Lucene search
+L

313356 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•13 views

Microsoft Windows: CVE-2026-83760: Microsoft Bluetooth Driver Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Bluetooth Driver allows an authorized attacker to disclose information locally...

5.5CVSS5.7AI score0.00379EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•14 views

Microsoft Windows: CVE-2026-70288: Win32k Information Disclosure Vulnerability

Time-of-check time-of-use toctou race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...

5.5CVSS5.6AI score0.00352EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•13 views

CVE-2026-69914: Out-of-bounds Read

Out-of-bounds read in Windows AppX Deployment Service allows an authorized attacker to disclose information locally...

5.5CVSS5.8AI score0.00459EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•12 views

PT-2026-112438

Name of the Vulnerable Software and Affected Versions Windows Graphics Kernel affected versions not specified Description A use after free issue in the Windows Graphics Kernel allows an authorized attacker to locally disclose sensitive information, which can impact the system. Recommendations At...

4.7CVSS6.1AI score0.00353EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•11 views

CVE-2026-70074: Out-of-bounds Read

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally...

5.5CVSS5.7AI score0.00459EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•22 views

PT-2026-113548

Name of the Vulnerable Software and Affected Versions OpenVPN ovpn-dco-win versions 0.6.5 through 1.3.5 OpenVPN ovpn-dco-win versions 2.4.0 through 2.8.7 Description Improper synchronization in the Windows component allows local attackers to trigger a deadlock by performing a crafted write to the...

6.9CVSS5.7AI score0.00113EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•12 views

Microsoft Windows: CVE-2026-69958: Windows Overlay Filter Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack...

6.8CVSS6.7AI score0.00498EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•18 views

PT-2026-112336

Name of the Vulnerable Software and Affected Versions Windows Hyper-V affected versions not specified Description A null pointer dereference in Windows Hyper-V allows an authorized attacker to cause a local denial of service. A null pointer dereference occurs when a program attempts to read from ...

6.5CVSS5.4AI score0.00434EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•9 views

PT-2026-112824

Improper privilege management in Python allows an authorized attacker to elevate privileges locally...

7.8CVSS5.9AI score0.00301EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•13 views

Microsoft Windows: CVE-2026-88158: Microsoft Digest Authentication Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Digest Authentication allows an authorized attacker to disclose information locally...

5.5CVSS5.7AI score0.00287EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•14 views

CVE-2026-79715: Improper Limitation of a Pathname to a Restricted Directory

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 could allow a local attacker to traverse directories on the system. An attacker could use a specially crafted application archive to write files outside the intended directory...

5.5CVSS5.9AI score0.00139EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•16 views

PT-2026-112848

Buffer over-read in Windows StateRepository API allows an authorized attacker to disclose information locally...

5.5CVSS5.7AI score0.0044EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•9 views

CVE-2026-109190: Server-Side Request Forgery (SSRF)

A vulnerability has been found in conductor-oss conductor 3.31.2. This affects the function ListApiToolsTask.start of the file ListApiToolsTask.java of the component API Tool Configuration. The manipulation of the argument specUrl leads to server-side request forgery. The attack is possible to be...

6.5CVSS6.3AI score0.00256EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•23 views

PT-2026-111973

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A use-after-free issue in the HID class driver allows an unauthorized attacker to elevate privileges. This occurs during a physical attack, where the attacker can manipulate the system to gai...

6.4CVSS6.2AI score0.00346EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•7 views

CVE-2026-70186: Deadlock

Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network...

7.5CVSS6AI score0.00959EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•12 views

CVE-2026-83904: Out-of-bounds Read

Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally...

5.5CVSS5.7AI score0.00422EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•11 views

Microsoft Windows: CVE-2026-70108: Windows Win32k Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...

7.8CVSS6.2AI score0.00499EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•13 views

PT-2026-112761

Name of the Vulnerable Software and Affected Versions Windows Sysmain Service affected versions not specified Description Exposure of sensitive system information to an unauthorized control sphere in the Windows Sysmain Service allows an authorized attacker to disclose information locally...

5.5CVSS5.7AI score0.0046EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•17 views

PT-2026-112977

Name of the Vulnerable Software and Affected Versions Windows Bind Filter Driver affected versions not specified Description A heap-based buffer overflow occurs in the Windows Bind Filter Driver. This issue allows an authorized attacker to elevate privileges locally on the system. A heap-based...

7.8CVSS6.3AI score0.00311EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•16 views

PT-2026-112285

Improper resolution of path equivalence in Windows Backup Engine allows an authorized attacker to elevate privileges locally...

7.8CVSS5.9AI score0.00421EPSS
SaveExploits0References2
Rows per page
Query Builder