CVE-2012-5519

cups-root-file-read.sh ⭐ a bash implementation of the metasploit 'cupsrootfileread.rb' module designed for pentesting and CTFs. mainly a short exercise in bash scripting. intended to be a self-contained program that exploits CVE-2012-5519 on linux systems; it provides the user with an interactive...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the handling of offloads in ipgre.c, there is a possibility of a page fault due to an invalid memory access. This could lead to the disclosure of local information without the need for additional execution privileges. User interaction is not required for exploitation. Product: Android Versions...

Astra Linux – vulnerability in intel-microcode

Improper initialization of resources in the branch prediction unit on certain IntelR Core™ Ultra Processors may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2026-109971

A flaw was found in the clevis PKCS11 pin. The clevis-decrypt-pkcs11 script passes the PKCS11 token PIN as a command-line argument to pkcs11-tool, making it visible to any local user through process listing or the /proc filesystem...

CVE-2026-96854

Access of resource using incompatible type 'type confusion' in Windows Device Association Service allows an authorized attacker to disclose information locally...

CVE-2026-88140

Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally...

CVE-2026-85910

Buffer over-read in Windows StateRepository API allows an authorized attacker to disclose information locally...

CVE-2026-83933

Improper link resolution before file access 'link following' in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally...

CVE-2026-83835

Buffer over-read in Windows Common Log File System Driver allows an authorized attacker to disclose information locally...

CVE-2026-83723

Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally...

CVE-2026-83504

Time-of-check time-of-use toctou race condition in Windows SmartScreen allows an authorized attacker to disclose information locally...

CVE-2026-70277

Out-of-bounds read in Windows Fast FAT Driver allows an unauthorized attacker to disclose information locally...

CVE-2026-70195

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to disclose information locally...

CVE-2026-70137

Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to disclose information locally...

EUVD-2026-100385

Buffer over-read in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally...

CVE-2026-69506

The Windows Key Storage Provider is vulnerable to an out-of-bounds read (CWE-125). This vulnerability allows an authorized attacker to disclose information locally . The vulnerability is assigned a CVSS 3.1 base score of 4.7 (Medium) , characterized by a LOCAL attack vector and HIGH confidentiali...

CVE-2026-70227

An out-of-bounds read vulnerability exists in the Windows Device Association Service . This flaw allows an authorized attacker to perform a local information disclosure, potentially revealing sensitive data. No specific exploit code or in-the-wild exploitation details are provided in the document...

EUVD-2026-100009

Buffer over-read in Windows Common Log File System Driver allows an authorized attacker to disclose information locally...

EUVD-2026-99984

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally...

CVE-2026-83664

The Windows Portable Device File System Driver is vulnerable to a type confusion issue (CWE-843). This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive data. No specific exploit details or in-the-wild exploitation instances are provided...