Lucene search
+L

347582 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•6 views

CVE-2026-88147: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Secure Socket Tunneling Protocol SSTP allows an authorized attacker to elevate privileges locally...

7.8CVSS6.1AI score0.00344EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•6 views

CVE-2026-96852: Use After Free

Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally...

7CVSS6.2AI score0.00246EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•8 views

Microsoft Windows: CVE-2026-88113: Windows Broadcast DVR User Service Elevation of Privilege Vulnerability

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...

7CVSS6.2AI score0.00204EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•8 views

PT-2026-112798

Name of the Vulnerable Software and Affected Versions Windows Modern Device Management MDM affected versions not specified Description A use-after-free condition in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally. Use-after-free is a memory...

7.8CVSS6.2AI score0.00318EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•8 views

CVE-2026-83793: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally...

7CVSS6.8AI score0.00287EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•6 views

CVE-2026-108399: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally...

7.2CVSS7.2AI score0.00344EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•10 views

PT-2026-113229

Name of the Vulnerable Software and Affected Versions Windows Audio Service affected versions not specified Description Improper verification of cryptographic signatures in the Windows Audio Service allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there ...

7.8CVSS5.8AI score0.00295EPSS
SaveExploits0References5
osv_alsa
osv_alsa
•added 2026/10/13 12:00 a.m.•24 views

ALSA-2026:82015 Important: xorg-x11-server security update

X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. Security Fixes: xorg-x11-server: xorg-x11-server: Privilege escalation via crafted RandR provider property requests...

7.5AI score
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•8 views

CVE-2026-105729: Untrusted Pointer Dereference

Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally...

7.1CVSS5.5AI score0.00318EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•7 views

PT-2026-111919

Name of the Vulnerable Software and Affected Versions Microsoft Graphics Component affected versions not specified Description A heap-based buffer overflow in the Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a...

7CVSS6.1AI score0.00236EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•6 views

Microsoft Exchange: CVE-2026-87692: Microsoft Exchange Server Elevation of Privilege Vulnerability

Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.01587EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•7 views

Microsoft Windows: CVE-2026-85934: Windows AppX Deployment Service Elevation of Privilege Vulnerability

Use after free in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally...

7CVSS6.2AI score0.00252EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•13 views

PT-2026-112545

Name of the Vulnerable Software and Affected Versions Windows Error Reporting affected versions not specified Description A time-of-check time-of-use toctou race condition exists in Windows Error Reporting. This occurs when a program checks a condition such as a file's existence or permissions an...

7CVSS5.7AI score0.00205EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•10 views

CVE-2026-83568: Missing Authorization

Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.00304EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•7 views

PT-2026-112111

Name of the Vulnerable Software and Affected Versions Windows Storage affected versions not specified Description A use after free issue in Windows Storage allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs when an application...

7CVSS6.8AI score0.00202EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•10 views

PT-2026-111995

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Incorrect authorization allows an authorized attacker to elevate privileges over a network. Recommendations At the moment, there is no information about a newer version th...

4.3CVSS5.3AI score0.00435EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•9 views

PT-2026-112027

Name of the Vulnerable Software and Affected Versions Windows Update Delivery Optimization affected versions not specified Description A use after free issue exists in Windows Update Delivery Optimization. This allows an authorized attacker to elevate privileges locally. Use after free is a memor...

7CVSS7.4AI score0.00252EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•10 views

PT-2026-111997

Name of the Vulnerable Software and Affected Versions Windows Distributed File System DFS affected versions not specified Description An untrusted pointer dereference in Windows Distributed File System DFS allows an unauthorized attacker to elevate privileges over a network. Recommendations At th...

7.5CVSS7AI score0.01149EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•5 views

CVE-2026-108464: Use After Free

Use after free in Software Protection Platform SPP allows an authorized attacker to elevate privileges locally...

7CVSS7.2AI score0.00252EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•5 views

CVE-2026-108465: Use After Free

Use after free in Windows Update Delivery Optimization allows an authorized attacker to elevate privileges locally...

7CVSS7.2AI score0.00252EPSS
SaveExploits0References2
Rows per page
Query Builder