CVE-2026-7383 Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion
Information published.
EPSS 0.01 CVE-2026-7383 US
Výsledky hledání
6
CVE-2026-34182 CMS AuthEnvelopedData Processing May Accept Forged Messages
Information published.
EPSS 0.00 CVE-2026-34182 US
CVE-2026-57062 CMS (Cryptographic Message Syntax) parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM because aes-ICVlen is supposed to be 12 bytes but 4 bytes is accepted. NOTE: this is related to CVE-2026-34182.
Information published.
EPSS 0.00 CVE-2026-34182 CVE-2026-57062 GnuPG US
CVE-2026-34183 Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler
Information published.
EPSS 0.01 CVE-2026-34183 US
CVE-2026-45447 Heap Use-After-Free in the PKCS7_verify() Function
Information published.
EPSS 0.04 CVE-2026-45447 US
CVE-2026-45445 AES-OCB IV Ignored on EVP_Cipher() Path
Information published.
EPSS 0.01 CVE-2026-45445 US
15
CVE-2026-34355 Apache HTTP Server: mod_proxy_html buffer overflow
Information published.
EPSS 0.01 CVE-2026-34355 Apache Software Foundation US
CVE-2026-44185 Apache HTTP Server: Stack Buffer Over-Read in mod_ssl OCSP `send_request`
Information published.
EPSS 0.01 CVE-2026-44185 Apache US
CVE-2026-34356 Apache HTTP Server: ProxyPassReverseCookieMap buffer overflow
Information published.
EPSS 0.01 CVE-2026-34356 Apache HTTP Server US
CVE-2026-44186 Apache HTTP Server: Loop in `proxy_ftp_handler` in mod_proxy_ftp
Information published.
EPSS 0.01 CVE-2026-44186 Apache US
CVE-2026-42535 Apache HTTP Server: mod_dav_fs protected directory access
Information published.
EPSS 0.01 CVE-2026-42535 Apache US
CVE-2026-44631 Apache HTTP Server: Heap Underflow in `ap_regname` via Signed Char Overflow
Information published.
EPSS 0.01 CVE-2026-44631 Apache US
CVE-2026-29167 Apache HTTP Server: mod_ldap per-dir use-after-free
Information published.
EPSS 0.01 CVE-2026-29167 Apache US
CVE-2026-43951 Apache HTTP Server: OOB Read in `merge_response_headers` can cause crash
Information published.
EPSS 0.01 CVE-2026-43951 Apache US
CVE-2026-42536 Apache HTTP Server: mod_xml2enc heap overflow
Information published.
EPSS 0.01 CVE-2026-42536 Apache US
CVE-2026-29170 Apache HTTP Server: mod_proxy_ftp XSS
Information published.
EPSS 0.01 CVE-2026-29170 Apache US
CVE-2026-44119 Apache HTTP Server: escalation of privilege through expressions in .htaccess in multiple modules
Information published.
EPSS 0.00 CVE-2026-44119 Apache US
CVE-2026-48913 Apache HTTP Server: mod_http2 memory corruption when file handles exhausted
Information published.
EPSS 0.00 CVE-2026-48913 Apache US
CVE-2026-10846 Insufficient verification that responses belong to a query
Information published.
EPSS 0.00 CVE-2026-10846 US
CVE-2026-11822 SQLite before 3.53.2 Memory Corruption in FTS5 Extension
Information published.
EPSS 0.00 CVE-2026-11822 SQLite US
CVE-2026-11824 SQLite before 3.53.2 Heap Buffer Overflow via FTS5 fts5ChunkIterate
Information published.
EPSS 0.00 CVE-2026-11824 SQLite US
2
CVE-2026-46330 Revert "net/smc: Introduce TCP ULP support"
Information published.
EPSS 0.00 CVE-2026-46330 US
CVE-2026-49762 Unbounded integer parsing in the Version module enables CPU and memory exhaustion denial of service
Information published.
