Lucene search
+L

34254 matches found

CVE
CVE
added 2026/05/05 7:34 p.m.34 views

CVE-2026-34596

Sandboxie-Plus (Windows) prior to v1.17.3 contains a TOCTOU race during addon installation. UpdUtil.exe runs as SYSTEM via SandBoxieSvc, stages updater files in %TEMP%\sandboxie-updater, verifies hashes against the addon manifest, then extracts files.cab and runs config.exe. An unprivileged user ...

7CVSS5.7AI score0.00106EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2026/05/05 7:28 p.m.43 views

CVE-2026-34461 Sandboxie-Plus SbieIniServer RunSbieCtrl stack buffer overflow allows local privilege escalation

Sandboxie-Plus is an open source sandbox-based isolation software for Windows. In versions 1.17.2 and earlier, the SbieIniServer RunSbieCtrl handler contains a stack buffer overflow. The MSGIDSBIEINIRUNSBIECTRL message is handled before normal sandbox and impersonation checks, and for non-sandbox...

7.3CVSS0.00172EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2026/05/05 7:28 p.m.9 views

CVE-2026-34461 Sandboxie-Plus SbieIniServer RunSbieCtrl stack buffer overflow allows local privilege escalation

Sandboxie-Plus is an open source sandbox-based isolation software for Windows. In versions 1.17.2 and earlier, the SbieIniServer RunSbieCtrl handler contains a stack buffer overflow. The MSGIDSBIEINIRUNSBIECTRL message is handled before normal sandbox and impersonation checks, and for non-sandbox...

7.3CVSS6.5AI score0.00172EPSS
SaveExploits1References1
OSV
OSV
added 2026/05/05 7:28 p.m.10 views

CVE-2026-34461 Sandboxie-Plus SbieIniServer RunSbieCtrl stack buffer overflow allows local privilege escalation

Sandboxie-Plus is an open source sandbox-based isolation software for Windows. In versions 1.17.2 and earlier, the SbieIniServer RunSbieCtrl handler contains a stack buffer overflow. The MSGIDSBIEINIRUNSBIECTRL message is handled before normal sandbox and impersonation checks, and for non-sandbox...

7.3CVSS6.7AI score
SaveExploits0References3
CVE
CVE
added 2026/05/05 7:28 p.m.28 views

CVE-2026-34461

Sandboxie-Plus

7.8CVSS6.5AI score0.00172EPSS
SaveExploits1References1Affected Software1
GithubExploit
GithubExploit
added 2026/05/05 10:51 a.m.203 views

Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel

CVE-2026-31431-Copy-Fail xpl0ited by infrar3dhttps://githu...

7.8CVSS6.1AI score0.99907EPSS
SaveExploits241
RedhatCVE
RedhatCVE
added 2026/05/05 8:20 a.m.19 views

CVE-2026-20448

In geniezone, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10708513; Issue ID: MSV-6281...

6.7CVSS5.8AI score0.00146EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/05/05 8:20 a.m.30 views

CVE-2026-20451

In slbc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10828685; Issue ID: MSV-6504...

6.7CVSS5.8AI score0.00154EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2026/05/05 7:46 a.m.239 views

linux-copy-fail-exploit

CVE-2026-31431 Copy Fail - LPE Exploit PoC !Pythonhttps:...

7.8CVSS6.3AI score0.99907EPSS
SaveExploits241
Positive Technologies
Positive Technologies
added 2026/05/05 12:00 a.m.16 views

PT-2026-37217

Name of the Vulnerable Software and Affected Versions Tunnelblick versions 3.3beta26 through 9.0beta01 Description Tunnelblick is an open source graphic user interface for OpenVPN on macOS. A symlink following issue exists in the tunnelblick-helper process, which is accessible via the...

6.8CVSS5.9AI score0.00242EPSS
SaveExploits1References6
Tenable Nessus
Tenable Nessus
added 2026/05/05 12:00 a.m.15 views

openSUSE 16 Security Update : himmelblau (openSUSE-SU-2026:20658-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:20658-1 advisory. Update to version 2.3.9+git0.a9fd29b. Security issues fixed: - CVE-2026-34397: Fixed naming collision that can lead to local privilege escalation...

7CVSS5.8AI score0.00158EPSS
SaveExploits1References4
GithubExploit
GithubExploit
added 2026/05/04 3:47 p.m.220 views

Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel

CVE-2026-31431 — Análisis Técnico Completo Clasificación:...

7.8CVSS6.2AI score0.99907EPSS
SaveExploits241
GithubExploit
GithubExploit
added 2026/05/04 3:36 p.m.141 views

Exploit for Untrusted Pointer Dereference in Microsoft

CVE-2026-21250: Windows HTTP.sys Local Privilege Escalation W...

7.8CVSS5.8AI score0.0104EPSS
SaveExploits3
GithubExploit
GithubExploit
added 2026/05/04 11:30 a.m.237 views

Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel

CVE-2026-31431 "Copy Fail" — Detection & Patch Scripts Linu...

7.8CVSS5.9AI score0.99907EPSS
SaveExploits241
GithubExploit
GithubExploit
added 2026/05/04 9:42 a.m.214 views

Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel

CVE-2026-31431 — "Copy Fail": Linux Kernel algifaead Local...

7.8CVSS6.4AI score0.99907EPSS
SaveExploits241
GithubExploit
GithubExploit
added 2026/05/04 8:32 a.m.200 views

Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel

RK35xx Kernel Patch: CVE-2026-31431 "Copy Fail" RK35xx Copy...

7.8CVSS6.2AI score0.99907EPSS
SaveExploits241
NVD
NVD
added 2026/05/04 7:15 a.m.20 views

CVE-2026-20447

In geniezone, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10724073; Issue ID: MSV-6296...

6.7CVSS0.00114EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/05/04 5:42 a.m.26 views

CVE-2026-20451

In slbc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10828685; Issue ID: MSV-6504...

5.8AI score0.00154EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/05/04 5:42 a.m.53 views

CVE-2026-20451

In slbc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10828685; Issue ID: MSV-6504...

0.00154EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/05/04 5:42 a.m.22 views

EUVD-2026-26891

In slbc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10828685; Issue ID: MSV-6504...

6.7CVSS5.8AI score0.00154EPSS
SaveExploits0References1
Rows per page
Query Builder