3.8.13 MaonoAiServices Windows service allows local privilege escalation for a standard user account via improper write privileges in 'C:\ProgramData\Maono'.

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges over a network.

Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network.

Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network.

Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over a network.

Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges over a network.

Use after free in Windows HTTP.sys allows an authorized attacker to elevate privileges over a network.

Missing authorization in Windows Hyper-V allows an authorized attacker to elevate privileges over a network.

Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.

Creation of temporary file in directory with insecure permissions in Windows Error Reporting allows an authorized attacker to perform tampering locally.

Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges over a network.

Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges over a network.

Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network.

Null pointer dereference in Virtual Hard Disk (VHD) Miniport Driver allows an unauthorized attacker to deny service locally.

Use after free in Windows Kernel allows an authorized attacker to elevate privileges over a network.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network.

Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network.

Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.

Use after free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges over a network.

Double free in Windows Registry allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network.

Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network.

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network.

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges over a network.

Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network.

Use after free in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network.

Use after free in Windows Kernel allows an authorized attacker to elevate privileges over a network.

Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network.

Use of client-side authentication in Skype for Business allows an authorized attacker to perform spoofing over a network.

A vulnerability in the Unified Extensible Firmware Interface (UEFI) Shell implementation of Cisco UCS Servers and UCS-based appliances could allow an authenticated attacker with valid credentials for a user…

An unencrypted 'pause encryption request' message causes a denial of service in the in the RS9116W/SiWx917.

Uncontrolled recursion (CWE-674) in the QDomDocument/QDomNode serialization path of the Qt XML module (QtXml, qtbase).

A Cross-Site Request Forgery (CSRF) vulnerability in WatchGuard Dimension's database snapshot creation feature allows a remote attacker to trigger unauthorized snapshot creation by tricking an authenticated…

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

Improper link resolution before file access ('link following') in Windows Resilient File System (ReFS) Deduplication Service allows an authorized attacker to elevate privileges locally.

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

`OpenTelemetry.Resources.Host` NuGet package, which provides OpenTelemetry resource detectors for host, is affected by an untrusted search path vulnerability on macOS.

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

Time-of-check time-of-use (toctou) race condition in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

Use after free in Windows Security App allows an authorized attacker to elevate privileges locally.

Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.

Use after free in Windows Security Center allows an authorized attacker to elevate privileges locally.

Relative path traversal in Power Automate allows an authorized attacker to elevate privileges locally.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.

Use after free in SQL Server allows an authorized attacker to elevate privileges locally.

Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.

Use after free in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.

Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.

Use after free in Windows Modern Execution Server allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to execute code locally.

Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to execute code locally.

Use after free in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate privileges locally.

Double free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.

Double free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.

Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.

Use after free in Windows File History Service allows an authorized attacker to elevate privileges locally.

Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.

Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally.

Use after free in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to execute code locally.

Heap-based buffer overflow in Windows Credential Guard allows an authorized attacker to elevate privileges locally.

Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.

Double free in Windows Display Enhancement Service allows an authorized attacker to elevate privileges locally.

Use after free in Windows AF_UNIX Socket Provider allows an authorized attacker to elevate privileges locally.

Double free in Windows Audio Service allows an authorized attacker to elevate privileges locally.

Incorrect authorization in Windows Win32K allows an authorized attacker to elevate privileges locally.

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

Use after free in Windows Media allows an authorized attacker to elevate privileges locally.

Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

Time-of-check time-of-use (toctou) race condition in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.

Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally.

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

Use after free in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally.

Use after free in Windows Accounts Control allows an authorized attacker to elevate privileges locally.

Use after free in Windows Credential Providers allows an authorized attacker to elevate privileges locally.

Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally.

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

Time-of-check time-of-use (toctou) race condition in Windows Win32K allows an authorized attacker to elevate privileges locally.

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

Use after free in Windows Web Platform Storage allows an authorized attacker to elevate privileges locally.

Deserialization of untrusted data in Windows IP Address Management (IPAM) Service allows an authorized attacker to elevate privileges locally.

Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally.

Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.

Use after free in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally.

Use after free in Windows Accounts Control allows an authorized attacker to elevate privileges locally.

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

Use after free in Windows Notification allows an authorized attacker to elevate privileges locally.

Use after free in Windows Message Queuing allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.

Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.

Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.

Buffer over-read in Windows Win32K allows an authorized attacker to elevate privileges locally.

Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.

Use after free in Microsoft Install Service allows an authorized attacker to elevate privileges locally.

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

Numeric truncation error in Windows Kernel allows an authorized attacker to elevate privileges locally.

Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Online Certificate Status Protocol (OCSP) allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.

Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.

Use after free in Windows Wireless Networking allows an authorized attacker to elevate privileges locally.

Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.

Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.

Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

Use after free in Windows Devices Human Interface allows an authorized attacker to elevate privileges locally.

Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.

Time-of-check time-of-use (toctou) race condition in Windows Kernel allows an authorized attacker to elevate privileges locally.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.

Time-of-check time-of-use (toctou) race condition in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally.

Use after free in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.

Use after free in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

Use after free in Audio Video Control Transport Protocol allows an authorized attacker to elevate privileges locally.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.

Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

External control of file name or path in Windows Shell allows an authorized attacker to elevate privileges locally.

