Lucene search
+L

136 matches found

BDU FSTEC
BDU FSTEC
•added 2026/10/29 2:58 p.m.•36 views

Windows Update Orchestrator Service Privilege Escalation

The vulnerability of the Windows Update Orchestrator Service on Windows operating systems is related to the improper handling of symbolic links before accessing the file. Exploiting this vulnerability can allow an attacker to elevate their privileges to the SYSTEM level...

7CVSS6.5AI score0.00318EPSS
SaveExploits0References2Affected Software11
BDU FSTEC
BDU FSTEC
•added 2026/10/29 2:58 p.m.•25 views

Windows Update Orchestrator Service Privilege Escalation

The vulnerability of the Windows Update Orchestrator Service on Windows operating systems is related to incorrect handling of symbolic links before accessing the file. Exploiting this vulnerability can allow an attacker to elevate their privileges to the SYSTEM level and gain unauthorized access ...

5.5CVSS6.5AI score0.00495EPSS
SaveExploits0References2Affected Software11
NVD
NVD
•added 2026/10/13 7:22 p.m.•11 views

CVE-2026-97812

Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally...

7CVSS0.00279EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/13 7:20 p.m.•14 views

CVE-2026-83933

Improper link resolution before file access 'link following' in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally...

5.5CVSS0.00485EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/13 7:20 p.m.•13 views

CVE-2026-83930

Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally...

7CVSS0.0027EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/13 7:20 p.m.•13 views

CVE-2026-83886

Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally...

7CVSS0.00329EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/13 7:20 p.m.•14 views

CVE-2026-83793

Improper link resolution before file access 'link following' in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally...

7CVSS0.00318EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/13 7:19 p.m.•13 views

CVE-2026-83507

Improper link resolution before file access 'link following' in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally...

5.5CVSS0.00495EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/13 7:19 p.m.•10 views

CVE-2026-81964

Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker to bypass a security feature locally...

5.5CVSS0.00343EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/13 7:01 p.m.•12 views

EUVD-2026-100414

Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally...

7CVSS5.8AI score0.00279EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/13 7:01 p.m.•26 views

CVE-2026-97812

A double free vulnerability exists in the Windows Update Orchestrator Service . This flaw allows an authorized attacker to perform a local privilege escalation . The CVSS 3.1 score is 7.0 (High) , with an attack vector of Local and high impact on confidentiality, integrity, and availability. No s...

7CVSS5.8AI score0.00279EPSS
SaveExploits0References1Affected Software8
EUVD
EUVD
•added 2026/10/13 7:01 p.m.•11 views

EUVD-2026-100060

Improper link resolution before file access 'link following' in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally...

5.5CVSS5.6AI score0.00485EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/13 7:01 p.m.•10 views

EUVD-2026-100059

Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally...

7CVSS6.2AI score0.0027EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/13 7:01 p.m.•24 views

CVE-2026-83930

A Use after free vulnerability exists in the Windows Update Orchestrator Service . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is assigned a High base severity score of 7.0. No specific details regarding the root cause, affected versions, or a...

7CVSS6.2AI score0.0027EPSS
SaveExploits0References1Affected Software6
CVE
CVE
•added 2026/10/13 7:01 p.m.•30 views

CVE-2026-83933

The Windows Update Orchestrator Service is vulnerable to an improper link resolution before file access (link following) vulnerability. This flaw allows an authorized attacker to perform a local information disclosure . No specific software versions, exploit links, or remediation steps are provid...

5.5CVSS5.6AI score0.00485EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/13 7:00 p.m.•11 views

EUVD-2026-99905

Improper link resolution before file access 'link following' in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally...

5.5CVSS5.7AI score0.00495EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/13 7:00 p.m.•28 views

CVE-2026-83507

The Windows Update Orchestrator Service is vulnerable to an improper link resolution before file access (link following) flaw. This vulnerability allows an authorized attacker to perform a local information disclosure . No specific exploit details or remediation steps are provided in the document...

5.5CVSS5.7AI score0.00495EPSS
SaveExploits0References1Affected Software9
EUVD
EUVD
•added 2026/10/13 6:59 p.m.•10 views

EUVD-2026-99429

Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally...

7CVSS6.2AI score0.00329EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/13 6:59 p.m.•34 views

CVE-2026-83886

A Use after free vulnerability exists in the Windows Update Orchestrator Service . This flaw allows an authorized attacker to achieve local privilege elevation . While the specific technical root cause is not detailed in the provided documents, the impact includes high levels of confidentiality, ...

7CVSS6.2AI score0.00329EPSS
SaveExploits0References1Affected Software6
EUVD
EUVD
•added 2026/10/13 6:59 p.m.•13 views

EUVD-2026-99368

Improper link resolution before file access 'link following' in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally...

7CVSS6.8AI score0.00318EPSS
SaveExploits0References1
Rows per page
Query Builder