Lucene search
+L

313366 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•12 views

CVE-2026-70185: Authorization Bypass Through User-Controlled Key

Protection mechanism failure in Windows PowerShell allows an authorized attacker to bypass a security feature locally...

8.8CVSS5.8AI score0.00304EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•14 views

PT-2026-112303

Name of the Vulnerable Software and Affected Versions Windows Win32 Kernel Subsystem affected versions not specified Description A use-after-free condition in the Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issu...

7CVSS6.1AI score0.003EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•16 views

Microsoft Windows: CVE-2026-69974: Desktop Window Manager Information Disclosure Vulnerability

Out-of-bounds read in Desktop Window Manager allows an authorized attacker to disclose information locally...

4.7CVSS5.7AI score0.00325EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•12 views

Microsoft Windows: CVE-2026-70234: Desktop Window Manager Information Disclosure Vulnerability

Buffer over-read in Desktop Window Manager allows an authorized attacker to disclose information locally...

5.5CVSS5.7AI score0.00422EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•16 views

PT-2026-112694

Name of the Vulnerable Software and Affected Versions Windows Update Orchestrator Service affected versions not specified Description Improper link resolution before file access, also known as link following, allows an authorized attacker to disclose information locally. Recommendations At the...

5.5CVSS5.7AI score0.00474EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•18 views

PT-2026-113162

Use after free in Microsoft Office OneNote allows an authorized attacker to elevate privileges locally...

7.8CVSS6.1AI score0.00307EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•12 views

CVE-2026-102221: Improper Check for Certificate Revocation

No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...

4.4CVSS5.8AI score0.00355EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•12 views

Microsoft Windows: CVE-2026-83904: HID Parser Library Information Disclosure Vulnerability

Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally...

5.5CVSS5.7AI score0.00422EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•13 views

PT-2026-113016

Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack...

4.6CVSS5.8AI score0.0051EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•10 views

CVE-2026-87698: Out-of-bounds Read

Out-of-bounds read in Windows Remote Access Service Infrastructure allows an authorized attacker to disclose information locally...

5.5CVSS5.7AI score0.00377EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•15 views

PT-2026-112411

Name of the Vulnerable Software and Affected Versions Windows Setup Files Cleanup affected versions not specified Description An untrusted search path in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no information...

7CVSS5.8AI score0.00421EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•12 views

CVE-2026-88071: Double Free

Double free in Windows Hyper-V allows an authorized attacker to elevate privileges locally...

7.8CVSS6AI score0.00312EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•15 views

Microsoft Windows: CVE-2026-87710: Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability

Improper access control in Microsoft Local Security Authority Server lsasrv allows an authorized attacker to elevate privileges locally...

7CVSS5.9AI score0.00147EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•12 views

CVE-2026-88226: Out-of-bounds Read

Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack...

4.6CVSS5.8AI score0.0051EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•15 views

PT-2026-111276

A vulnerability was found in SourceCodester Performance Indicator System 1.0. This affects an unknown part of the file /opils/admin/addproduct.php. Performing a manipulation of the argument prodcategory results in sql injection. The attack can be initiated remotely. The exploit has been made publ...

7.5CVSS7AI score0.00263EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•12 views

CVE-2026-102186: Untrusted Pointer Dereference

Untrusted pointer dereference in Windows Network File System allows an authorized attacker to disclose information locally...

4.7CVSS5.6AI score0.00365EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•11 views

Microsoft Windows: CVE-2026-83898: HID Parser Library Information Disclosure Vulnerability

Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally...

5.5CVSS5.7AI score0.00422EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•13 views

PT-2026-113099

Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally...

7CVSS6.3AI score0.00279EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•12 views

CVE-2026-85796: Numeric Truncation Error

Numeric truncation error in Windows Installer allows an authorized attacker to elevate privileges locally...

7.8CVSS5.9AI score0.00312EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•14 views

CVE-2026-85815: Out-of-bounds Read

Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally...

5.5CVSS5.7AI score0.00388EPSS
SaveExploits0References3
Rows per page
Query Builder