Windows Hyper-V Remote Code Execution Vulnerability
CVE-2026-102214
Use after free in Windows Hyper-V allows an authorized attacker to execute code locally.
#msrc
共收录 2151 条相关情报。
← 返回所有主题Secure Boot Security Feature Bypass Vulnerability
CVE-2026-102221
No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.
Role: DNS Server Information Disclosure Vulnerability
CVE-2026-97826
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
Role: DNS Server Information Disclosure Vulnerability
CVE-2026-97827
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
Role: DNS Server Information Disclosure Vulnerability
CVE-2026-97825
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
Role: DNS Server Information Disclosure Vulnerability
CVE-2026-97824
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
Role: DNS Server Information Disclosure Vulnerability
CVE-2026-97822
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
Role: DNS Server Information Disclosure Vulnerability
CVE-2026-97823
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
Role: DNS Server Information Disclosure Vulnerability
CVE-2026-97821
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
Role: DNS Server Information Disclosure Vulnerability
CVE-2026-97820
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
Libstoragemgmt: libstoragemgmt: denial of service via stack buffer overflow in scsi vpd page parsing
CVE-2026-93433
Libstoragemgmt: libstoragemgmt: denial of service via stack buffer overflow in scsi vpd page parsing
Privasys rustls fork: RA-TLS challenge mode did not bind attestation evidence to the TLS session
CVE-2026-108266
Privasys rustls fork: RA-TLS challenge mode did not bind attestation evidence to the TLS session
Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if
CVE-2026-102010
Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if
Gcc: libstdc++ integer overflow in `new` operator
CVE-2026-95619
Gcc: libstdc++ integer overflow in `new` operator
Privasys Go fork: RA-TLS challenge mode did not bind attestation evidence to the TLS session
CVE-2026-108267
Privasys Go fork: RA-TLS challenge mode did not bind attestation evidence to the TLS session
Environment-modules: command injection in environment-modules bash completion via malicious module names containing shell metacharacters
CVE-2026-85013
Environment-modules: command injection in environment-modules bash completion via malicious module names containing shel
Cups: null pointer dereference via embedded job ticket comments allows remote denial of service
CVE-2026-107655
Cups: null pointer dereference via embedded job ticket comments allows remote denial of service
Busybox: busybox: tar extraction-root escape via deferred symlink/hardlink creation bypasses cve-2026-26158 fix
CVE-2026-26158 · CVE-2026-108119
Busybox: busybox: tar extraction-root escape via deferred symlink/hardlink creation bypasses cve-2026-26158 fix
ZDR decoding in libnfs through 6.0.2 before 7613236 has an out-of-bounds write related to lib/libnfs-zdr.c with libnfs_zdr_bytes(), libnfs_zdr_string(), and libnfs_zdr_array(). The caller-supplied maxsize value is not honored.
CVE-2026-108985
ZDR decoding in libnfs through 6.0.2 before 7613236 has an out-of-bounds write related to lib/libnfs-zdr.c with libnfs_z
GNU Emacs before 31.2 (and TRAMP through 2.8.2) allows OS command injection via a filename because tramp-user-regexp has an incomplete list of disallowed inputs. NOTE: this issue exists because of an incomplete fix for CVE-2026-79992.
CVE-2026-108976 · CVE-2026-79992
GNU Emacs before 31.2 (and TRAMP through 2.8.2) allows OS command injection via a filename because tramp-user-regexp has