445 matches found
CVE-2026-16438
Incorrect Privilege Assignment vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Historian versions 10.97.3 and prior, AnalytiX versions 10.97.3 and prior, MobileHMI 10.97.3 and prior, MC Works64 all versions, Mitsubishi...
CVE-2026-16438 An arbitrary operation vulnerability in GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, and MC Works64
Incorrect Privilege Assignment vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Historian versions 10.97.3 and prior, AnalytiX versions 10.97.3 and prior, MobileHMI 10.97.3 and prior, MC Works64 all versions, Mitsubishi...
CVE-2026-16438
Mitsubishi Electric products including GENESIS64 , ICONICS Suite , Hyper Historian , AnalytiX , MobileHMI (versions 10.97.3 and prior), and MC Works64 (all versions) are vulnerable to an Incorrect Privilege Assignment (CWE-266). The root cause is that installers unnecessarily grant default DCOM p...
CVE-2026-16438 An arbitrary operation vulnerability in GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, and MC Works64
Incorrect Privilege Assignment vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Historian versions 10.97.3 and prior, AnalytiX versions 10.97.3 and prior, MobileHMI 10.97.3 and prior, MC Works64 all versions, Mitsubishi...
PT-2026-114845
Incorrect Privilege Assignment vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Historian versions 10.97.3 and prior, AnalytiX versions 10.97.3 and prior, MobileHMI 10.97.3 and prior, MC Works64 all versions, Mitsubishi...
CVE-2026-88096
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows DCOM Server allows an authorized attacker to elevate privileges locally...
CVE-2026-88096
A race condition vulnerability exists in the Windows DCOM Server due to concurrent execution using a shared resource with improper synchronization. This flaw allows an authorized attacker to achieve local privilege elevation . No specific details regarding affected versions or exploit availabilit...
Windows DCOM Server Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows DCOM Server allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-88096: Windows DCOM Server Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows DCOM Server allows an authorized attacker to elevate privileges locally...
CVE-2026-69284
Heap-based buffer overflow in Windows DCOM Server allows an authorized attacker to elevate privileges locally...
EUVD-2026-73432
Heap-based buffer overflow in Windows DCOM Server allows an authorized attacker to elevate privileges locally...
CVE-2026-69284
CVE-2026-69284 is a heap-based buffer overflow in Windows DCOM Server that allows an authorized attacker to elevate privileges locally . The CVSS 3.1 score is 7.8 (HIGH) with a vector of CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a local attack with low complexity and low privileges...
Windows DCOM Server Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows DCOM Server allows an authorized attacker to elevate privileges locally...
PT-2026-87331
Name of the Vulnerable Software and Affected Versions Windows DCOM Server affected versions not specified Description A heap-based buffer overflow in the Windows DCOM Server allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program writes more...
CVE-2026-69284: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows DCOM Server allows an authorized attacker to elevate privileges locally...
CVE-2005-1794
creationtimestamp| type| source ---|---|--- 2026-08-27 16:00:03+00:00| seen| Telegram/tjdPFWmK8d3uOic7fBL4SWiO2RjxR5x57I46YuEU7JS4U 2026-08-28 00:00:36+00:00| seen| Telegram/tjdPFWmK8d3uOic7fBL4SWiO2RjxR5x57I46YuEU7JS4U...
CVE-2026-15380 Local privilege escalation in Symantec ITMS
A non-administrator interactive user can obtain full SYSTEM code execution through a DCOM/task scheduler logic chain — no network access, no memory corruption required ITMS 8.7.3...
CVE-2026-15380: Improper Privilege Management
A non-administrator interactive user can obtain full SYSTEM code execution through a DCOM/task scheduler logic chain — no network access, no memory corruption required ITMS 8.7.3...