Export limit exceeded: 424748 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 424748 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (424748 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-96984 | 1 Microsoft | 4 Windows Server 2016, Windows Server 2019, Windows Server 2022 and 1 more | 2026-11-10 | 4.9 Medium |
| Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network. | ||||
| CVE-2026-97006 | 1 Microsoft | 4 Windows Server 2016, Windows Server 2019, Windows Server 2022 and 1 more | 2026-11-10 | 4.9 Medium |
| Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network. | ||||
| CVE-2026-96980 | 1 Microsoft | 4 Windows Server 2016, Windows Server 2019, Windows Server 2022 and 1 more | 2026-11-10 | 4.9 Medium |
| Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network. | ||||
| CVE-2026-96975 | 1 Microsoft | 4 Windows Server 2016, Windows Server 2019, Windows Server 2022 and 1 more | 2026-11-10 | 5.9 Medium |
| Out-of-bounds read in DNS Server allows an unauthorized attacker to deny service over a network. | ||||
| CVE-2026-96983 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-11-10 | 5.3 Medium |
| Use after free in Windows DNS allows an unauthorized attacker to deny service over an adjacent network. | ||||
| CVE-2026-96969 | 1 Microsoft | 9 Windows 10 21h2, Windows 10 22h2, Windows 11 23h2 and 6 more | 2026-11-10 | 7 High |
| Double free in Windows TCP/IP allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-96971 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-11-10 | 7 High |
| Use after free in Windows NetBIOS allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-97002 | 1 Microsoft | 11 Windows 10 1809, Windows 10 21h2, Windows 10 22h2 and 8 more | 2026-11-10 | 7.5 High |
| Out-of-bounds read in Windows VMSwitch allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-96973 | 1 Microsoft | 11 Windows 10 1809, Windows 10 21h2, Windows 10 22h2 and 8 more | 2026-11-10 | 7 High |
| Use after free in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-96979 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-11-10 | 6.8 Medium |
| Integer overflow or wraparound in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical attack. | ||||
| CVE-2026-97000 | 1 Microsoft | 2 Windows 10 21h2, Windows 10 22h2 | 2026-11-10 | 7 High |
| Null pointer dereference in Windows USM Communication Manager allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-96989 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-11-10 | 5.5 Medium |
| Out-of-bounds read in Secondary Logon allows an authorized attacker to disclose information locally. | ||||
| CVE-2026-96982 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-11-10 | 6.8 Medium |
| Integer overflow or wraparound in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical attack. | ||||
| CVE-2026-96974 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-11-10 | 6.8 Medium |
| Integer overflow or wraparound in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical attack. | ||||
| CVE-2026-96994 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-11-10 | 7 High |
| Use after free in Winsock allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-67375 | 1 Microsoft | 1 Sql Server 2025 | 2026-11-10 | 8.8 High |
| Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network. | ||||
| CVE-2026-68783 | 1 Microsoft | 2 Sql Server 2025, Sql Server 2025 For X64-based Systems Cu10 | 2026-11-10 | 6.5 Medium |
| Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network. | ||||
| CVE-2026-99285 | 1 Linux | 1 Linux Kernel | 2026-11-10 | 5.5 Medium |
| In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_byteorder: remove multi-register support 64bit byteorder conversion is broken when several registers need to be converted because the source register array advances in steps for 4 bytes instead of 8: for (i = ... src64 = nft_reg_load64(&src[i]); ~~~~~ u32 *src nft_reg_store64(&dst64[i], Remove the multi-register support, it has other issues as well: Pablo points out that commit caf3ef7468f7 ("netfilter: nf_tables: prevent OOB access in nft_byteorder_eval") alters semantics: before the loop operated on registers, i.e. for ( ... ) dst32[i] = htons((u16)src32[i]) .. but after the patch it will operate on bytes, which makes this useless to convert e.g. concatenations, which store each compound in its own register. Multi-convert of u32 has one theoretical application: ct mark . meta mark . tcp dport @intervalset Because ct mark and meta mark are host byte order, use with intervals has to convert the byteorder for ct/meta mark value to network byte order (bigendian). nftables emits this: [ meta load mark => reg 1 ] [ byteorder reg 1 = hton(reg 1, 4, 4) ] [ ct load mark => reg 9 ] [ byteorder reg 9 = hton(reg 9, 4, 4) ] ... I.e. two separate calls. Theoretically it could be changed to do: [ meta load mark => reg 1 ] [ ct load mark => reg 9 ] [ byteorder reg 1 = htonl(reg 1, 4, 8) ] ... But then all it would take to change the set to meta mark . tcp dport . ct mark ... and we'd be back to two "byteorder" calls. IOW, support to convert a range of registers is both dysfunctional and dubious. Simplify this: remove the feature. Pablo Neira Ayuso points out that nftables before 1.1.0 can generate incorrect byteorder conversions, see 9fe58952c45a, "evaluate: skip byteorder conversion for selector smaller than 2 bytes" in nftables.git). Affected rulesets fail to load with this change and old userspace due to 'len != size' check. | ||||
| CVE-2026-96146 | 1 Ibm | 1 Sevone Network Performance Management | 2026-11-10 | 7.5 High |
| IBM SevOne Network Performance Management 7.0.0 through 8.2.2 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption. | ||||
| CVE-2026-85929 | 1 Microsoft | 5 Windows 11 24h2, Windows 11 25h2, Windows 11 26h1 and 2 more | 2026-11-10 | 7.8 High |
| Incorrect permission assignment for critical resource in Windows Brokering File System allows an authorized attacker to elevate privileges locally. | ||||