164 matches found
PT-2026-87365
Missing authentication for critical function in Windows Power Dependency Coordinator allows an authorized attacker to perform tampering locally...
PT-2026-87913
Missing authentication for critical function in Windows Autopilot allows an authorized attacker to perform tampering locally...
PT-2026-87881
Missing authorization in Windows Remote Access Connection Manager allows an authorized attacker to perform tampering locally...
PT-2026-87456
Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description Improper link resolution before file access, also known as link following, allows an authorized attacker to perform local tampering. This issue occurs when the system does not correctly...
PT-2026-87507
Creation of temporary file in directory with insecure permissions in Windows Error Reporting allows an authorized attacker to perform tampering locally...
PT-2026-88138
🚨 CVE-2026-83991 Windows Cloud Files GENERIC WRITE: ACCESS DENIED DeleteFileW: ACCESS DENIED CfCreatePlaceholders with supersede: S OK same file. same token. leaf DACL said no. sync root path did not care. turns a read-only file into a cloud placeholder. writeup + PoC by karollooool:...
CVE-2026-72966: Missing Authorization
Missing authorization in Windows Remote Access Connection Manager allows an authorized attacker to perform tampering locally...
CVE-2026-69453: Missing Authorization
Missing authorization in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally...
CVE-2026-69425: Improper Link Resolution Before File Access
Improper link resolution before file access 'link following' in Windows NTFS allows an authorized attacker to perform tampering locally...
CVE-2026-69482: Creation of Temporary File in Directory with Insecure Permissions
Creation of temporary file in directory with insecure permissions in Windows Error Reporting allows an authorized attacker to perform tampering locally...
PT-2026-87879
Name of the Vulnerable Software and Affected Versions Windows Internet Connection Sharing ICS affected versions not specified Description A missing authentication flaw in a critical function allows an authorized attacker to perform local tampering, which can affect the system. Recommendations At...
CVE-2026-73004: Missing Authentication for Critical Function
Missing authentication for critical function in Windows Autopilot allows an authorized attacker to perform tampering locally...
CVE-2026-83991: Missing Authentication for Critical Function
Missing authentication for critical function in Windows Cloud Files Mini Filter Driver allows an authorized attacker to perform tampering locally...
dotnet: .NET: Local tampering via improper link resolution
A flaw was found in .NET. This vulnerability, stemming from improper link resolution before file access, allows an authorized local attacker to perform tampering. This could lead to unauthorized modification of data or system files...
dotnet: .NET: Local tampering via improper link resolution
A flaw was found in .NET. This vulnerability, stemming from improper link resolution before file access, allows an authorized local attacker to perform tampering. This could lead to unauthorized modification of data or system files...
dotnet: .NET: Local tampering via improper link resolution
A flaw was found in .NET. This vulnerability, stemming from improper link resolution before file access, allows an authorized local attacker to perform tampering. This could lead to unauthorized modification of data or system files...
dotnet: .NET: Local tampering via improper link resolution
A flaw was found in .NET. This vulnerability, stemming from improper link resolution before file access, allows an authorized local attacker to perform tampering. This could lead to unauthorized modification of data or system files...
dotnet: .NET: Local tampering via improper link resolution
A flaw was found in .NET. This vulnerability, stemming from improper link resolution before file access, allows an authorized local attacker to perform tampering. This could lead to unauthorized modification of data or system files...
