Lucene search
+L

43607 matches found

Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•22 views

PT-2026-87501

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

7.8CVSS5.9AI score0.00333EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•18 views

PT-2026-88265

In multiple functions of alloc.c, there is a possible unauthorized read/write access due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

5.8AI score0.00089EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•7 views

CVE-2026-83988: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

7.8CVSS7.5AI score0.00333EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•9 views

CVE-2026-69534: Improper Neutralization of Special Elements used in a Command

Improper neutralization of special elements used in a command 'command injection' in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.00322EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•8 views

CVE-2026-69350: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...

6.7CVSS6AI score0.00348EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•16 views

CVE-2026-83999: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows Resilient File System ReFS Deduplication Service allows an authorized attacker to elevate privileges locally...

7CVSS6.8AI score0.00283EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•14 views

CVE-2026-69544: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges locally...

7.8CVSS6AI score0.00333EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•8 views

CVE-2026-69818: Use After Free

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...

7CVSS6.1AI score0.00264EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•6 views

CVE-2026-72935: Out-of-bounds Read

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally...

6.7CVSS5.7AI score0.00348EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•11 views

CVE-2026-62697: Use After Free

Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

7.8CVSS6.1AI score0.00333EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•12 views

CVE-2026-78464: Time-of-check Time-of-use (TOCTOU) Race Condition

Time-of-check time-of-use toctou race condition in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

7CVSS6.7AI score0.00202EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•8 views

CVE-2026-83976: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

7.8CVSS6AI score0.00333EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•15 views

CVE-2026-69585: Incorrect Type Conversion or Cast

Incorrect type conversion or cast in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.00333EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•9 views

CVE-2026-77904: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally...

7.8CVSS7.4AI score0.00333EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•12 views

CVE-2026-69859: Time-of-check Time-of-use (TOCTOU) Race Condition

Time-of-check time-of-use toctou race condition in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...

7CVSS5.6AI score0.00202EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•5 views

CVE-2026-70577: Use After Free

Use after free in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...

7CVSS6.1AI score0.00264EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•11 views

CVE-2026-69630: Out-of-bounds Read

Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally...

7CVSS5.7AI score0.00264EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•12 views

CVE-2026-68825: Use After Free

Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally...

7CVSS6.1AI score0.00264EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•12 views

CVE-2026-50349: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

7CVSS7AI score0.00202EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•11 views

CVE-2026-69692: Use After Free

Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally...

7CVSS6.1AI score0.00264EPSS
SaveExploits0References3
Rows per page
Query Builder