Lucene search
+L

59139 matches found

Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•11 views

PT-2026-111478

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 158 Firefox ESR versions prior to 153.5 Thunderbird versions prior to 158 Thunderbird versions prior to 153.5 Description A race condition in the Networking component allows for a sandbox escape. A race condition occu...

9.6CVSS6.3AI score0.00479EPSS
SaveExploits3References105
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•6 views

CVE-2026-109754: Undefined Security Weakness

Incorrect boundary conditions in the DOM: Editor component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

8.1CVSS6.1AI score0.00324EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•4 views

CVE-2026-96911: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.00402EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•7 views

Microsoft Windows: CVE-2026-100215: Microsoft Graphics Component Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code locally...

7.8CVSS7.8AI score0.00467EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•5 views

CVE-2026-100215: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code locally...

7.8CVSS7.8AI score0.00467EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•5 views

CVE-2026-102209: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...

7CVSS6AI score0.00236EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•5 views

CVE-2026-85881: Stack-based Buffer Overflow

Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges over a network...

8CVSS6.2AI score0.00677EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•6 views

CVE-2026-70156: Use After Free

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

7CVSS6.2AI score0.00267EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•4 views

CVE-2026-88160: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

7CVSS5.8AI score0.00153EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•5 views

CVE-2026-70136: Use After Free

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

7CVSS6.2AI score0.00252EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•6 views

CVE-2026-96324: Use After Free

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

7.8CVSS6.2AI score0.00311EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•5 views

CVE-2026-83570: Use After Free

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

7.8CVSS6.2AI score0.00341EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•5 views

CVE-2026-83850: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

7.8CVSS6.1AI score0.00318EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•5 views

CVE-2026-83725: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Windows Search Component allows an unauthorized attacker to execute code over a network...

8.8CVSS6.6AI score0.00607EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2026/10/13 12:00 a.m.•12 views

Fabric OS AAA Privilege Bypass

The vulnerability of the Fabric OS AAA component of the Brocade Fabric OS operating system is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

8CVSS6.6AI score0.00394EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/10/13 12:00 a.m.•5 views

Google Chrome Downloads Component Clickjacking

The vulnerability of the Downloads component in Google Chrome and Microsoft Edge is related to an improper limitation on the visible layers of the user interface. Exploiting this vulnerability allows a remote attacker to carry out a clickjacking attack using a specially created HTML page...

6.4CVSS6.3AI score0.00245EPSS
SaveExploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
•added 2026/10/13 12:00 a.m.•6 views

Google Chrome Downloads Component Data Compromise

The vulnerability of the Downloads component in Google Chrome and Microsoft Edge relates to incomplete cleaning of temporary or auxiliary resources. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected information through a specially created HTML page...

7.8CVSS6.8AI score0.00365EPSS
SaveExploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
•added 2026/10/13 12:00 a.m.•6 views

Google Chrome Downloads Unauthorized Access

The vulnerability of the Downloads component in Google Chrome and Microsoft Edge relates to the disclosure of information. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created HTML page...

3.1CVSS5.8AI score0.0023EPSS
SaveExploits0References8Affected Software4
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•6 views

PT-2026-111919

Name of the Vulnerable Software and Affected Versions Microsoft Graphics Component affected versions not specified Description A heap-based buffer overflow in the Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a...

7CVSS6.1AI score0.00236EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•5 views

PT-2026-116203

Уязвимость компонента Graphics Component операционных систем Windows связана с выходом операции за границы буфера в памяти. Эксплуатация уязвимости может позволить нарушителю выполнить произвольный код...

7.8CVSS7.3AI score0.00467EPSS
SaveExploits0References2
Rows per page
Query Builder