235804 matches found
EUVD-2026-72987
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-69468
CVE-2026-69468 is a heap-based buffer overflow in the Windows Volume Manager Extension Driver that allows a locally authenticated attacker to elevate privileges . Microsoft rates the vulnerability CVSS 3.1: 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, meaning exploitation requ...
EUVD-2026-72979
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-69432
CVE-2026-69432 is a heap-based buffer overflow in the Volume Manager Driver (Microsoft) that allows an authorized attacker to elevate privileges locally . The vulnerability is rated CVSS 3.1 7.8 (High) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating local attack vector, low compl...
EUVD-2026-72975
Heap-based buffer overflow in Volume Manager Driver allows an authorized attacker to elevate privileges locally...
EUVD-2026-72964
Heap-based buffer overflow in Volume Manager Driver allows an authorized attacker to elevate privileges over a network...
CVE-2026-69418
Volume Manager Driver contains a heap-based buffer overflow that allows an authorized attacker to elevate privileges over a network. The vulnerability is rated CVSS 3.1: 8.0 (HIGH) with low attack complexity, low privileges required, and user interaction needed, yielding high impact to confidenti...
CVE-2026-69281
CVE-2026-69281 is a use-after-free vulnerability in the Windows License Manager component that allows an authorized local attacker to elevate privileges. The vulnerability is rated CVSS 7.0 (High) with a vector of local attack, high complexity, low privileges required, no user interaction, unchan...
EUVD-2026-73211
Use after free in Windows License Manager allows an authorized attacker to elevate privileges locally...
ROOT-APP-NPM-CVE-2026-53655 CVE-2026-53655 in tar - Patched by Root
Root has patched CVE-2026-53655 in the tar package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-59875 CVE-2026-59875 in tar - Patched by Root
Root has patched CVE-2026-59875 in the tar package for Root:npm. Multiple fixed versions available...
CVE-2026-18851
Missing authorization in Ivanti Endpoint Manager Mobile before version 12.10.0.0, 12.9.0.2, and 12.8.0.4 allows a remote authenticated attacker to escalate their privileges to admin...
WordPress WP Crowdfunding plugin <= 2.2.1 - Authenticated (Shop Manager+) SQL Injection vulnerability
Authenticated Shop Manager+ SQL Injection vulnerability discovered by Wordfence PRISM in WordPress Plugin WP Crowdfunding versions = 2.2.1...
CVE-2026-33388
An access control vulnerability was discovered in the Credentials Manager functionality due to insufficient validation of user privileges. A remote authenticated user with limited privileges can view a limited subset of the available entries in the Credentials Manager. The actual credential value...
CVE-2026-18851
Missing authorization in Ivanti Endpoint Manager Mobile before version 12.10.0.0, 12.9.0.2, and 12.8.0.4 allows a remote authenticated attacker to escalate their privileges to admin...
CVE-2026-18851
CVE-2026-18851 is a missing authorization vulnerability in Ivanti Endpoint Manager Mobile affecting versions before 12.10.0.0 , 12.9.0.2 , and 12.8.0.4 . The flaw allows a remote authenticated attacker to escalate privileges to admin , resulting in high impact on confidentiality, integrity, and a...
EUVD-2026-72792
Missing authorization in Ivanti Endpoint Manager Mobile before version 12.10.0.0, 12.9.0.2, and 12.8.0.4 allows a remote authenticated attacker to escalate their privileges to admin...
Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability
Buffer over-read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally...