Lucene search
+L

33138 matches found

OSV
OSV
added 2026/05/12 12:0 a.m.24 views

ALSA-2026:16206 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: "Dirty Frag" is a new universal Local Privilege Escalation LPE vulnerability in the Linux kernel CVE-2026-43284 For more details about the security issues, including the impact, a CVSS...

8.8CVSS5.8AI score0.93235EPSS
SaveExploits32References4
Positive Technologies
Positive Technologies
added 2026/05/12 12:0 a.m.14 views

PT-2026-40157

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00249EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/05/12 12:0 a.m.12 views

PT-2026-40143

Name of the Vulnerable Software and Affected Versions Windows Cloud Files Mini Filter Driver affected versions not specified Description A use after free issue in the Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. Use after free is a memory...

7.8CVSS5.7AI score0.02117EPSS
SaveExploits0References5
Zero Day Initiative
Zero Day Initiative
added 2026/05/12 12:0 a.m.19 views

Microsoft Windows splwow64 Race Condition Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the splwow64.exe...

4.4CVSS6.2AI score0.0029EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/05/12 12:0 a.m.16 views

PT-2026-40236

Use after free in Data Deduplication allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00332EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/05/12 12:0 a.m.16 views

PT-2026-40162

Heap-based buffer overflow in Windows Application Identity AppID Subsystem allows an authorized attacker to elevate privileges locally...

7.8CVSS5.9AI score0.00326EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/05/12 12:0 a.m.122 views

RHEL 8 : kernel (RHSA-2026:16195)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:16195 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Dirty Frag is a new universal Local...

8.8CVSS6.1AI score0.93235EPSS
SaveExploits32References4
Positive Technologies
Positive Technologies
added 2026/05/12 12:0 a.m.23 views

PT-2026-40154

Name of the Vulnerable Software and Affected Versions Windows TCP/IP affected versions not specified Description A race condition occurs due to concurrent execution using a shared resource with improper synchronization in Windows TCP/IP. This allows an authorized attacker to elevate privileges...

7.8CVSS5.9AI score0.00154EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/05/12 12:0 a.m.17 views

PT-2026-40165

Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...

7CVSS5.8AI score0.00261EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/12 12:0 a.m.12 views

Ivanti Endpoint Manager 安全漏洞

Ivanti Endpoint Manager EPM is a set of endpoint security managers developed by the American company Ivanti. Versions of Ivanti Endpoint Manager prior to EPM 2024 SU6 contained security vulnerabilities. These vulnerabilities were due to improper delegation of permissions by agents, which could...

7.8CVSS5.8AI score0.00245EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/05/12 12:0 a.m.34 views

PT-2026-40164

Name of the Vulnerable Software and Affected Versions Windows Ancillary Function Driver for WinSock affected versions not specified Description A race condition occurs in the Windows Ancillary Function Driver for WinSock due to improper synchronization when using a shared resource. This allows an...

7CVSS5.8AI score0.00204EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
added 2026/05/12 12:0 a.m.34 views

RHEL 9 : kernel (RHSA-2026:16328)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:16328 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Dirty Frag is a new universal Local...

8.8CVSS6.1AI score0.93235EPSS
SaveExploits32References4
Positive Technologies
Positive Technologies
added 2026/05/12 12:0 a.m.22 views

PT-2026-40145

Name of the Vulnerable Software and Affected Versions Windows Message Queuing affected versions not specified Description A double free issue in Windows Message Queuing allows an authorized attacker to elevate privileges locally. A double free occurs when a program attempts to free the same memor...

7.8CVSS7.1AI score0.00398EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2026/05/12 12:0 a.m.18 views

Dell PowerScale InsightIQ 安全漏洞

Dell PowerScale InsightIQ is a powerful performance monitoring and reporting tool developed by the American company Dell. Versions 5.0.0 to 6.2.0 of Dell PowerScale InsightIQ contain security vulnerabilities. These vulnerabilities stem from issues with unnecessary permission executions, which cou...

6.7CVSS5.8AI score0.00119EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/05/12 12:0 a.m.24 views

PT-2026-40161

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...

7CVSS5.9AI score0.0029EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/05/12 12:0 a.m.15 views

PT-2026-40204

Name of the Vulnerable Software and Affected Versions Windows 11 versions 24H2 through 25H2 Description A heap-based buffer overflow and untrusted pointer dereference in the Windows Kernel ntoskrnl.exe allows an authorized attacker to elevate privileges locally to SYSTEM level. The issue exists...

7.8CVSS6.1AI score0.04725EPSS
SaveExploits4References48
OSV
OSV
added 2026/05/12 12:0 a.m.19 views

ALSA-2026:16195 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: "Dirty Frag" is a new universal Local Privilege Escalation LPE vulnerability in the Linux kernel CVE-2026-43284 For more details about the security issues, including the impact, a CVSS...

8.8CVSS6.1AI score0.93235EPSS
SaveExploits32References4
Positive Technologies
Positive Technologies
added 2026/05/12 12:0 a.m.16 views

PT-2026-40210

Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00219EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/05/12 12:0 a.m.14 views

PT-2026-40112

Name of the Vulnerable Software and Affected Versions Windows Rich Text Edit affected versions not specified Description A double free issue in Windows Rich Text Edit allows an authorized attacker to elevate privileges locally. A double free occurs when a program attempts to free the same memory...

6.7CVSS5.8AI score0.00319EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/05/12 12:0 a.m.14 views

PT-2026-40163

Access of resource using incompatible type 'type confusion' in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00314EPSS
SaveExploits0References2
Rows per page
Query Builder