EUVD-2026-63697

Uncontrolled search path element in Windows Remote Help Defense allows an authorized attacker to perform spoofing locally...

CVE-2026-55015

Uncontrolled search path element in Windows Remote Help allows an authorized attacker to deny service locally...

CVE-2026-55013

Uncontrolled search path element in Windows Remote Help Defense allows an authorized attacker to perform spoofing locally...

CVE-2026-69555 Azure Arc Elevation of Privilege Vulnerability

...

CVE-2026-55015

CVE-2026-55015 is an uncontrolled search path element vulnerability in Windows Remote Help that allows an authorized local attacker to cause a denial of service . The attack requires local access with low privileges and no user interaction (CVSS 3.1: 5.5 MEDIUM ). CISA's SSVC assessment indicates...

CVE-2026-55013 Windows Remote Help Defense Spoofing Vulnerability

...

CVE-2026-55013 Windows Remote Help Defense Spoofing Vulnerability

...

CVE-2026-55013

An uncontrolled search path element in Windows Remote Help Defense allows an authorized local attacker (low privileges, no user interaction) to spoof, with HIGH confidentiality and integrity impact per CVSS 3.1 (base score 7.1). Microsoft's update guide is the primary reference. No exploit code o...

CVE-2026-20908

A flaw was found in the Intel NPU Driver for Windows. This time-of-check time-of-use TOCTOU race condition vulnerability allows an unprivileged, authenticated local attacker to cause a denial of service. The attack has high complexity and requires no user interaction. This could lead to a...

Windows Remote Help Defense Spoofing Vulnerability

Uncontrolled search path element in Windows Remote Help Defense allows an authorized attacker to perform spoofing locally...

Microsoft Remote Help Denial of Service Vulnerability

Uncontrolled search path element in Windows Remote Help allows an authorized attacker to deny service locally...

Moderate: Red Hat Security Advisory: OpenJDK 11.0.32.1 ELS Security Update for Windows Builds

An update is now available for OpenJDK. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References...

Kaseya VSA < 9.5.7 - Credential Disclosure via Windows Agent

Kaseya VSA before 9.5.7 allows credential disclosure, as exploited in the wild in July 2021. By default Kaseya VSA on premise offers a download page where the clients for the installation can be downloaded. The default URL for this page is https://x.x.x.x/dl.asp When an attacker download a client...

EUVD-2026-63111

In Splunk Enterprise for Windows versions below 10.4.2, 10.2.6, 10.0.9, 9.4.13, and 9.3.14, a local user with access to the Windows host could bind to the management port before Splunk Enterprise starts, intercept authentication tokens from child processes, and use those tokens to compromise all...

CVE-2026-47827 - BOSH CLI Powershell Injection | Cloud Foundry

HIGH CVSSv4: High 7.7 CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVSSv3: High 7.5 CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Vendor CloudFoundry Foundation Versions Affected Severity is HIGH unless otherwise noted. BOSH CLI tool – All versions v2.840.0 Description Command...

PT-2026-79189

Uncontrolled search path element in Windows Remote Help Defense allows an authorized attacker to perform spoofing locally...

PT-2026-79190

Uncontrolled search path element in Windows Remote Help allows an authorized attacker to deny service locally...

CVE-2026-76259

In Splunk Enterprise for Windows versions below 10.4.2, 10.2.6, 10.0.9, 9.4.13, and 9.3.14, a local user with access to the Windows host could bind to the management port before Splunk Enterprise starts, intercept authentication tokens from child processes, and use those tokens to compromise all...

CVE-2026-76259

On Windows, a low-privileged local user can bind to Splunk's management port before the service starts, intercept authentication tokens from child processes, and escalate privileges to compromise all data and system integrity accessible to the Splunk service account. No in-the-wild exploitation i...

CVE-2026-76259 Improper Privilege Management on the Management Port in Splunk Enterprise for Windows

In Splunk Enterprise for Windows versions below 10.4.2, 10.2.6, 10.0.9, 9.4.13, and 9.3.14, a local user with access to the Windows host could bind to the management port before Splunk Enterprise starts, intercept authentication tokens from child processes, and use those tokens to compromise all...