134 matches found
CVE-2021-26882
CVE-2021-26882 Remote Access API Elevation of Privilege Vulnerability PoC https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26882 Step 1: Double-click crash.pbk. Step 2: Trigger a crash...
Astra Linux – Vulnerability in Chromium
Insufficient validation of untrusted input in the Storage Access API in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
JFrog Artifactory CVE-2026-42018 Detect
Detects CVE-2026-42018: POST /access/api/v1/aws/token/ trailing slash returns an internal anonymous-user JWT even when anonymous access is disabled. !/usr/bin/env python3 -- coding: utf-8 -- """Detect JFrog Artifactory CVE-2026-42018 anonymous JWT via trailing slash.""" import json from kittysplo...
ROS-20260915-73-0086
The vulnerability of the Storage Access API in Google Chrome and Microsoft Edge browsers is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...
Storage Access API Confidential Data Access
The vulnerability of the Storage Access API in Google Chrome and Microsoft Edge browsers is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...
firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to use-after-free in the Disability Access APIs component...
firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to use-after-free in the Disability Access APIs component...
CVE-2026-65672
CVE-2026-65672 is a Windows vulnerability describing a heap-based buffer overflow in the Windows Remote Access API. An authorized attacker can elevate privileges locally. CVSS v3.1 metrics: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H; base score 7.8 (HIGH). Attack vector is LOCAL, with LOW complexity and...
EUVD-2026-56436
Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally...
CVE-2026-65672 Remote Access API Elevation of Privilege Vulnerability
...
CVE-2026-65672 Remote Access API Elevation of Privilege Vulnerability
...
CVE-2026-65671 Remote Access API Elevation of Privilege Vulnerability
...
CVE-2026-65671 Remote Access API Elevation of Privilege Vulnerability
...
EUVD-2026-56435
Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally...
CVE-2026-65671
The CVE-2026-65671 entry describes a heap-based buffer overflow in Windows Remote Access API that allows an authorized attacker to achieve local privilege escalation. The impact is indicated as high (CVSSv3.1 base score 7.8) with local access required and no user interaction. Public details in th...
firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to use-after-free in the Disability Access APIs component...
Remote Access API Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally...
firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to use-after-free in the Disability Access APIs component...
