Most recent entries from all

bdu:2026-13281

certfr-2026-avi-1001 — De multiples vulnérabilités ont été découvertes dans Microsoft Windows. Certaines d'entre elles permettent à un attaqua…

certfr-2026-avi-1001

EUVD-2026-378494

fkie_cve-2026-66799

Heap-based buffer overflow in Windows Key Guard allows an authorized attacker to elevate privileges locally.

GHSA-cr27-wq5j-8m89

Heap-based buffer overflow in Windows Key Guard allows an authorized attacker to elevate privileges locally.

jvndb-2026-035789

CVE-2026-42976 | Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability CVE-2026-49179 | Windows Active Directory Domain Services Remote Code Execution Vulnerability CVE-2026-50472 | Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability CVE-2026-54113 | Remote Procedure Call Denial of Service Vulnerability CVE-2026-54984 | Windows Imaging Component Remote Code Execution Vulnerability CVE-2026-56174 | Windows Narrator Braille Elevation of Privilege Vulnerability CVE-2026-59122 | Windows Telephony Service Elevation of Privilege Vulnerability CVE-2026-59125 | Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability CVE-2026-59126 | Windows Event Logging Service Elevation of Privilege Vulnerability CVE-2026-59127 | Windows Installer Elevation of Privilege Vulnerability CVE-2026-59128 | Windows Encrypting File System (EFS) Information Disclosure Vulnerability CVE-2026-59130 | AMD Zen Information Disclosure Vulnerability CVE-2026-59131 | AMD Zen Information Disclosure Vulnerability CVE-2026-59132 | Windows TCP/IP Denial of Service Vulnerability CVE-2026-59134 | Remote Desktop Client Remote Code Execution Vulnerability CVE-2026-59135 | Microsoft Windows Search Component Information Disclosure Vulnerability CVE-2026-59136 | Microsoft COM for Windows Information Disclosure Vulnerability CVE-2026-59137 | Windows Event Logging Service Information Disclosure Vulnerability CVE-2026-59138 |…

msrc_CVE-2026-66799 — Windows Key Guard Elevation of Privilege Vulnerability

msrc_CVE-2026-66799

NCSC-2026-0284 — Kwetsbaarheden verholpen in Microsoft Windows

NCSC-2026-0284

RHSA-2026:57191 — Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.16.3 security update

fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization github.com/hashicorp/memberlist: HashiCorp memberlist: Denial of Service via push/pull state handling golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass grafana: Grafana: Privilege escalation via dashboard overwrite net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header axios: Axios: Information disclosure of proxy credentials via HTTP redirects axios: Axios: Information disclosure of proxy credentials via redirect flows axios: Axios: Denial of Service due to unenforced request and response size limits axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normali…

WID-SEC-W-2026-2756 — Microsoft Windows Produkte: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows 10, Microsoft Windows Server 2019, Microsoft Windows Server 2022, Microsoft Exchange, Microsoft Windows 11, Microsoft Windows Server 2025 und Microsoft Windows ausnutzen, um beliebigen Programmcode auszuführen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, um einen Cross-Site Scripting Angriff durchzuführen, und um Sicherheitsvorkehrungen zu umgehen.