7875 matches found
PT-2026-116378
Name of the Vulnerable Software and Affected Versions Rank Math SEO PRO version 3.0.123 Description A supply-chain compromise occurred where a subset of packages distributed between October 15, 2026, and October 16, 2026, contained embedded malware. This issue has been actively exploited in the...
PPLmedic
PPLmedic This tool implements a Userland exploit chain for injecting arbitrary code into a PPL with the signer type Windows and elevating to the signer type WinTcb. These techniques were originally discussed by James Forshaw a.k.a. @tiraniddo in his blog post Injecting Code into Windows Protected...
ROOT-APP-MAVEN-CVE-2026-54514 CVE-2026-54514 in com.fasterxml.jackson.core:jackson-databind - Patched by Root
Root has patched CVE-2026-54514 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...
SCTT-2026-33-0007-The-OLE-Vortex-Laminar-Bypass-
SCTT-2026-33-0007-The-OLE-Vortex-Laminar-Bypass- Microsoft just released emergency patches for CVE-2026-21509, a zero-day in the Office Suite that bypasses OLE/COM mitigations when a user simply opens a file. They think their "Service-side change" for Office 2021+ is a solid wall...
VirtualBox 7.2.97 COM RPC Interface Code Injection / Privilege Escalation
VirtualBox version 7.2.97 on Windows contains an insufficient fix for a COM RPC interface code injection elevation of privilege issue. The proof of concept invokes GetCurrentProcessId in a hardened VirtualBox process. https://packetstorm.news/download/235875...
EUVD-2026-101012
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in axew3.com WP w3all phpBB wp-w3all-phpbb-integration allows Stored XSS.This issue affects WP w3all phpBB: from n/a through 3.1.0...
CLEANSTART-2026-CW52413 package com
CVE-2022-25647 affects multiple packages. The package com. See references for individual vulnerability details...
CVE-2026-96933
Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...
CVE-2026-83848
Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...
CVE-2026-83830
Heap-based buffer overflow in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...
CVE-2026-83785
Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69909
Heap-based buffer overflow in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally...
CVE-2026-96933
The Windows COM+ Event System Service is vulnerable to an untrusted pointer dereference . This security flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is assigned a CVSS v3.1 score of 7.8 (High) , indicating significant impact on confidentiality, integ...
EUVD-2026-100252
Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...
CVE-2026-83830
A heap-based buffer overflow exists in the Windows COM+ Event System Service . This vulnerability allows an authorized attacker to achieve local privilege escalation . No specific details regarding the root cause, affected versions, or available exploits are provided in the documents. Remediation...
CVE-2026-83785
A Use after free vulnerability exists in the Windows COM+ Event System Service . This flaw allows an authorized attacker to achieve local privilege escalation . No specific software versions or exploit links are provided in the documents; however, a remediation level of OFFICIAL_FIX is indicated.
CVE-2026-83848
A vulnerability exists in the Windows COM+ Event System Service due to an untrusted pointer dereference . This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit details or versions are provided in the documents, though the issue is confirmed with a HIG...
CVE-2026-69909
A heap-based buffer overflow exists in Microsoft COM for Windows , which could allow an authorized attacker to perform a local privilege elevation . The vulnerability is classified as HIGH severity with a CVSS 3.1 base score of 7.8. No specific exploit details or remediation steps are provided in...
