Lucene search
+L

347561 matches found

Cvelist
Cvelist
•added 2026/10/13 12:00 a.m.•24 views

CVE-2026-37107

An issue in HTMLy v.3.1.1 allows a remote attacker to escalate privileges via the getfeed function in the admin.php component...

0.00638EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•6 views

CVE-2026-102205: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...

7.8CVSS6.1AI score0.00311EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•4 views

CVE-2026-102208: Use After Free

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...

7CVSS6.2AI score0.00246EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•5 views

CVE-2026-102209: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...

7CVSS6AI score0.00236EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•4 views

CVE-2026-100203: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally...

7CVSS6.1AI score0.00264EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•6 views

PT-2026-113380

🚨 CVE-2026-75748 ColdFusion is affected by a Server-Side Request Forgery SSRF vulnerability that could result in privilege escalation. An attacker with high privileges could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does not require user...

7.6CVSS5.9AI score0.00558EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•6 views

PT-2026-113383

🚨 CVE-2026-76001 ColdFusion is affected by a Server-Side Request Forgery SSRF vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access to internal resources. Exploit depends on conditions beyond the attacker's...

7.1CVSS5.9AI score0.00522EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•7 views

CVE-2026-85368: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally...

7.8CVSS6.1AI score0.00318EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•8 views

PT-2026-112408

Name of the Vulnerable Software and Affected Versions Servicing Stack Updates affected versions not specified Description An untrusted search path in Servicing Stack Updates allows an authorized attacker to elevate privileges locally, which can lead to a full system compromise. Recommendations At...

7.8CVSS5.8AI score0.00364EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•7 views

Microsoft Windows: CVE-2026-85318: Servicing Stack Updates Elevation of Privilege Vulnerability

Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally...

7.8CVSS6.1AI score0.00318EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•6 views

CVE-2026-85318: Heap-based Buffer Overflow

Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally...

7.8CVSS6.1AI score0.00318EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•9 views

PT-2026-112711

Name of the Vulnerable Software and Affected Versions Servicing Stack Updates affected versions not specified Description A heap-based buffer overflow exists in Servicing Stack Updates. This issue allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs whe...

7.8CVSS6AI score0.00318EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•6 views

Microsoft Windows: CVE-2026-83506: Servicing Stack Updates Elevation of Privilege Vulnerability

Untrusted search path in Servicing Stack Updates allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.00364EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•4 views

CVE-2026-88161: Use After Free

Use after free in Windows Local Security Authority LSA allows an authorized attacker to elevate privileges locally...

7CVSS6.2AI score0.00246EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•10 views

PT-2026-112227

Name of the Vulnerable Software and Affected Versions Windows Client for NFS affected versions not specified Description An integer overflow or wraparound occurs in the Windows Client for NFS, which allows an authorized attacker to elevate privileges locally and affect the system. An integer...

7.8CVSS5.8AI score0.00341EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•6 views

CVE-2026-83704: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.00424EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•9 views

PT-2026-112426

Name of the Vulnerable Software and Affected Versions Windows Win32K affected versions not specified Description A use-after-free issue in ICOMP allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption flaw that occurs when an application continues to use...

7CVSS6AI score0.0027EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•11 views

PT-2026-112415

Name of the Vulnerable Software and Affected Versions Windows Partition Management Driver affected versions not specified Description A heap-based buffer overflow occurs in the Windows Partition Management Driver. This issue allows an authorized attacker to elevate privileges locally on the syste...

7.8CVSS6.3AI score0.00341EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•7 views

PT-2026-112890

Name of the Vulnerable Software and Affected Versions Windows Fax and Scan Service affected versions not specified Description A heap-based buffer overflow occurs in the Windows Fax and Scan Service. This issue allows an authorized attacker to elevate privileges locally on the system. A heap-base...

7.8CVSS6.4AI score0.00245EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•8 views

Microsoft Windows: CVE-2026-96852: Windows TCP/IP Elevation of Privilege Vulnerability

Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally...

7CVSS6.2AI score0.00246EPSS
SaveExploits0References2
Rows per page
Query Builder