405,382 results · Feed
-
High 8.8
HEVC Video Extensions Remote Code Execution Vulnerability
Integer underflow (wrap or wraparound) in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network.
-
High 7.8
HEVC Video Extensions Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally.
-
High 7.5
.NET Elevation of Privilege Vulnerability
Improper access control in .NET allows an authorized attacker to elevate privileges locally.
-
High 8.8
Windows DNS Remote Code Execution Vulnerability
Deserialization of untrusted data in Windows DNS allows an unauthorized attacker to execute code over a network.
-
Critical 9.9
Azure DevOps Server Remote Code Execution Vulnerability
Improper authentication in Azure DevOps allows an authorized attacker to execute code over a network.
-
Critical 9.8
Microsoft Xbox Remote Code Execution Vulnerability
Heap-based buffer overflow in Xbox allows an unauthorized attacker to execute code over a network.
-
Medium 6.8
Windows File Server Resource Management Service Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows File Server Resource Management Service allows an unauthorized attacker to elevate privileges with a physical attack.
-
High 8.8
Microsoft ODBC Driver Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows ODBC Driver allows an unauthorized attacker to execute code over a network.
-
Medium 6.8
Windows File Server Resource Management Service Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows File Server Resource Management Service allows an unauthorized attacker to elevate privileges with a physical attack.
-
Medium 6.5
Windows GDI Information Disclosure Vulnerability
Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network.
-
High 7.8
Windows Kernel Elevation of Privilege Vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
-
Medium 6.5
Windows Remote Desktop Client Information Disclosure Vulnerability
Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.
-
High 7.0CVE-2026-100204 Public exploit
HEIF Image Extensions Remote Code Execution Vulnerability
Use after free in HEIF Image Extensions allows an unauthorized attacker to execute code locally.
-
Medium 5.5
Windows Overlay Filter Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows Overlay Filter allows an authorized attacker to disclose information locally.
-
High 7.0
Windows Wireless Networking Elevation of Privilege Vulnerability
Use after free in Windows Wireless Networking allows an authorized attacker to elevate privileges locally.
-
Medium 5.3
Windows Active Directory Certificate Services Security Feature Bypass
Improper certificate validation in Windows Active Directory Certificate Services allows an authorized attacker to bypass a security feature over a network.
-
Medium 6.4
Windows DHCP Server Elevation of Privilege Vulnerability
Missing authentication for critical function in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows OLE DB Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows OLE DB allows an authorized attacker to elevate privileges locally.
-
Medium 5.5
Windows Inventory Backup Information Disclosure Vulnerability
Use of externally-controlled format string in Windows Inventory Backup allows an authorized attacker to disclose information locally.
-
High 7.0
Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability
Null pointer dereference in Microsoft Windows SCSI Class System File allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows DWM Core Library Elevation of Privilege Vulnerability
Release of invalid pointer or reference in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows DWM Core Library Elevation of Privilege Vulnerability
Release of invalid pointer or reference in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
-
Medium 5.5
Windows Shell Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows Shell allows an authorized attacker to disclose information locally.
-
Unscored —
Issue summary: Encrypting a CMS message to an EC certificate whose group order is 1 may cause CMS_encrypt() or CMS_encr…
-
Medium 5.8
pgEdge Go LLM Library discloses provider API key fragments in error messages
pgEdge Go LLM Library provides a unified Go interface for multiple LLM providers with streaming, tool calling, retries, and an HTTP and server-sent events proxy. From 0.1.0 until 0.2.0, GET /v1/health in llm/proxy/handlers.go uses handleHealth to ping provide…
-
High 7.5
pgEdge RAG Server unbounded corpus read allows resource exhaustion from unauthenticated requests
pgEdge RAG Server is an API server for retrieval-augmented generation over PostgreSQL content using pgvector. Prior to 2.0.0, the unauthenticated query endpoint uses FetchDocuments in internal/database/search.go to read the entire filtered corpus without a LI…
-
Medium 5.8
pgEdge RAG Server discloses part of the configured provider credential through API error messagespgEdge RAG Server discloses part of the configured provider credential through API error messages
pgEdge RAG Server is an API server for retrieval-augmented generation over PostgreSQL content using pgvector. Prior to 2.0.0, the unauthenticated query API in internal/server/handlers.go returns err.Error() from failed LLM provider calls, preserving provider-…
-
Medium 5.9
pgEdge RAG Server shared keyword index leaked results between concurrent unauthenticated requests
pgEdge RAG Server is an API server for retrieval-augmented generation over PostgreSQL content using pgvector. Prior to 2.0.0, the BM25 keyword index is a single per-pipeline object shared by the unauthenticated query endpoint, and concurrent requests lock its…
-
Medium 4.3
NocoBase: SSRF in customRequests:send via runtime options.url override
NocoBase is an AI-powered no-code/low-code platform for building business applications and enterprise solutions. Versions 2.1.0 through 2.1.14 contain a server-side request forgery vulnerability in the customRequests:send endpoint. A low-privileged authentica…
-
High 7.8
pgEdge Control Plane generates pg_hba.conf with trust authentication for local and loopback connections
pgEdge Control Plane is a distributed application for managing and orchestrating Postgres databases across multiple hosts. From 0.1.0 to 0.10.1, generated pg_hba.conf files began with hard-coded trust entries for Unix-socket and loopback connections. Because …
-
Medium 6.5
pgEdge Postgres MCP Server SQL injection in the count_rows where parameter
pgEdge Postgres MCP Server enables SQL queries against PostgreSQL databases through Model Context Protocol compatible clients. Prior to 1.1.0, the where parameter of the count_rows tool accepted subqueries against tables other than the table named in the tool…
-
Unscored —
In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_byteorder: remove multi-register sup…
-
Medium 6.5
pgEdge Postgres MCP Server login rate limiting can be evaded by a caller-supplied header
pgEdge Postgres MCP Server enables SQL queries against PostgreSQL databases through Model Context Protocol compatible clients. Prior to 1.1.0, deployments exposing the nondefault HTTP transport with authentication enabled used the leftmost caller-supplied X-F…
-
Unscored —
Plack::Middleware::CSP versions before 0.03 for Perl send the Content Security Policy under the wrong header name, so browsers never enforce it
Plack::Middleware::CSP versions before 0.03 for Perl send the Content Security Policy under the wrong header name, so browsers never enforce it. The call method sets the policy in a response header named "content-security-protocol" instead of "Content-Securit…
-
Medium 6.7
Improper Handling of Highly Compressed Data (CWE-409) in the ZIP loader of whatstk from 0.7.0 before 0.9.0 allows a par…
-
Medium 5.3
pgEdge Postgres MCP Server enables SQL queries against PostgreSQL databases through Model Context Protocol compatible c…
-
High 8.8
Use after free in XML in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to execute arbitrary code insid…
KEV Nov 10, 2026 -
Low 3.4
Uninitialized resource in GPU in Google Chrome on on Android prior to 157.0.8103.50 allowed a remote attacker who had c…
-
Medium 4.7
Uninitialized resource in GPU in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to read memory outside …
-
Critical 9.6
Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.50 allowed a remote attacker leveraging soci…