Lucene search
+L

29733 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/13 12:00 a.m.•6 views

CVE-2026-21015: Incorrect Default Permissions

Incorrect default permissions in FactoryCamera prior to SMR May-2026 Release 1 allows local attacker to access unique identifier...

6.8CVSS6.1AI score0.00092EPSS
SaveExploits1References3
NVD
NVD
•added 2026/05/12 8:16 p.m.•52 views

CVE-2026-42191

OpenTelemetry.Exporter.OpenTelemetryProtocol is the OTLP OpenTelemetry Protocol exporter implementation. From 1.8.0 to 1.15.2, the OTLP disk retry feature in OpenTelemetry.Exporter.OpenTelemetryProtocol silently fell back to Path.GetTempPath when OTELDOTNETEXPERIMENTALOTLPRETRY=disk was set but...

7.8CVSS0.00148EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/05/12 6:30 p.m.•34 views

EUVD-2026-29710

Untrusted search path in Azure Monitor Agent allows an authorized attacker to elevate privileges locally...

6.5CVSS5.8AI score0.00644EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/05/12 6:30 p.m.•27 views

EUVD-2026-29711

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally...

7.8CVSS6.1AI score0.00466EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/05/12 6:30 p.m.•34 views

EUVD-2026-29683

Use after free in Data Deduplication allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00333EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/05/12 6:30 p.m.•56 views

EUVD-2026-29685

Reliance on a component that is not updateable in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...

6.7CVSS5.8AI score0.02229EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/05/12 6:30 p.m.•49 views

EUVD-2026-29659

Integer underflow wrap or wraparound in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00333EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/05/12 6:30 p.m.•35 views

EUVD-2026-29677

Improper access control in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally...

8.8CVSS5.8AI score0.00298EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/05/12 6:30 p.m.•39 views

EUVD-2026-29627

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...

7.8CVSS5.9AI score0.00333EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/05/12 6:30 p.m.•52 views

EUVD-2026-29626

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally...

5.5CVSS5.8AI score0.00404EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/05/12 6:30 p.m.•45 views

EUVD-2026-29643

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...

8.4CVSS6AI score0.00364EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/05/12 6:30 p.m.•43 views

EUVD-2026-29648

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...

8.4CVSS6AI score0.00364EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/05/12 6:30 p.m.•108 views

EUVD-2026-29623

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

7CVSS5.8AI score0.00264EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/05/12 6:30 p.m.•28 views

EUVD-2026-29575

Improper access control in Windows Filtering Platform WFP allows an authorized attacker to bypass a security feature locally...

4.4CVSS5.8AI score0.00256EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/05/12 6:30 p.m.•27 views

EUVD-2026-29584

Double free in Windows Message Queuing allows an authorized attacker to elevate privileges locally...

7.8CVSS7.1AI score0.00333EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/05/12 6:30 p.m.•42 views

EUVD-2026-29602

Heap-based buffer overflow in Windows Application Identity AppID Subsystem allows an authorized attacker to elevate privileges locally...

7.8CVSS5.9AI score0.00333EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/05/12 6:30 p.m.•27 views

EUVD-2026-29594

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows TCP/IP allows an authorized attacker to elevate privileges locally...

7.8CVSS5.9AI score0.00214EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/05/12 6:30 p.m.•32 views

EUVD-2026-29534

Improper input validation for some IntelR QAT software drivers for Windows before version 2.6 within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result...

6.9CVSS5.7AI score0.00099EPSS
SaveExploits0References2
NVD
NVD
•added 2026/05/12 6:17 p.m.•26 views

CVE-2026-42825

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally...

7CVSS0.00264EPSS
SaveExploits0References1
NVD
NVD
•added 2026/05/12 6:17 p.m.•15 views

CVE-2026-41097

Reliance on a component that is not updateable in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...

6.7CVSS0.02229EPSS
SaveExploits0References1
Rows per page
Query Builder