UnCanny

UNCanny Coerce 这项研究的初衷很简单，因为我想找到属于自己的强制认证（coercion）技术。一开始我在寻找新的 RPC 攻击面，但在微软加入了 RPC 活动监控（https://techcommunity.microsoft.com/blog/microsoftdefenderatpblog/microsoft-defender-now-monitors-rpc-activity/4523368）之后，我决定换一条路。 UNCanny 就是那个兔子洞的产物。由于它的局限性，我不会认为它适合真正的红队作战，但我仍然认为这些笔记值得发表，供任何在这个领域深挖的人参考。...

CVE-2026-69605

Use after free in Microsoft Install Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69605

CVE-2026-69605 is a use-after-free vulnerability in Microsoft Install Service that allows an authorized attacker to perform a local privilege escalation . The flaw is classified with a CVSS 3.1 base score of 7.0 (HIGH) , requiring local access, low privileges, and high attack complexity, with hig...

EUVD-2026-73027

Use after free in Microsoft Install Service allows an authorized attacker to elevate privileges locally...

Microsoft Install Service Elevation of Privilege Vulnerability

Use after free in Microsoft Install Service allows an authorized attacker to elevate privileges locally...

PT-2026-87607

Use after free in Microsoft Install Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69605: Use After Free

Use after free in Microsoft Install Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-43876

Improper privilege management in Microsoft Install Service allows an authorized attacker to elevate privileges locally...

CVE-2026-50343

Improper privilege management in Microsoft Install Service allows an authorized attacker to elevate privileges locally...

CVE-2026-50343 Microsoft Install Service Elevation of Privilege Vulnerability

...

CVE-2026-50343 Microsoft Install Service Elevation of Privilege Vulnerability

...

CVE-2026-50343

CVE-2026-50343, a Microsoft Install Service Elevation of Privilege vulnerability, arises from improper privilege management. An authorized local attacker could elevate privileges on affected Windows systems. The vulnerability is listed among several critical Windows privilege-escalation issues di...

Microsoft Install Service Elevation of Privilege Vulnerability

Improper privilege management in Microsoft Install Service allows an authorized attacker to elevate privileges locally...

CVE-2026-50343: Improper Privilege Management

Improper privilege management in Microsoft Install Service allows an authorized attacker to elevate privileges locally...

Exploit for Improper Privilege Management in Microsoft

CVE-2026-50343: InstallService StaticPluginMap EoP Standard U...

PT-2026-58331

Name of the Vulnerable Software and Affected Versions Microsoft Install Service affected versions not specified Description Improper privilege management in the Microsoft Install Service allows an authorized attacker to elevate privileges locally, potentially granting full system control. The iss...

CVE-2026-7630 innocommerce InnoShop Installation Endpoint InstallServiceProvider.php boot improper authentication

A vulnerability has been found in innocommerce InnoShop up to 0.7.8. The affected element is the function InstallServiceProvider::boot of the file innopacks/install/src/InstallServiceProvider.php of the component Installation Endpoint. The manipulation leads to improper authentication. Remote...

CVE-2026-7630 innocommerce InnoShop Installation Endpoint InstallServiceProvider.php boot improper authentication

A vulnerability has been found in innocommerce InnoShop up to 0.7.8. The affected element is the function InstallServiceProvider::boot of the file innopacks/install/src/InstallServiceProvider.php of the component Installation Endpoint. The manipulation leads to improper authentication. Remote...

CVE-2026-7630 innocommerce InnoShop Installation Endpoint InstallServiceProvider.php boot improper authentication

A vulnerability has been found in innocommerce InnoShop up to 0.7.8. The affected element is the function InstallServiceProvider::boot of the file innopacks/install/src/InstallServiceProvider.php of the component Installation Endpoint. The manipulation leads to improper authentication. Remote...

EUVD-2020-30872

Wondershare Driver Install Service contains an unquoted service path vulnerability in the ElevationService executable that allows local attackers to potentially inject malicious code. Attackers can exploit the unquoted path to replace the service binary with a malicious executable, enabling...