Improper link resolution before file access ('link following') in Windows NTFS allows an authorized attacker to elevate privileges locally.

Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.

Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.

Use after free in Windows DNS allows an authorized attacker to elevate privileges locally.

Double free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

Use after free in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally.

Double free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges locally.

Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

Use after free in Windows License Manager allows an authorized attacker to elevate privileges locally.

Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

Use after free in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Driver allows an authorized attacker to elevate privileges locally.

Use after free in Windows File History Service allows an authorized attacker to elevate privileges locally.

Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

This could lead to local escalation of privilege with no additional execution privileges needed.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

An information disclosure vulnerability has been identified in Omada Controller.

Maravel, a PHP framework oriented towards dependency injection, prior to version 10.73.1 has a side-channel information disclosure issue.

The Okta Access Gateway does not sanitize SAML assertion attribute values before interpolating them into LDAP search filters in the LDAP datastore configuration.

Untrusted pointer dereference in Microsoft Windows SCSI Class System File allows an unauthorized attacker to elevate privileges with a physical attack.

No cwe for this issue in Windows Boot Manager allows an unauthorized attacker to elevate privileges with a physical attack.

The shell theme installer in gnome-tweaks extracts user-supplied ZIP archives without validating archive member paths.

XenForo before 2.3.13 contains a multi-factor authentication bypass vulnerability in the passkey TFA provider that allows an authenticated attacker to complete login as another user by submitting their own…

Out-of-bounds read in Windows USB Hub Driver allows an unauthorized attacker to elevate privileges with a physical attack.

Heap-based buffer overflow in Windows Volume Shadow Copy allows an unauthorized attacker to elevate privileges with a physical attack.

Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack.

Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack.

Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack.

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack.

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack.

Out-of-bounds read in Windows USB Mass Storage Class Driver allows an unauthorized attacker to elevate privileges with a physical attack.

Missing authentication for critical function in Windows DHCP Server allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack.

Insertion of sensitive information into sent data in Microsoft Teams for Android allows an authorized attacker to disclose information over a network.

A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70).

A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70).

A cross site request forgery (CSRF) vulnerability in the listed NETGEAR models allows an attacker who can leverage social engineering techniques on a router administrator to tamper with router configuration…

The administrative panel of the Auth0 AD/LDAP Connector (versions 6.5.0 and earlier) listens on the local loopback interface without requiring authentication.

The Okta Access Gateway does not neutralize shell metacharacters in SNMP configuration values before a privileged script uses them to construct OS commands.

The Okta Access Gateway does not sanitize dashboard label values before writing them into generated PHP configuration files.

Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Winsock allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows BitLocker allows an authorized attacker to execute code locally.

Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

The Okta Access Gateway management console passes user-supplied input to eval() without sanitization during an authenticated administrator SSH session.

The Okta Access Gateway does not sanitize the application label field before including it in the generated nginx configuration file.

Integer overflow or wraparound in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to elevate privileges with a physical attack.

An issue in OpenDDS 3.33.x allows a local attacker to cause a denial of service via the verify function in the SIgnedDocument module

Snipe-IT before 8.7.1 fails to validate the length of the note field in the POST /account/accept/{acceptance} endpoint, allowing authenticated users to submit unbounded input that reaches synchronous…

Craft CMS versions 5.0.0-RC1 through 5.10.11 are missing an admin-target guard in UsersController::actionActivateUser (the users/activate-user action).

AVideo through 29.0 contains an information disclosure vulnerability in restreamsActive.json.php that allows authenticated streamers to enumerate source stream keys and identities of all other streamers'…

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a cross-site request forgery vulnerability in plugin/YPTWallet/view/saveBalance.php that allows attackers to set arbitrary wallet…

Insertion of sensitive information into log files in the Snowflake Python, Go, JDBC, Node.js, PHP PDO, and ODBC drivers allowed authentication tokens, query-result encryption keys, pre-signed cloud-storage…

NuBrowser lacks protocol whitelist validation for the S.browser_fallback_url field of intent://, allowing attackers to inject javascript: URLs via 302 redirects.

2.37.7, and 2.38.2, the OpenAI Chat Model node enforced credential allowed-domain restrictions for normal calls but not for the model-search dropdown.

2.37.7, and 2.38.2, the Elasticsearch and ElasticSecurity nodes interpolated workflow-controlled index and document identifiers directly into REST request paths.

The Instance AI workflow summary used node names and connection keys from stored workflows as ordinary object keys.

The /chat WebSocket route accepted a resumeToken and resumed a paused execution without checking that the target node supported chat messages.

The react-native-auth0 SDK's web platform implementation does not scope its in-memory token cache to individual user sessions when operating in a server-side rendering (SSR) environment where module state…

A use of uninitialized variable vulnerability in Fortinet FortiAnalyzer 7.6.3 through 7.6.6 may allow attacker to denial of service via <insert attack vector here>

A Server-Side Request Forgery (SSRF) vulnerability exists in the ONLYOFFICE ownCloud Integration plugin version 9.12.

An integer overflow in the query planning component of MongoDB Server can allow an authenticated user with ordinary database-level read/write privileges to bypass an internal resource limit.