Lucene search
+L

313360 matches found

Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•12 views

PT-2026-112712

Allocation of resources without limits or throttling in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...

7.5CVSS5.9AI score0.01079EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•14 views

PT-2026-112647

Name of the Vulnerable Software and Affected Versions HID Parser Library affected versions not specified Description An out-of-bounds read in the HID Parser Library allows an authorized attacker to disclose sensitive information locally, which can affect the system. Recommendations At the moment,...

5.5CVSS5.7AI score0.00439EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•12 views

CVE-2026-96108: Use After Free

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally...

7.8CVSS6.3AI score0.00299EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•11 views

CVE-2026-96235: Out-of-bounds Write

Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network...

8.8CVSS6.4AI score0.00859EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•12 views

CVE-2026-70055: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of sensitive system information to an unauthorized control sphere in Windows Cryptographic Services allows an authorized attacker to disclose information locally...

5.5CVSS5.7AI score0.00932EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•12 views

CVE-2026-70196: Inefficient Algorithmic Complexity

Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network...

5.9CVSS6AI score0.0091EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•16 views

PT-2026-112917

Weak authentication in Microsoft Input Method Editor IME allows an authorized attacker to elevate privileges locally...

7.8CVSS5.9AI score0.00206EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•18 views

PT-2026-112646

Name of the Vulnerable Software and Affected Versions Windows Win32K affected versions not specified Description A use-after-free issue in Windows Win32K allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption flaw that occurs when an application continu...

7.8CVSS6.1AI score0.00379EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•9 views

CVE-2026-87694: Use After Free

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

7.8CVSS6.3AI score0.00353EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•14 views

PT-2026-112516

Out-of-bounds read in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to disclose information locally...

5.5CVSS5.7AI score0.00932EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•14 views

PT-2026-112391

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Security Center allows an authorized attacker to elevate privileges locally...

6.4CVSS5.9AI score0.00233EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•13 views

Microsoft Windows: CVE-2026-83893: Windows Clipboard User Service Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows Clipboard User Service allows an authorized attacker to disclose information locally...

5.5CVSS5.7AI score0.00544EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•12 views

CVE-2026-85374: Out-of-bounds Read

Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally...

5.5CVSS5.7AI score0.00388EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•11 views

Microsoft Windows: CVE-2026-102194: Windows Graphics Kernel Elevation of Privilege Vulnerability

Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally...

7CVSS6.3AI score0.00289EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•14 views

CVE-2026-85328: Weak Authentication

Weak authentication in Windows Projected File System allows an authorized attacker to elevate privileges locally...

7CVSS5.9AI score0.0022EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•16 views

PT-2026-111327

Name of the Vulnerable Software and Affected Versions AdithyaYelloju Restaurant-Management-System affected versions not specified Description An authorization bypass exists in the Order Management component. A remote attacker can manipulate the ID argument within the mysqli query function to bypa...

7.5CVSS7.2AI score0.00302EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•10 views

CVE-2026-70144: Use After Free

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...

7CVSS6.3AI score0.00392EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•14 views

PT-2026-113045

Name of the Vulnerable Software and Affected Versions Microsoft.NETCore.App.Runtime.linux-arm versions 8.0.0 through 8.0.31 Microsoft.NETCore.App.Runtime.linux-arm64 versions 8.0.0 through 8.0.31 Microsoft.NETCore.App.Runtime.linux-musl-arm versions 8.0.0 through 8.0.31...

7.8CVSS5.9AI score0.00411EPSS
SaveExploits0References81
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•16 views

PT-2026-112810

Name of the Vulnerable Software and Affected Versions Windows AppX Deployment Service affected versions not specified Description Improper link resolution before file access, also known as link following, allows an authorized attacker to elevate privileges locally on the system. Recommendations A...

7.8CVSS5.8AI score0.00474EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•14 views

Microsoft Windows: CVE-2026-88099: Windows Failover Cluster Denial of Service Vulnerability

Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network...

5.9CVSS5.9AI score0.00818EPSS
SaveExploits0References2
Rows per page
Query Builder