CVE-2026-21234 Windows Connected Devices Platform Service Elevation of Privilege Vulnerability

...

CVE-2026-21234

CVE-2026-21234 concerns Windows Connected Devices Platform Service where a race condition due to improper synchronization enables local privilege escalation for an authorized attacker. The vulnerability affects the platform service's concurrent execution via a shared resource; impact includes con...

CVE-2026-21234

creationtimestamp| type| source ---|---|--- 2026-02-10 17:30:28+00:00| seen| https://www.thezdi.com/blog/2026/2/10/the-february-2026-security-update-review 2026-02-10 18:01:45+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0053...

Linux Distros Unpatched Vulnerability : CVE-2018-21234

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Jodd before 5.0.4 performs Deserialization of Untrusted JSON Data when setClassMetadataName is set. CVE-2018-21234 Note that Nessus relies on the presence of th...

CVE-2025-21234

Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability...

CVE-2025-21234 Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability

...

CVE-2024-21234

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic...

CVE-2024-21234

...

CVE-2023-21234

creationtimestamp| type| source ---|---|--- 2023-08-15 02:19:59+00:00| seen| https://t.me/cibsecurity/68512...

CVE-2023-21234

In launchConfirmationActivity of ChooseLockSettingsHelper.java, there is a possible way to enable developer options without the lockscreen PIN due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is no...

CVE-2023-21234

In launchConfirmationActivity of ChooseLockSettingsHelper.java, there is a possible way to enable developer options without the lockscreen PIN due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is no...

Lansweeper SQL Injection (CVE-2022-21234)

An SQL injection vulnerability exists in Lansweeper. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

CVE-2022-21234

creationtimestamp| type| source ---|---|--- 2022-04-15 00:19:19+00:00| seen| https://t.me/cibsecurity/40809...

CVE-2022-21234

Lansweeper 9.1.20.2 EchoAssets.aspx contains an SQL injection via an unsanitized order parameter used in a dynamic ORDER BY clause. An authenticated user with permissions can trigger remote code execution through a crafted request. Exploitation details and PoC are documented by Talos (TL;CVSSv3 9...

cc.akkaha:pea-dubbo_2.12 (>=0.1.5 <=0.2.0), cc.akkaha:pea_2.12 (>=0.1.0 <=0.2.0) +43 more potentially affected by CVE-2018-21234 via org.jodd:jodd-json (>=3.6.6 <=5.0.3)

org.jodd:jodd-json MAVEN version =3.6.6, =0.1.5, =0.1.0, =0.4.0, =1.0.3, =1.0.3, =1.0.3, =1.0.3, =1.0.3, =1.0.3, =1.0.3, =1.0.3, =1.2.1 and more Source cves: CVE-2018-21234 Source advisory: OSV:GHSA-JRG3-QQ99-35G7...

CVE-2021-21234

creationtimestamp| type| source ---|---|--- 2021-01-05 20:52:47+00:00| seen| https://t.me/cibsecurity/21594 2021-12-01 09:38:28+00:00| published-proof-of-concept| https://t.me/BlueRedTeam/1252 2021-12-01 12:29:13+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/4876...

CVE-2021-21234

CVE-2021-21234 affects the Spring Boot Actuator Logview library (eu.hinsch:spring-boot-actuator-logview). Before version 0.2.13, there is a directory traversal vulnerability exposed by the actuator logviewer endpoint, where both the filename parameter and the base directory can be manipulated (ba...

CVE-2018-21234

creationtimestamp| type| source ---|---|--- 2020-05-22 02:55:30+00:00| seen| https://t.me/cibsecurity/12240...

CVE-2018-21234

Jodd before 5.0.4 performs Deserialization of Untrusted JSON Data when setClassMetadataName is set...

CVE-2018-21234

Jodd before 5.0.4 is affected by CVE-2018-21234: Deserialization of Untrusted JSON Data when setClassMetadataName is set. The issue stems from how the library handles deserialization, enabling potentially untrusted data to be deserialized. Impact is indicated as high (NVD CVSS v3.1 base score 9.8...