190 matches found
CVE-2026-65673
Entra Connect Elevation of Privilege Vulnerability...
CVE-2026-62751
CVE-2026-62751 describes an integer overflow or wraparound in Windows Projected File System that enables a locally authenticated attacker to elevate privileges. The entry cites a CVSS v3.1 base score of 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, and privileges required as LOW; im...
CVE-2026-70345 Windows Installer Elevation of Privilege Vulnerability
...
CVE-2026-62766
CVE-2026-62766 describes a double free in Windows Kerberos that allows an authorized attacker to elevate privileges locally . The affected component is Windows Kerberos; the underlying cause is a memory-management error leading to a use-after-free-like condition, as stated. The provided documents...
July Microsoft Patch Tuesday
July Microsoft Patch Tuesday. In the second week of July, I was on vacation in St. Petersburg. After that, I got caught up with a bunch of other tasks, so I'm only publishing this roundup now. Better late than never, especially considering how unusual this MSPT turned out to be. 😉 In total, 571...
EUVD-2021-25220
Malware in sbrugna...
EUVD-2022-25472
Malicious code in bioql PyPI...
EUVD-2022-25858
Malicious code in bioql PyPI...
May
MayLinux Patch Wednesday. This time: 1091 vulnerabilities. Of those, 716 are in the Linux Kernel. 5 vulnerabilities are exploited in the wild: RCE - PHP CSS Parser CVE-2020-13756. In AttackerKB, an exploit exists. DoS - Apache ActiveMQ CVE-2025-27533. In AttackerKB, an exploit exists. SFB -...
CVE-2021-38783
There is a Out-of-Bound Write in the Allwinner R818 SoC Android Q SDK V1.0 camera driver "/dev/cedardev" through iotcl cmd IOCTLSETPROCINFO and IOCTLCOPYPROCINFO, which could cause a system crash or EoP...
April Microsoft Patch Tuesday
April Microsoft Patch Tuesday. A total of 153 vulnerabilities, 2 times more than in March. Of these, 32 were added between the March and April MSPTs. Three vulnerabilities show signs of exploitation in the wild: EoP - Windows Common Log File System Driver CVE-2025-29824. An attacker can gain SYST...
February Microsoft Patch Tuesday
February Microsoft Patch Tuesday. 89 CVEs, 33 added since January. Two with signs of exploitation in the wild: EoP - Windows Ancillary Function Driver for WinSock CVE-2025-21418 EoP - Windows Storage CVE-2025-21391 There are no vulnerabilities with public exploits, but there are 7 with private...
Microsoft and Adobe Patch Tuesday, November 2024 Security Update Review
Microsoft has released its November 2024 Patch Tuesday updates, targeting various vulnerabilities that could impact users and organizations worldwide. From zero-day threats to key product patches, here’s what’s crucial to apply this month. Here’s a breakdown of the updates and how they impact you...
Patch Tuesday - October 2024
Microsoft is addressing 118 vulnerabilities this October 2024 Patch Tuesday. Microsoft has evidence of in-the-wild exploitation and/or public disclosure for five of the vulnerabilities published today, although it does not rate any of these as critical yet. Of those five, Microsoft lists two as...
Exploit for Missing Release of Memory after Effective Lifetime in Realtek Rtsper
CVE-2024-40431+CVE-2022-25479 chain for EOPDATA ONLY ATTACK...
CVE-2024-32906
CVE-2024-32906 affects Google Pixel/Android components: In the AcvpOnMessage function of avcp.cpp, uninitialized data may cause an Elevation of Privilege (EoP). This could enable local privilege escalation with no extra execution privileges and no user interaction required. The available connecte...
CVE-2024-32929
In gpuslcgetregion of pixelgpuslc.c, there is a possible EoP due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2024-32929
In gpuslcgetregion of pixelgpuslc.c, there is a possible EoP due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2024-32929
CVE-2024-32929 affects the Pixel GPU driver path gpu_slc_get_region in pixel_gpu_slc.c. A use-after-free in that function can cause a local elevation of privilege, with no additional execution privileges needed and no user interaction required. Public details across connected records confirm the ...