The internet is broken right now.

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.

Memory safety OS & kernel

Incorrect authorization in Active Directory Domain Services allows an authorized attacker to execute code over a network.

Auth & access OS & kernel

Heap-based buffer overflow in Microsoft Color Management allows an unauthorized attacker to execute code over a network.

Memory safety OS & kernel

Double free in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network.

Memory safety OS & kernel

Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.

Memory safety OS & kernel

Exposure of sensitive system information to an unauthorized control sphere in Windows Print Spooler Components allows an authorized attacker to disclose information over a network.

Disclosure OS & kernel

This issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. A remote attacker may be able to break out of the WebContent sandbox.

Disclosure OS & kernel Apple Ipados

Null pointer dereference in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to deny service over a network.

Memory safety OS & kernel

Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.

Memory safety OS & kernel

Out-of-bounds read in Windows DNS allows an unauthorized attacker to disclose information over a network.

Memory safety OS & kernel

Integer overflow or wraparound in Windows DNS allows an unauthorized attacker to disclose information over a network.

Memory safety OS & kernel

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.

Memory safety OS & kernel

Buffer over-read in Windows iSCSI Target Service allows an unauthorized attacker to disclose information over a network.

Memory safety OS & kernel

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.

Memory safety OS & kernel

Stack-based buffer overflow in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network.

Memory safety OS & kernel

Exposure of sensitive information to an unauthorized actor in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.

Auth & access OS & kernel

Exposure of sensitive information to an unauthorized actor in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally.

Disclosure OS & kernel

Relative path traversal in Windows Print Spooler Components allows an unauthorized attacker to elevate privileges over a network.

Disclosure OS & kernel

Out-of-bounds read in Windows iSCSI allows an authorized attacker to disclose information over a network.

Memory safety OS & kernel

Heap-based buffer overflow in Windows Storage Spaces Controller allows an unauthorized attacker to elevate privileges over a network.

Memory safety OS & kernel

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

Memory safety OS & kernel

Stack-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

Memory safety OS & kernel

Untrusted pointer dereference in Windows Storage Spaces Controller allows an unauthorized attacker to execute code over a network.

Other OS & kernel

Heap-based buffer overflow in Microsoft XPS Document Converter allows an unauthorized attacker to execute code over a network.

Memory safety OS & kernel

Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.

Other OS & kernel

Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.

Memory safety OS & kernel

Use of uninitialized resource in Windows Installer allows an unauthorized attacker to disclose information over a network.

Memory safety OS & kernel

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A remote attacker may be able to cause unexpected app termination or heap corruption.

Memory safety OS & kernel Apple macOS

Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service over a network.

Memory safety OS & kernel

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.

Memory safety OS & kernel

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.

Memory safety OS & kernel

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.

Memory safety OS & kernel

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.

Memory safety OS & kernel

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.

Memory safety OS & kernel

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.

Memory safety OS & kernel

Improper link resolution before file access ('link following') in Windows DNS allows an authorized attacker to elevate privileges over a network.

Other OS & kernel

A flaw was found in the xfs_admin utility in xfsprogs. The tool does not properly validate user-supplied parameters, allowing operating system command injection. A local attacker can exploit this issue by providing crafted input arguments, which may result in arbitrary command execution and local privilege escalation depending on how xfs_admin is executed.

Injection OS & kernel

Integer underflow (wrap or wraparound) in HID Parser Library allows an authorized attacker to elevate privileges over a network.

Memory safety OS & kernel

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

Memory safety OS & kernel

Integer overflow or wraparound in Microsoft Color Management allows an unauthorized attacker to execute code over a network.

Memory safety OS & kernel

Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.

Memory safety OS & kernel

Use after free in Windows Network Address Translation (NAT) allows an unauthorized attacker to execute code over a network.

Memory safety OS & kernel

A resource exhaustion issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. A remote attacker may be able to cause a denial-of-service.

Denial of service OS & kernel Apple Ipados

Observable timing discrepancy in Windows Schannel allows an unauthorized attacker to execute code over a network.

Other OS & kernel

Integer underflow (wrap or wraparound) in Windows Internet Information Services allows an unauthorized attacker to deny service over a network.

Memory safety OS & kernel

Uncontrolled resource consumption in Windows Internet Information Services allows an unauthorized attacker to deny service over a network.

Other OS & kernel

Out-of-bounds read in ActiveSyncProvider allows an unauthorized attacker to disclose information over a network.

Memory safety OS & kernel

Uncontrolled resource consumption in Windows Remote Procedure Call allows an unauthorized attacker to deny service over a network.

Other OS & kernel

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

Memory safety OS & kernel

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

Memory safety OS & kernel