12432 matches found
CVE-2026-21221 Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability
...
EUVD-2026-2109
Concurrent execution using shared resource with improper synchronization 'race condition' in Capability Access Management Service camsvc allows an authorized attacker to elevate privileges locally...
CVE-2026-20851
Out-of-bounds read in Capability Access Management Service camsvc allows an unauthorized attacker to disclose information locally...
CVE-2026-20851 Capability Access Management Service (camsvc) Information Disclosure Vulnerability
...
CVE-2026-20851
CVE-2026-20851 is a local-information-disclosure vulnerability in the Windows Capability Access Management Service (camsvc). The issue is described as an out-of-bounds read that can allow an unauthorized local attacker to disclose information. The connected data identify CAMSVC as affected and cl...
CVE-2026-20851 Capability Access Management Service (camsvc) Information Disclosure Vulnerability
...
CVE-2026-20835
CVE-2026-20835 is a local-information-disclosure vulnerability in the Capabilities Access Management Service (camsvc) of Windows. The issue is described as an out-of-bounds read that can allow an authorized, local attacker to disclose sensitive data. Microsoft and external feeds list this CVE in ...
CVE-2026-20815 Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability
...
CVE-2026-20815
Concurrent execution using shared resource with improper synchronization 'race condition' in Capability Access Management Service camsvc allows an authorized attacker to elevate privileges locally...
CVE-2026-20815 Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability
...
CVE-2026-20815
CVE-2026-20815 is a race condition in the Capability Access Management Service (camsvc) that allows a locally authenticated user to elevate privileges. The vulnerability arises from concurrent execution on a shared resource with improper synchronization. Microsoft and multiple security bulletins ...
Capability Access Management Service (camsvc) Information Disclosure Vulnerability
Out-of-bounds read in Capability Access Management Service camsvc allows an unauthorized attacker to disclose information locally...
Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Capability Access Management Service camsvc allows an authorized attacker to elevate privileges locally...
Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Capability Access Management Service camsvc allows an authorized attacker to elevate privileges locally...
Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Capability Access Management Service camsvc allows an authorized attacker to elevate privileges locally...
CVE-2025-71066 net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change
In the Linux kernel, the following vulnerability has been resolved: net/sched: ets: Always remove class from active list before deleting in etsqdiscchange [email protected] says: The vulnerability is a race condition between etsqdiscdequeue and etsqdiscchange. It leads to UAF on stru...
CVE-2025-71066 net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change
In the Linux kernel, the following vulnerability has been resolved: net/sched: ets: Always remove class from active list before deleting in etsqdiscchange [email protected] says: The vulnerability is a race condition between etsqdiscdequeue and etsqdiscchange. It leads to UAF on stru...
CVE-2025-14001
The WP Duplicate Page plugin for WordPress is vulnerable to unauthorized modification of data due to missing capability checks on the 'duplicateBulkHandle' and 'duplicateBulkHandleHPOS' functions in all versions up to, and including, 1.8. This makes it possible for authenticated attackers, with...