Lucene search
+L

313360 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•14 views

Microsoft Windows: CVE-2026-83794: Windows Portable Device MTP Driver Information Disclosure Vulnerability

Out-of-bounds read in Windows Portable Device MTP Driver allows an authorized attacker to disclose information locally...

5.5CVSS5.7AI score0.0044EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•10 views

CVE-2026-88089: Heap-based Buffer Overflow

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally...

6.7CVSS6.5AI score0.00302EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•14 views

PT-2026-112405

Name of the Vulnerable Software and Affected Versions Windows BitLocker affected versions not specified Description An open redirect issue exists where the system can be directed to an untrusted site. This allows an unauthorized attacker to bypass a security feature through a physical attack...

6.1CVSS5.8AI score0.0045EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•12 views

CVE-2026-69916: Integer Overflow or Wraparound

Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally...

7.8CVSS5.9AI score0.00379EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•13 views

Microsoft Windows: CVE-2026-96223: Windows Hyper-V Elevation of Privilege Vulnerability

Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally...

7.8CVSS6.3AI score0.00311EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•11 views

CVE-2026-85836: Use After Free

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

7.8CVSS6.3AI score0.00312EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•13 views

Microsoft Windows: CVE-2026-69766: Windows Storage Elevation of Privilege Vulnerability

Use after free in Windows Storage allows an authorized attacker to elevate privileges locally...

7CVSS7.2AI score0.0023EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•18 views

Microsoft Windows: CVE-2026-96851: Windows Management Instrumentation Information Disclosure Vulnerability

Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information locally...

5.5CVSS5.7AI score0.00387EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•12 views

Microsoft Windows: CVE-2026-69856: Windows Storage Elevation of Privilege Vulnerability

Use after free in Windows Storage allows an authorized attacker to elevate privileges locally...

7CVSS6.3AI score0.0023EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•13 views

CVE-2026-83672: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of sensitive system information to an unauthorized control sphere in Windows Installer allows an authorized attacker to disclose information locally...

4.7CVSS5.7AI score0.00717EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•7 views

CVE-2026-96225: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...

7.8CVSS5.9AI score0.00411EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•16 views

Microsoft Windows: CVE-2026-108132: Windows Kerberos Elevation of Privilege Vulnerability

Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally...

7CVSS5.8AI score0.00279EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•14 views

Microsoft Exchange: CVE-2026-87695: Microsoft Exchange Server Elevation of Privilege Vulnerability

Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.00292EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•13 views

PT-2026-112550

Name of the Vulnerable Software and Affected Versions Windows Win32K affected versions not specified Description Use of an uninitialized resource in Windows Win32K allows an authorized attacker to disclose sensitive information locally, which may affect the system. Recommendations At the moment,...

5.5CVSS5.7AI score0.00459EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•13 views

Microsoft Windows: CVE-2026-70293: Win32k Information Disclosure Vulnerability

Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...

5.5CVSS5.7AI score0.00459EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•14 views

PT-2026-112584

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...

7CVSS6.3AI score0.00279EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•13 views

CVE-2026-88191: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00375EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•10 views

Microsoft Windows: CVE-2026-108462: Windows Kernel Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally...

5.5CVSS5.8AI score0.00892EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•26 views

PT-2026-113392

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 could allow an unauthenticated remote attacker to corrupt the persisted status of batch job instances...

8.2CVSS6AI score0.00331EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•16 views

PT-2026-112559

Name of the Vulnerable Software and Affected Versions Windows Clipboard User Service affected versions not specified Description Incorrect authorization in the Windows Clipboard User Service allows an authorized attacker to disclose information locally. Recommendations At the moment, there is no...

5.5CVSS5.7AI score0.00341EPSS
SaveExploits0References5
Rows per page
Query Builder