Lucene search
+L

313366 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•9 views

CVE-2026-83762: Use After Free

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...

7.8CVSS6.3AI score0.00353EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•26 views

Microsoft Windows: CVE-2026-70084: Windows Projected File System Information Disclosure Vulnerability

Improper access control in Windows Projected File System allows an authorized attacker to disclose information locally...

5.5CVSS5.7AI score0.00495EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•9 views

CVE-2026-83682: Use After Free

Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally...

7CVSS6.3AI score0.00279EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•13 views

Microsoft Windows: CVE-2026-83679: Windows Defender Firewall Service Elevation of Privilege Vulnerability

Use after free in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally...

7.8CVSS6.3AI score0.00353EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•13 views

CVE-2026-70077: Use After Free

Use after free in Windows Kernel allows an authorized attacker to disclose information locally...

4.7CVSS6.2AI score0.00353EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•10 views

CVE-2026-109116: Authorization Bypass Through User-Controlled Key

A vulnerability was determined in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. Impacted is the function mysqliquery of the component Order Management. Executing a manipulation of the argument ID can lead to authorization bypass. The attack can be...

7.5CVSS6.8AI score0.00302EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•10 views

CVE-2026-70090: Use of Uninitialized Resource

Use of uninitialized resource in Windows Netlogon allows an authorized attacker to disclose information locally...

5.5CVSS5.7AI score0.00459EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•13 views

CVE-2026-88123: Out-of-bounds Read

Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network...

6.5CVSS5.9AI score0.01234EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•11 views

CVE-2026-83908: Release of Invalid Pointer or Reference

Release of invalid pointer or reference in RPC Runtime allows an authorized attacker to elevate privileges locally...

7CVSS5.8AI score0.003EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•19 views

PT-2026-112439

Name of the Vulnerable Software and Affected Versions Windows Geotag Broker affected versions not specified Description Improper access control in Windows Geotag Broker allows an authorized attacker to elevate privileges locally, which can lead to an elevation-of-privilege impact on the system...

7.8CVSS5.8AI score0.00339EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•16 views

PT-2026-112735

Name of the Vulnerable Software and Affected Versions Windows Error Reporting affected versions not specified Description A use after free issue exists in Windows Error Reporting. This allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that...

7CVSS6.1AI score0.00247EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•18 views

PT-2026-111418

A low privileged remote attacker is able to view a list of roles that should only be accessible to administrators. This results in a low level of confidentiality breach, as no particularly sensitive information is affected...

5.3CVSS5.8AI score0.0024EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•18 views

PT-2026-112517

Name of the Vulnerable Software and Affected Versions Windows HTTP.sys affected versions not specified Description The use of an uninitialized resource in Windows HTTP.sys allows an authorized attacker to disclose sensitive information locally and affect the system. Recommendations At the moment,...

5.5CVSS5.7AI score0.00442EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•19 views

PT-2026-111282

A security vulnerability has been detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. The impacted element is the function Session::checkLogin of the file include/session.php of the component Session Handler. Such manipulation of the argument...

7.5CVSS6.7AI score0.00304EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•12 views

CVE-2026-83582: Use After Free

Use after free in Windows Graphics Kernel allows an authorized attacker to disclose information locally...

4.7CVSS6.2AI score0.00353EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•16 views

PT-2026-112677

Double free in Windows Error Reporting allows an authorized attacker to execute code locally...

7CVSS6.5AI score0.003EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•11 views

CVE-2026-70234: Buffer Over-read

Buffer over-read in Desktop Window Manager allows an authorized attacker to disclose information locally...

5.5CVSS5.7AI score0.00422EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•12 views

CVE-2026-70064: Integer Underflow (Wrap or Wraparound)

Integer underflow wrap or wraparound in Windows Kerberos allows an authorized attacker to elevate privileges locally...

7.8CVSS5.9AI score0.00379EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•23 views

CVE-2026-85843: Use of Uninitialized Resource

Use of uninitialized resource in Windows Background Intelligent Transfer Service BITS allows an authorized attacker to elevate privileges locally...

7.8CVSS5.9AI score0.00362EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•11 views

CVE-2026-85369: Out-of-bounds Read

Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally...

8.8CVSS5.8AI score0.00358EPSS
SaveExploits0References3
Rows per page
Query Builder