Lucene search
+L

347321 matches found

Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•7 views

PT-2026-112876

Name of the Vulnerable Software and Affected Versions Windows Management Services affected versions not specified Description A use-after-free condition in Windows Management Services allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that...

7.8CVSS6.2AI score0.00245EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•6 views

CVE-2026-85800: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

7.8CVSS6.1AI score0.00311EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•7 views

PT-2026-112830

Name of the Vulnerable Software and Affected Versions Windows Common Log File System Driver affected versions not specified Description A heap-based buffer overflow occurs in the Windows Common Log File System Driver. This issue allows an authorized attacker to elevate privileges locally on the...

7CVSS6.4AI score0.00287EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•4 views

CVE-2026-70172: Untrusted Pointer Dereference

Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally...

7.8CVSS5.6AI score0.00341EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•7 views

PT-2026-112034

Name of the Vulnerable Software and Affected Versions Dockhand versions prior to 1.0.50 Description An issue exists where OpenID Connect OIDC claims, specifically iss, aud, nonce, and exp, are not validated. This allows a user from a different tenant of a shared provider, such as Microsoft Entra...

9.2CVSS5.7AI score0.00391EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•4 views

CVE-2026-96254: Use After Free

Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally...

7CVSS6.2AI score0.00246EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•7 views

CVE-2026-81969: Insufficient Granularity of Access Control

Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.00304EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•5 views

CVE-2026-87715: Use After Free

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

7CVSS6.2AI score0.00199EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•6 views

CVE-2026-103565: Use After Free

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...

7CVSS6.2AI score0.00252EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•7 views

PT-2026-112764

Name of the Vulnerable Software and Affected Versions Windows Installer affected versions not specified Description A numeric truncation error occurs in Windows Installer, which allows an authorized attacker to elevate privileges locally and affect the system. Recommendations At the moment, there...

7.8CVSS5.8AI score0.00311EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•6 views

Microsoft Windows: CVE-2026-83720: Windows Kerberos Elevation of Privilege Vulnerability

Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally...

7CVSS6.2AI score0.00252EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•7 views

Microsoft Windows: CVE-2026-83792: Windows Device Install Service Elevation of Privilege Vulnerability

Incorrect authorization in Windows Device Install Service allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.00284EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•5 views

CVE-2026-83510: Time-of-check Time-of-use (TOCTOU) Race Condition

Time-of-check time-of-use toctou race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally...

7CVSS5.6AI score0.00212EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•7 views

CVE-2026-96919: Use After Free

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...

7CVSS6.2AI score0.00153EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•6 views

CVE-2026-96243: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows WalletService allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.00271EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•4 views

CVE-2026-87693: Use After Free

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

7CVSS6.2AI score0.00204EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•4 views

CVE-2026-87692: Deserialization of Untrusted Data

Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.01587EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•7 views

CVE-2026-70138: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally...

7.8CVSS6.1AI score0.00341EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•4 views

CVE-2026-83881: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally...

7.8CVSS6.1AI score0.00341EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•4 views

CVE-2026-88188: Out-of-bounds Read

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.00311EPSS
SaveExploits0References3
Rows per page
Query Builder