Lucene search
+L

17292 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•6 views

CVE-2026-69408: Integer Overflow or Wraparound

Integer overflow or wraparound in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network...

9.8CVSS8.5AI score0.00974EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•7 views

CVE-2026-58600: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to elevate privileges locally...

7.8CVSS6AI score0.00466EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•2 views

CVE-2026-69507: Insertion of Sensitive Information into Externally-Accessible File or Directory

Insertion of sensitive information into externally-accessible file or directory in Microsoft Windows Search Component allows an authorized attacker to disclose information over a network...

5.7CVSS5.7AI score0.00894EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•0 views

CVE-2026-69600: Use After Free

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

7CVSS6.1AI score0.00264EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•1 views

CVE-2026-69586: Integer Overflow or Wraparound

Integer overflow or wraparound in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network...

9.8CVSS8.5AI score0.00974EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•5 views

CVE-2026-81353: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally...

7.8CVSS7.7AI score0.00466EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•18 views

PT-2026-87996

Out-of-bounds read in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information with a physical attack...

4.6CVSS5.7AI score0.00468EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•14 views

PT-2026-87791

Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally...

5.5CVSS5.6AI score0.00404EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•2 views

CVE-2026-78452: Out-of-bounds Read

Out-of-bounds read in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information with a physical attack...

4.6CVSS5.7AI score0.00468EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•4 views

CVE-2026-69531: Unintended Proxy or Intermediary

Unintended proxy or intermediary 'confused deputy' in Microsoft Windows Speech allows an authorized attacker to perform tampering locally...

5.5CVSS5.6AI score0.00302EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•3 views

CVE-2026-69554: Missing Authentication for Critical Function

Missing authentication for critical function in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally...

5.5CVSS5.7AI score0.00302EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•19 views

PT-2026-87563

Missing authentication for critical function in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally...

5.5CVSS5.7AI score0.00302EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2026/09/08 12:00 a.m.•10 views

Microsoft Windows UMPDDrvStretchBltROP Improper Object Management Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the win32kfull...

7.8CVSS7.8AI score0.00333EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2026/09/08 12:00 a.m.•14 views

Microsoft Windows IKEv2 AES-GCM Decryption Integer Underflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. Authentication is not required to exploit this vulnerability, but only systems with specific IPsec configurations are vulnerable. The specific flaw exists within the IKEEXT service...

8.1CVSS6.7AI score0.01174EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2026/09/08 12:00 a.m.•9 views

Microsoft Windows UMPDDrvPlgBlt Improper Object Management Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the win32kfull...

7.8CVSS7.8AI score0.00333EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•6 views

CVE-2026-69511: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network...

8.8CVSS6.3AI score0.00819EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•2 views

CVE-2026-69453: Missing Authorization

Missing authorization in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally...

5.5CVSS5.6AI score0.00302EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•2 views

CVE-2026-78451: Untrusted Pointer Dereference

Untrusted pointer dereference in Microsoft Windows SCSI Class System File allows an unauthorized attacker to elevate privileges with a physical attack...

6.8CVSS5.7AI score0.00438EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•2 views

CVE-2026-78453: Integer Underflow (Wrap or Wraparound)

Integer underflow wrap or wraparound in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information over a network...

6.5CVSS5.8AI score0.00922EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•3 views

CVE-2026-62706: Out-of-bounds Read

Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network...

8.8CVSS6AI score0.00819EPSS
SaveExploits0References4
Rows per page
Query Builder