CVE-2026-85824

A Use after free vulnerability exists in the Windows Composite Image File System . This flaw allows an authorized attacker to perform a local privilege escalation . While the vulnerability is confirmed, specific technical details regarding the root cause or affected components are not provided in...

CVE-2026-85825

A Use after free vulnerability exists in the Windows Universal Disk Format File System Driver (UDFS) . This flaw allows an authorized attacker to achieve local privilege elevation . No specific exploit information or detailed remediation steps are provided in the documents beyond the mention of a...

CVE-2026-85820

A Use after free vulnerability exists in the Windows Universal Disk Format File System Driver (UDFS) . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-122 (Heap-based Buffer Overflow) and CWE-190 (Integer Overflow or Wraparo...

CVE-2026-85798

A heap-based buffer overflow exists in the Windows Distributed File System (DFS) . This vulnerability allows an authorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 7.2, reflecting high impact on confidentiality, integrity, and availability. No specific explo...

CVE-2026-85791

A heap-based buffer overflow vulnerability exists in the Windows Encrypting File System (EFS) . This flaw allows an authorized attacker to perform a local elevation of privilege . While the documents confirm the vulnerability type and potential impact, specific details regarding the affected comp...

CVE-2026-85355

The Windows Common Log File System Driver is vulnerable to an elevation of privilege flaw due to the inclusion of functionality from an untrusted control sphere (CWE-829 ). An authorized attacker can exploit this issue to gain higher privileges locally. The vulnerability has been assigned a HIGH ...

CVE-2026-85328

A weak authentication vulnerability exists in the Windows Projected File System . This flaw allows an authorized attacker to perform a local privilege elevation . No specific software versions, root causes, or remediation steps are provided in the documents beyond the existence of an official fix...

CVE-2026-84009

A Time-of-check time-of-use (TOCTOU) race condition exists in the Windows Projected File System . This vulnerability allows an authorized attacker to perform tampering locally . The vulnerability is associated with CWE-367 . No specific exploit details or remediation steps are provided in the doc...

CVE-2026-83586

The Windows Resilient File System (ReFS) Deduplication Service is vulnerable to weak authentication (CWE-1390), which allows an authorized attacker to perform a local privilege elevation . The impact includes high risks to confidentiality, integrity, and availability. An official fix is available...

CVE-2026-83848

A vulnerability exists in the Windows COM+ Event System Service due to an untrusted pointer dereference . This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit details or versions are provided in the documents, though the issue is confirmed with a HIG...

CVE-2026-83784

A vulnerability in the Windows Encrypting File System (EFS) allows an authorized attacker to perform an absolute path traversal attack. This flaw can be exploited over a network to elevate privileges . The CVSS 3.1 score is 8.8 (High) , reflecting high impacts on confidentiality, integrity, and a...

CVE-2026-83759

A code injection vulnerability exists in the Windows Encrypting File System (EFS) . This flaw allows an authorized attacker to execute arbitrary code over a network. The vulnerability is associated with CWE-94 (Improper Control of Generation of Code). While the documents confirm the existence of ...

CVE-2026-83713

An out-of-bounds read vulnerability exists in the Windows Universal Disk Format File System Driver (UDFS) . This flaw allows an authorized attacker to disclose information locally. The vulnerability is categorized under CWE-497 (Exposure of Sensitive System Information to an Unauthorized Control ...

CVE-2026-70233

A heap-based buffer overflow exists in the Windows Common Log File System Driver . This vulnerability allows an authorized attacker to achieve local privilege elevation . The CVSS 3.1 score is 7.8 (HIGH) , reflecting high impact on confidentiality, integrity, and availability. No specific exploit...

CVE-2026-70132

A Heap-based buffer overflow exists in the Windows Portable Device File System Driver . This vulnerability allows an authorized attacker to achieve local privilege elevation . Official remediation is available via a patch, and the vulnerability is confirmed with a HIGH base severity score of 7.8....

CVE-2026-105723

The Windows Distributed File System (DFS) is susceptible to an untrusted pointer dereference vulnerability. This flaw allows an unauthorized attacker to achieve elevation of privilege over a network. The vulnerability has a HIGH base severity score of 7.5 (CVSS 3.1). While the specific root cause...

CVE-2026-102227

A heap-based buffer overflow exists in the Windows Resilient File System (ReFS) . This vulnerability allows an authorized attacker to achieve local code execution . Official remediation is available via Microsoft updates.

CVE-2019-10685

CVE-2019-10685 The user supplied input containing JavaScript is echoed back in JavaScript code in an HTML response via the "TextField" parameter. Exploit-DB publication at https://www.exploit-db.com/exploits/46804 PacketStorm publication at...

CVE-2023-36874_BOF

CVE-2023-36874 Windows Error Reporting LPE BOF Introduction This is a mature and operational CobaltStrike BOF implementation of Filip Dragovic's @filipdragovic CVE-2023-36874 Windows Error Reporting LPE exploit. He did the heavy lifting in terms of creating a working exploit by reversing the...

CVE-2021-38699-Stored-XSS

CVE-2021-38699: Stored XSS in TastyIgniter v3.0.7 Restaurtant CMS Stored authenticated cross-site scripting exists in the in TastyIgniter v3.0.7 Restaurtant CMS System Logs section of the web application. https://vulners.com/cve/CVE-2021-38699 POC 1. Execute reflective cross site scripting...