https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 08:03:14 +0000 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1001 certfr-2026-avi-1001 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1001 https://cve.radiocsirt.org/vuln/euvd-2026-378435 EUVD-2026-378435 https://cve.radiocsirt.org/vuln/euvd-2026-378435 https://cve.radiocsirt.org/vuln/fkie_cve-2026-62815 <p>Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network.</p> <p>Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-62815 https://cve.radiocsirt.org/vuln/ghsa-92f5-vc22-8j33 <p><strong>Affected:</strong> NuGet: Microsoft.Native.Quic.MsQuic.OpenSSL, NuGet: Microsoft.Native.Quic.MsQuic.Schannel</p> <p># Summary Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network.</p> <p># Details</p> <p>New network path creations and removals triggered by incoming packets can lead to a pointer invalidation.</p> <p>## Patches</p> <p>- Guard path promotion [e0f55b5](https://github.com/microsoft/msquic/commit/e0f55b5fdc9fff0b4465976d066ebd22fb7e2b3b)</p> <p># Impact</p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required.</p> <p><strong>Affected:</strong> NuGet: Microsoft.Native.Quic.MsQuic.OpenSSL, NuGet: Microsoft.Native.Quic.MsQuic.Schannel</p> <p># Summary Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network.</p> <p># Details</p> <p>New network path creations and removals triggered by incoming packets can lead to a pointer invalidation.</p> <p>## Patches</p> <p>- Guard path promotion [e0f55b5](https://github.com/microsoft/msquic/commit/e0f55b5fdc9fff0b4465976d066ebd22fb7e2b3b)</p> <p># Impact</p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required.</p> https://cve.radiocsirt.org/vuln/ghsa-92f5-vc22-8j33 https://cve.radiocsirt.org/vuln/msrc_cve-2026-62815 msrc_CVE-2026-62815 https://cve.radiocsirt.org/vuln/msrc_cve-2026-62815 https://cve.radiocsirt.org/vuln/ncsc-2026-0284 NCSC-2026-0284 https://cve.radiocsirt.org/vuln/ncsc-2026-0284 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2756 <p>Ein Angreifer kann mehrere Schwachstellen in Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows 10, Microsoft Windows Server 2019, Microsoft Windows Server 2022, Microsoft Exchange, Microsoft Windows 11, Microsoft Windows Server 2025 und Microsoft Windows ausnutzen, um beliebigen Programmcode auszuführen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, um einen Cross-Site Scripting Angriff durchzuführen, und um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows 10, Microsoft Windows Server 2019, Microsoft Windows Server 2022, Microsoft Exchange, Microsoft Windows 11, Microsoft Windows Server 2025 und Microsoft Windows ausnutzen, um beliebigen Programmcode auszuführen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, um einen Cross-Site Scripting Angriff durchzuführen, und um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2756