Lucene search
+L

346883 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•5 views

CVE-2026-70056: Use After Free

Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally...

7CVSS6.2AI score0.0027EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•6 views

CVE-2026-70059: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally...

7.8CVSS6.1AI score0.00341EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•3 views

CVE-2026-70054: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows NetBIOS allows an authorized attacker to elevate privileges locally...

7.8CVSS6.1AI score0.00412EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•2 views

CVE-2026-70172: Untrusted Pointer Dereference

Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally...

7.8CVSS5.6AI score0.00341EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•3 views

CVE-2026-70175: Weak Password Recovery Mechanism for Forgotten Password

Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network...

8.1CVSS5.9AI score0.00643EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•3 views

CVE-2026-70051: Access of Resource Using Incompatible Type

Access of resource using incompatible type 'type confusion' in Windows SmartScreen allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.00341EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•4 views

CVE-2026-70176: Use After Free

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...

7CVSS6.2AI score0.00296EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•3 views

CVE-2026-70179: Authentication Bypass by Spoofing

Authentication bypass by spoofing in ASP.NET Core allows an authorized attacker to elevate privileges over a network...

7.5CVSS5.9AI score0.00555EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•4 views

CVE-2026-70140: Use After Free

Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally...

7CVSS6.2AI score0.0027EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•3 views

CVE-2026-70067: Use After Free

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...

7CVSS6.2AI score0.0027EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•4 views

CVE-2026-70068: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Client-Side Caching CSC Service allows an unauthorized attacker to elevate privileges over a network...

8.8CVSS6.2AI score0.00837EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•6 views

CVE-2026-70169: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally...

7CVSS5.8AI score0.00193EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•3 views

CVE-2026-70086: Use After Free

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

7CVSS6.2AI score0.00252EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•3 views

CVE-2026-70177: Numeric Truncation Error

Numeric truncation error in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.00318EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•3 views

CVE-2026-70021: Use After Free

Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally...

7CVSS6.2AI score0.00264EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•6 views

Microsoft Windows: CVE-2026-85842: Windows Image Acquisition Elevation of Privilege Vulnerability

Use of externally-controlled format string in Windows Image Acquisition allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.00318EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•4 views

CVE-2026-69898: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...

7.8CVSS7.5AI score0.00333EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•3 views

CVE-2026-69718: Improper Neutralization of Special Elements used in a Command

Improper neutralization of special elements used in a command 'command injection' in Windows Update allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00963EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•4 views

CVE-2026-69673: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows Update allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.00457EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•4 views

CVE-2026-69650: Improper Verification of Cryptographic Signature

Improper verification of cryptographic signature in Windows Key Distribution Center allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.00227EPSS
SaveExploits0References2
Rows per page
Query Builder