17533 matches found
PT-2026-89837
The Payment Gateway PayPay for WooCommerce WordPress plugin from 0.5 to 0.9.3 does not verify the authenticity of the payment notifications it receives before acting on them, allowing unauthenticated attackers who know the store's merchant identifier to mark arbitrary orders as paid, or to cancel...
CVE-2026-82215: Insufficient Verification of Data Authenticity
The Payment Gateway PayPay for WooCommerce WordPress plugin from 0.5 to 0.9.3 does not verify the authenticity of the payment notifications it receives before acting on them, allowing unauthenticated attackers who know the store's merchant identifier to mark arbitrary orders as paid, or to cancel...
CVE-2024-12145: Missing Authorization
The BuddyPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 14.3.3 via the bpnotificationsactionbulkmanage due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Subscriber-level...
CVE-2026-62106: Incorrect Privilege Assignment
Subscriber Privilege Escalation in SMS Alert Order Notifications = 3.9.9 versions...
CVE-2026-69300
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally...
CVE-2026-69280
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally...
CVE-2026-62697
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally...
CVE-2026-69300
CVE-2026-69300 is a use-after-free vulnerability in the Windows Push Notifications component that allows an authorized attacker to achieve local privilege escalation . The CVSS v3.1 score is 7.0 (HIGH) with vector AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a high-impact but locally exploitab...
EUVD-2026-73441
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally...
EUVD-2026-73426
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally...
CVE-2026-69280
CVE-2026-69280 is a use-after-free vulnerability in Windows Push Notifications that allows an authorized attacker to achieve local privilege escalation . Microsoft assigned a CVSS 3.1 base score of 7.0 (HIGH) with a vector of local attack, high complexity, low privileges required, and high impact...
EUVD-2026-73373
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally...
CVE-2026-62697
CVE-2026-62697 is a use after free vulnerability in Windows Push Notifications that allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 score is 7.8 (HIGH) with a local attack vector, low complexity, and low privileges required, resulting in high impact to confident...
Windows Push Notifications Elevation of Privilege Vulnerability
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally...
Windows Push Notifications Elevation of Privilege Vulnerability
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally...
Windows Push Notifications Elevation of Privilege Vulnerability
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally...
PT-2026-87327
Name of the Vulnerable Software and Affected Versions Windows Push Notifications affected versions not specified Description A use-after-free condition in Windows Push Notifications allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occur...
PT-2026-87347
Name of the Vulnerable Software and Affected Versions Windows Push Notifications affected versions not specified Description A use-after-free condition in Windows Push Notifications allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occur...