CVE-2026-15380

A non-administrator interactive user can obtain full SYSTEM code execution through a DCOM/task scheduler logic chain — no network access, no memory corruption required ITMS 8.7.3...

EUVD-2026-45153

A non-administrator interactive user can obtain full SYSTEM code execution through a DCOM/task scheduler logic chain — no network access, no memory corruption required ITMS 8.7.3...

CVE-2025-58310

Permission control vulnerability in the distributed component. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-58310

Permission control vulnerability in the distributed component. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-58310

Permission control vulnerability in the distributed component. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-58310

Permission control vulnerability in the distributed component. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-58310

Huawei HarmonyOS is affected by a privilege-control vulnerability in its distributed components. The issue stems from improper privilege control within the distribution framework, potentially enabling an attacker to affect service confidentiality. The CNVD entry and related sources describe Harmo...

EUVD-2025-199838

Permission control vulnerability in the distributed component. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

Huawei HarmonyOS security vulnerabilities

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A privilege control vulnerability exists in Huawei HarmonyOS, which arises from improper privilege control of distributed components and can be exploited by ...

PT-2025-48296

Name of the Vulnerable Software and Affected Versions versions prior to 2025-58310 Description A permission control issue exists in the distributed component. Successful exploitation could compromise service confidentiality. Recommendations At the moment, there is no information about a newer...

CVE-2025-58310: Access of Resource Using Incompatible Type

Permission control vulnerability in the distributed component. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

Valmet DNA security vulnerabilities

Valmet DNA is a platform for automation and information systems from the Finnish company Valmet. In this single platform, process control, machine control, quality control, drive control and equipment condition monitoring systems are covered. A security vulnerability exists in Valmet DNA versions...

May 24, 2022—KB5014021 (OS Build 20348.740) Preview

May 24, 2022—KB5014021 OS Build 20348.740 Preview Applies To Windows Server 2022 Note For information about Windows update terminology, see the article about the types of Windows updates and the monthly quality update types. For an overview of Windows Server 2022, see its update history page. Not...

Google Chrome OS Authorization Issue Vulnerability

ChromeOS Readiness Tool installer is a system tool for Chrome OS, a lightweight Web-based open source operating system from Google, Inc. The vulnerability stems from an improper implementation that relaxes DCOM access to two objects, which can be exploited to potentially bypass access control...

CVE-2021-26414

Windows DCOM Server Security Feature Bypass...

Galaktika ERP DCOM Disclosure

The vulnerability of the GALAXY ERP resource management system is related to the lack of protection for transmitted data using the DCOM technology. Exploiting this vulnerability allows a malicious actor to disclose sensitive information by analyzing network traffic...

UBUNTU-CVE-2018-19626

In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the DCOM dissector could crash. This was addressed in epan/dissectors/packet-dcom.c by adding '\0' termination...

CVE-2017-14023

An Improper Input Validation issue was discovered in Siemens SIMATIC PCS 7 V8.1 prior to V8.1 SP1 with WinCC V7.3 Upd 13, and V8.2 all versions. The improper input validation vulnerability has been identified, which may allow an authenticated remote attacker who is a member of the administrators...

Siemens SIMATIC WinCC and SIMATIC WinCC Runtime Professional Denial of Service Vulnerability

Siemens SIMATIC WinCC and SIMATIC WinCC Runtime Professional are industrial automation products from Siemens, Germany.SIMATIC WinCC is a Supervisory Control and Data Acquisition SCADA system.SIMATIC WinCC Runtime Professional is a visual runtime platform for operators to control and monitor...

Windows Privilege Escalation

The vulnerability of the DCOM application in Windows operating systems is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to enhance their privileges by using a specially created application...