Lucene search
+L

796 matches found

CVE
CVE
•added 2026/07/14 5:06 p.m.•63 views

CVE-2026-50298

CVE-2026-50298 concerns Windows Spaceport.sys: an integer overflow/wraparound vulnerability in the kernel component that could allow an unauthenticated, physical attacker to achieve privilege escalation. Affected software is Windows kernel-space Spaceport.sys; impact is elevation of privileges wi...

6.8CVSS5.9AI score0.00438EPSS
SaveExploits0References1Affected Software12
attackerkb
attackerkb
•added 2026/07/14 5:06 p.m.•15 views

CVE-2026-49804

Heap-based buffer overflow in Windows USB Video Driver allows an unauthorized attacker to elevate privileges with a physical attack...

6.6CVSS6.2AI score0.00483EPSS
SaveExploits0References2Affected Software17
CVE
CVE
•added 2026/07/14 5:06 p.m.•70 views

CVE-2026-49804

CVE-2026-49804 describes a heap-based buffer overflow in the Windows USB Video Driver that can allow an unauthorized attacker to elevate privileges via a physical attack. The vulnerability is characterized by a physical attack vector with low exploit complexity and the need for user interaction, ...

6.6CVSS7AI score0.00483EPSS
SaveExploits0References1Affected Software11
attackerkb
attackerkb
•added 2026/07/14 5:05 p.m.•17 views

CVE-2026-50299

Integer overflow or wraparound in Windows Storage Spaces Direct allows an unauthorized attacker to execute code with a physical attack...

6.8CVSS6.2AI score0.00438EPSS
SaveExploits0References2Affected Software16
attackerkb
attackerkb
•added 2026/07/14 5:05 p.m.•16 views

CVE-2026-57097

Untrusted search path in Microsoft XML allows an unauthorized attacker to bypass a security feature with a physical attack...

6.4CVSS6.1AI score0.00503EPSS
SaveExploits0References2Affected Software18
CVE
CVE
•added 2026/07/14 5:05 p.m.•51 views

CVE-2026-57097

CVE-2026-57097 describes an Untrusted search path in Microsoft XML that allows a physical attacker to bypass a security feature. Affects Microsoft XML; impact is described as high for confidentiality, integrity, and availability with a physical attack requiring no user interaction. No exploit det...

6.8CVSS5.9AI score0.00503EPSS
SaveExploits0References1Affected Software12
attackerkb
attackerkb
•added 2026/07/14 5:04 p.m.•12 views

CVE-2026-54132

Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack...

6.8CVSS6.2AI score0.00438EPSS
SaveExploits0References2Affected Software11
attackerkb
attackerkb
•added 2026/07/14 5:04 p.m.•15 views

CVE-2026-55000

Use after free in Windows USB Print Driver allows an unauthorized attacker to elevate privileges with a physical attack...

6.4CVSS6.1AI score0.00339EPSS
SaveExploits0References2Affected Software5
CVE
CVE
•added 2026/07/14 5:04 p.m.•48 views

CVE-2026-49168

CVE-2026-49168 is an elevation-of-privilege vulnerability in Windows Storage Spaces Direct caused by an integer overflow/wraparound. The issue, exploitable with physical access, allows an unauthenticated attacker to gain high-impact effects (confidentiality, integrity, and availability). CVSSv3.1...

6.8CVSS5.9AI score0.00438EPSS
SaveExploits0References1Affected Software11
Microsoft CVE
Microsoft CVE
•added 2026/07/14 2:00 p.m.•18 views

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Resilient File System ReFS allows an unauthorized attacker to execute code with a physical attack...

6.8CVSS6.4AI score0.00438EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/07/14 2:00 p.m.•24 views

Storage Spaces Direct Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows Storage Spaces Direct allows an unauthorized attacker to elevate privileges with a physical attack...

6.8CVSS6AI score0.00438EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/07/14 2:00 p.m.•20 views

Windows Storage Spaces Direct Remote Code Execution Vulnerability

Integer overflow or wraparound in Windows Storage Spaces Direct allows an unauthorized attacker to execute code with a physical attack...

6.8CVSS7.1AI score0.00438EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/07/14 2:00 p.m.•36 views

Windows USB Audio Class Driver Information Disclosure Vulnerability

Out-of-bounds read in Windows USB Audio Class driver usbaudio.sys allows an unauthorized attacker to disclose information with a physical attack...

4.6CVSS5.8AI score0.00468EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/07/14 2:00 p.m.•26 views

Windows BitLocker Security Feature Bypass Vulnerability

Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...

6.1CVSS6.3AI score0.00481EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/07/14 2:00 p.m.•23 views

Windows Spaceport.sys Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows Spaceport.sys allows an unauthorized attacker to elevate privileges with a physical attack...

6.8CVSS6AI score0.00438EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/07/14 2:00 p.m.•21 views

Windows USB Video Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows USB Video Driver allows an unauthorized attacker to elevate privileges with a physical attack...

6.6CVSS7AI score0.00483EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/07/14 2:00 p.m.•28 views

Windows Kernel Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack...

6.8CVSS6.1AI score0.00438EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/07/14 12:00 a.m.•31 views

PT-2026-58641

Name of the Vulnerable Software and Affected Versions Windows USB Audio Class driver usbaudio.sys affected versions not specified Description An out-of-bounds read in the usbaudio.sys driver allows an unauthorized attacker to disclose sensitive information through a physical attack. An...

7.2CVSS6.7AI score0.00524EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/07/14 12:00 a.m.•36 views

PT-2026-58265

Untrusted search path in Microsoft XML allows an unauthorized attacker to bypass a security feature with a physical attack...

6.4CVSS6.1AI score0.00503EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/14 12:00 a.m.•6 views

CVE-2026-55000: Use After Free

Use after free in Windows USB Print Driver allows an unauthorized attacker to elevate privileges with a physical attack...

6.4CVSS6.2AI score0.00339EPSS
SaveExploits0References3
Rows per page
Query Builder