GTFOBins.github.io

GTFOBins GTFOBins is a curated list of Unix-like executables that can be used to bypass local security restrictions in misconfigured systems. Find the project at: gtfobins.org...

PT-2026-115235

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description Reliance on untrusted inputs in a security decision allows an unauthorized attacker to bypass a security feature locally. Recommendations At the moment, there is no information...

CVE-2026-84011

Incorrect authorization in Windows SMB Client allows an authorized attacker to bypass a security feature locally...

CVE-2026-83926

Improper certificate validation in Windows Hello allows an authorized attacker to bypass a security feature locally...

CVE-2026-70280

Incorrect authorization in Windows Hello allows an authorized attacker to bypass a security feature locally...

CVE-2026-70185

Protection mechanism failure in Windows PowerShell allows an authorized attacker to bypass a security feature locally...

CVE-2026-70075

Time-of-check time-of-use toctou race condition in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to bypass a security feature locally...

CVE-2026-70057

Incorrect authorization in Windows Routing and Remote Access Service RRAS allows an authorized attacker to bypass a security feature locally...

CVE-2026-102851

Visual Studio Code is affected by an incorrect privilege assignment vulnerability. This flaw allows an authorized attacker to bypass a security feature locally. The vulnerability has a Medium base severity (6.1) and requires local access and user interaction to exploit. Specific technical details...

CVE-2026-70075

A Time-of-check time-of-use (TOCTOU) race condition exists in the Windows Virtualization-Based Security (VBS) Enclave . This vulnerability allows an authorized attacker to perform a local security feature bypass . The impact is characterized as a high integrity impact with a Medium base severity ...

CVE-2026-83926

A security vulnerability in Windows Hello was identified involving improper certificate validation (CWE-295). This flaw allows an authorized attacker to bypass a security feature locally. The vulnerability carries a Medium severity rating with a CVSS 3.1 score of 4.4. No specific exploit details ...

CVE-2026-70057

The Windows Routing and Remote Access Service (RRAS) is impacted by an incorrect authorization vulnerability (CWE-863). This flaw allows an authorized attacker to bypass a security feature through local access . The vulnerability carries a MEDIUM base severity (CVSS 3.1 score of 5.5), specificall...

Windows Virtualization-Based Security (VBS) Enclave Security Feature Bypass Vulnerability

Time-of-check time-of-use toctou race condition in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to bypass a security feature locally...

EUVD-2026-98389

A vulnerability has been identified in SIMATIC IPC BX-21A All versions V31.01.13, SIMATIC IPC RW-543A All versions V1.1.4, SIMATIC IPC227G / IPC277G / IPC277G PRO / IPC327G / IPC377G All versions V28.01.15. A BIOS vendor test key is present in the UEFI Secure Boot key database. This could allow a...

CVE-2026-69979: Improper Protection of Alternate Path

Improper protection of alternate path in Windows AppX Deployment Service allows an authorized attacker to bypass a security feature locally...

CVE-2026-83926: Improper Certificate Validation

Improper certificate validation in Windows Hello allows an authorized attacker to bypass a security feature locally...

PT-2026-112687

Name of the Vulnerable Software and Affected Versions Windows Hello affected versions not specified Description Improper certificate validation in Windows Hello allows an authorized attacker to bypass a security feature locally. Recommendations At the moment, there is no information about a newer...

PT-2026-111928

Name of the Vulnerable Software and Affected Versions Windows Secure Boot affected versions not specified Description Windows Secure Boot contains a security-feature bypass that allows an authorized attacker to locally circumvent a security mechanism, potentially affecting the system...

CVE-2026-72895: Use of Default Cryptographic Key

A vulnerability has been identified in SIMATIC IPC BX-21A All versions V31.01.13, SIMATIC IPC RW-543A All versions V1.1.4, SIMATIC IPC227G / IPC277G / IPC277G PRO / IPC327G / IPC377G All versions V28.01.15. A BIOS vendor test key is present in the UEFI Secure Boot key database. This could allow a...

DEBIAN-CVE-2026-95358

Incorrect authorization in Mobile in Google Chrome on on Android prior to 154.0.8037.57 allowed a local attacker to bypass system access restrictions into a privileged page via a co-installed app. Chromium security severity: Medium...