Lucene search
+L

347314 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•4 views

CVE-2026-69931: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Storage allows an authorized attacker to elevate privileges locally...

7CVSS5.8AI score0.00202EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•4 views

CVE-2026-88179: Out-of-bounds Read

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.00311EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•5 views

CVE-2026-83721: Use After Free

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...

7.8CVSS6.1AI score0.00318EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•6 views

CVE-2026-88072: Improper Link Resolution Before File Access

Improper access control in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.00345EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•7 views

CVE-2026-105010: Use After Free

Use after free in Microsoft Windows Search Component allows an unauthorized attacker to elevate privileges over a network...

9.8CVSS6.3AI score0.00893EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•5 views

CVE-2026-84013: Use After Free

Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally...

7.8CVSS6.2AI score0.00311EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•5 views

CVE-2026-85376: Weak Authentication

Weak authentication in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.00278EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•5 views

CVE-2026-96949: Concurrent Execution using Shared Resource with Improper Synchronization

Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...

7CVSS6.2AI score0.00188EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•10 views

PT-2026-113151

Name of the Vulnerable Software and Affected Versions Windows Universal Disk Format File System Driver UDFS affected versions not specified Description A use-after-free condition in the Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges...

7CVSS6.2AI score0.00188EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•5 views

CVE-2026-70118: Use After Free

Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally...

7CVSS6.1AI score0.0027EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•5 views

CVE-2026-97799: Improper Verification of Cryptographic Signature

Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.00295EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•9 views

PT-2026-112681

Name of the Vulnerable Software and Affected Versions Microsoft Windows Search Component affected versions not specified Description A heap-based buffer overflow in the Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow...

7.8CVSS6.1AI score0.00263EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•7 views

PT-2026-112876

Name of the Vulnerable Software and Affected Versions Windows Management Services affected versions not specified Description A use-after-free condition in Windows Management Services allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that...

7.8CVSS6.2AI score0.00245EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•6 views

CVE-2026-85800: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

7.8CVSS6.1AI score0.00311EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•7 views

PT-2026-112830

Name of the Vulnerable Software and Affected Versions Windows Common Log File System Driver affected versions not specified Description A heap-based buffer overflow occurs in the Windows Common Log File System Driver. This issue allows an authorized attacker to elevate privileges locally on the...

7CVSS6.4AI score0.00287EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•4 views

CVE-2026-70172: Untrusted Pointer Dereference

Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally...

7.8CVSS5.6AI score0.00341EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•7 views

PT-2026-112034

Name of the Vulnerable Software and Affected Versions Dockhand versions prior to 1.0.50 Description An issue exists where OpenID Connect OIDC claims, specifically iss, aud, nonce, and exp, are not validated. This allows a user from a different tenant of a shared provider, such as Microsoft Entra...

9.2CVSS5.7AI score0.00391EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•4 views

CVE-2026-96254: Use After Free

Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally...

7CVSS6.2AI score0.00246EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•7 views

CVE-2026-81969: Insufficient Granularity of Access Control

Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.00304EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•5 views

CVE-2026-87715: Use After Free

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

7CVSS6.2AI score0.00199EPSS
SaveExploits0References3
Rows per page
Query Builder