EPSS 0.00 CVE-2026-49762 US
37
CVE-2026-44804 Windows DWM Core Library Elevation of Privilege Vulnerability
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-44804 US
CVE-2026-44813 Windows DWM Core Library Elevation of Privilege Vulnerability
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-44813 US
CVE-2026-42993 Remote Desktop Client Remote Code Execution Vulnerability
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
EPSS 0.00 CVE-2026-42993 US
CVE-2026-42987 Windows Deployment Services (WDS) Remote Code Execution
Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-42987 veřejná správa US
CVE-2026-42985 Remote Desktop Client Remote Code Execution Vulnerability
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-42985 US
CVE-2026-44801 Remote Desktop Client Remote Code Execution Vulnerability
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
EPSS 0.00 CVE-2026-44801 US
CVE-2026-44802 Windows DWM Core Library Elevation of Privilege Vulnerability
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-44802 US
CVE-2026-42983 Windows DWM Core Library Elevation of Privilege Vulnerability
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-42983 US
CVE-2026-44815 DHCP Client Service Remote Code Execution Vulnerability
Stack-based buffer overflow in Windows DHCP Client allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-44815 US
CVE-2026-44799 Remote Desktop Client Remote Code Execution Vulnerability
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
EPSS 0.00 CVE-2026-44799 US
CVE-2026-44807 Windows DWM Core Library Elevation of Privilege Vulnerability
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-44807 US
CVE-2026-44808 Windows DWM Core Library Elevation of Privilege Vulnerability
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-44808 US
CVE-2026-44811 Windows DWM Core Library Elevation of Privilege Vulnerability
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-44811 US
CVE-2026-44805 Windows Network Controller (NC) Host Agent Denial of Service Vulnerability
Use after free in Windows Network Controller (NC) Host Agent allows an authorized attacker to deny service locally.
EPSS 0.00 CVE-2026-44805 US
CVE-2026-42992 Remote Desktop Client Remote Code Execution Vulnerability
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
EPSS 0.00 CVE-2026-42992 US
CVE-2026-44810 Microsoft Cryptographic Services Elevation of Privilege Vulnerability
Improper authentication in Windows Cryptographic Services allows an unauthorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-44810 Microsoft US
CVE-2026-44809 Windows Common Log File System Driver Elevation of Privilege Vulnerability
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-44809 US
CVE-2026-42989 Winlogon Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in Winlogon allows an authorized attacker to elevate privileges locally.
EPSS 0.02 CVE-2026-42989 US
CVE-2026-42991 Windows Push Notifications Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-42991 US
CVE-2026-42979 Windows Push Notifications Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-42979 US
CVE-2026-42977 Windows Push Notifications Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-42977 US
CVE-2026-42978 Windows Push Notifications Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-42978 US
CVE-2026-42986 Microsoft Graphics Component Elevation of Privilege Vulnerability
Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
EPSS 0.02 CVE-2026-42986 Microsoft US
CVE-2026-42974 Windows Performance Monitor Remote Code Execution Vulnerability
Integer underflow (wrap or wraparound) in Windows Performance Monitor allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-42974 US
CVE-2026-42981 Windows Performance Monitor Remote Code Execution Vulnerability
Integer underflow (wrap or wraparound) in Windows Performance Monitor allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-42981 US
CVE-2026-42984 Windows Kernel Elevation of Privilege Vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-42984 US
CVE-2026-42973 Windows Push Notification Information Disclosure Vulnerability
Use of uninitialized resource in Windows Push Notifications allows an authorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-42973 US
CVE-2026-42970 Windows Push Notification Information Disclosure Vulnerability
Use of uninitialized resource in Windows Push Notifications allows an authorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-42970 US
CVE-2026-42971 Windows Push Notification Information Disclosure Vulnerability
Use of uninitialized resource in Windows Push Notifications allows an authorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-42971 US
CVE-2026-42969 Windows Push Notification Information Disclosure Vulnerability
Use of uninitialized resource in Windows Push Notifications allows an authorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-42969 US
CVE-2026-42972 Windows Hyper-V Information Disclosure Vulnerability
Exposure of sensitive information to an unauthorized actor in Windows Hyper-V allows an authorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-42972 US
CVE-2026-42968 Windows Telephony Server Information Disclosure Vulnerability
Out-of-bounds read in Windows Telephony Service allows an authorized attacker to disclose information locally.
EPSS 0.00 CVE-2026-42968 US
CVE-2026-42914 Windows Kerberos Denial of Service Vulnerability
Out-of-bounds read in Windows Kerberos allows an authorized attacker to deny service over a network.
EPSS 0.01 CVSS 5.3 CVE-2026-42914 US
CVE-2026-42912 Windows Telephony Service Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-42912 US
CVE-2026-42913 Remote Desktop Client Remote Code Execution Vulnerability
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
EPSS 0.00 CVE-2026-42913 US
CVE-2026-42911 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-42911 US
CVE-2026-42916 NT OS Kernel Elevation of Privilege Vulnerability
Integer underflow (wrap or wraparound) in Windows NT OS Kernel allows an authorized attacker to elevate privileges locally.
EPSS 0.00 CVE-2026-42916 US