351 matches found
CVE-2024-26229
CVE-2024-26229 Windows CSC service privilege escalation vulnerability. When a program writes more data to a buffer than its capacity, a heap-based buffer overflow occurs, causing excess data to overflow into adjacent memory areas. This overflow can corrupt memory and may allow an attacker to...
cve-2024-26229
cve-2024-26229 A nim version of the now outdated Windows LPE vulnerability abusing CSC. This is for educational purposes only, and refer to the patch list to determine whether or not your system/your target is vulnerable. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26229 Usage...
CVE-2024-26229-BOF
CVE-2024-26229 BOF Beacon Object File implementation of CVE-2024-26229 — Windows CSC driver local privilege escalation via DKOM token theft. Based on RalfHacker/CVE-2024-26229-exploit, converted to BOF with Dynamic Function Resolution DFR for use with C2 frameworks that support the Cobalt Strike...
CVE-2025-46018-CSC-Pay-Mobile-App-Payment-Authentication-Bypass
CVE-2025-46018 – CSC Pay Mobile App Payment Authentication Bypass Summary A payment authentication bypass vulnerability was discovered in the CSC Pay Mobile App, affecting version 2.19.4. The flaw allowed an attacker to initiate a payment, disable Bluetooth at a specific point in the process, and...
csc-mlops (>=0.8.0, <=0.9.18), email-cleaning-service (>=0.0.1, <=1.0.0) +1 more potentially affected by CVE-2026-53995 via mlflow (2.0.1)
mlflow PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - csc-mlops =0.8.0, =0.0.1, =1.6.1, =1.6.2 Source cves: CVE-2026-53995 Source advisory: OSV:GHSA-WQMH-QCCW-PQWF...
csc-mlops (>=0.9.21, <=0.10.0), mlflow-cratedb (2.10.0) +1 more potentially affected by CVE-2026-53995 via mlflow (2.10.0)
mlflow PYPI version 2.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - csc-mlops =0.9.21, =0.10.0 - mlflow-cratedb 2.10.0 - refract-mlflow-plugin 1.0.3 Source cves: CVE-2026-53995 Source advisory: OSV:GHSA-WQMH-QCCW-PQ...
CVE-2026-83698
Heap-based buffer overflow in Windows Client-Side Caching CSC Service allows an authorized attacker to elevate privileges locally...
CVE-2026-83699
Stack-based buffer overflow in Windows Client-Side Caching CSC Service allows an authorized attacker to elevate privileges locally...
CVE-2026-83580
Heap-based buffer overflow in Windows Client-Side Caching CSC Service allows an authorized attacker to elevate privileges locally...
CVE-2026-70068
Heap-based buffer overflow in Windows Client-Side Caching CSC Service allows an unauthorized attacker to elevate privileges over a network...
EUVD-2026-99956
Heap-based buffer overflow in Windows Client-Side Caching CSC Service allows an authorized attacker to elevate privileges locally...
CVE-2026-83698
A heap-based buffer overflow exists in the Windows Client-Side Caching (CSC) Service . This vulnerability allows an authorized attacker to achieve local privilege escalation . No specific exploit information or in-the-wild exploitation details are provided in the documents. Remediation involves a...
EUVD-2026-99682
Heap-based buffer overflow in Windows Client-Side Caching CSC Service allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-70068
A heap-based buffer overflow exists in the Windows Client-Side Caching (CSC) Service . This vulnerability allows an unauthorized attacker to elevate privileges over a network. The issue involves a heap-based buffer overflow (CWE-122) and an untrusted pointer dereference (CWE-822). Exploitation de...
CVE-2026-83699
A stack-based buffer overflow exists in the Windows Client-Side Caching (CSC) Service . This vulnerability allows an authorized attacker to perform a local privilege escalation . Exploitation details and specific exploit links are not provided in the documents.
EUVD-2026-99334
Stack-based buffer overflow in Windows Client-Side Caching CSC Service allows an authorized attacker to elevate privileges locally...
CVE-2026-83580
A heap-based buffer overflow exists in the Windows Client-Side Caching (CSC) Service . This vulnerability allows an authorized attacker to perform a local privilege escalation . No specific exploit code or proof-of-concept is provided in the documents. Remediation is noted as an official fix by t...
EUVD-2026-99304
Heap-based buffer overflow in Windows Client-Side Caching CSC Service allows an authorized attacker to elevate privileges locally...
Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability
Stack-based buffer overflow in Windows Client-Side Caching CSC Service allows an authorized attacker to elevate privileges locally...
Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Client-Side Caching CSC Service allows an authorized attacker to elevate privileges locally...