Substance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could lever...
Fresh 2026 Zero-Days & Newly Disclosed CVEs
Continuous surveillance of newly registered CVE advisories with CVSS threat scores, attack vector metrics, and impacted software libraries.
Substance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could lever...
Substance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could lever...
Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network....
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network....
Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network....
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network....
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network....
Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network....
Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network....
Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally....
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally....
Use after free in Windows Client License Service allows an authorized attacker to elevate privileges locally....
Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally....
Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network....
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally....
Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network....
Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally....
Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized attacker to execute code over a network....
Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to disclose information over a network....
Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network....
Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network....
Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network....
Out-of-bounds read in .NET allows an unauthorized attacker to disclose information over a network....