CVE-2026-129465

The Zr.Admin.NET application (commits af07ffc through eb9228a ) is vulnerable to an Insecure Direct Object Reference (IDOR) flaw in the SysProfileController.UpdateProfile function. This vulnerability allows any authenticated user to modify other accounts by manipulating the UserId parameter. An a...

CVE-2026-96244

Use after free in Windows Internal System User Profile allows an authorized attacker to elevate privileges locally...

CVE-2026-96244

A use after free vulnerability exists in Windows Internal System User Profile , which allows an authorized attacker to achieve local privilege elevation . The vulnerability is rated as HIGH severity (CVSS 3.1 score of 7.8). No specific exploit details or information regarding in-the-wild exploita...

EUVD-2026-99754

Use after free in Windows Internal System User Profile allows an authorized attacker to elevate privileges locally...

Windows Internal System User Profile Elevation of Privilege Vulnerability

Use after free in Windows Internal System User Profile allows an authorized attacker to elevate privileges locally...

CVE-2026-96244: Use After Free

Use after free in Windows Internal System User Profile allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-96244: Windows Internal System User Profile Elevation of Privilege Vulnerability

Use after free in Windows Internal System User Profile allows an authorized attacker to elevate privileges locally...

PT-2026-113054

Use after free in Windows Internal System User Profile allows an authorized attacker to elevate privileges locally...

EUVD-2026-43881

Use after free in Windows Internal System User Profile allows an authorized attacker to elevate privileges locally...

Windows Internal System User Profile Elevation of Privilege Vulnerability

Use after free in Windows Internal System User Profile allows an authorized attacker to elevate privileges locally...

CVE-2026-50425: Use After Free

Use after free in Windows Internal System User Profile allows an authorized attacker to elevate privileges locally...

CVE-2025-7542 PHPGurukul User Registration & Login and User Management System user-profile.php sql injection

A vulnerability was found in PHPGurukul User Registration & Login and User Management System 3.3 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/user-profile.php. The manipulation of the argument uid leads to sql injection. The attack may be...