103 matches found
CVE-2026-69534
CVE-2026-69534 is a command injection vulnerability in the Windows Program Compatibility Assistant Service , caused by improper neutralization of special elements used in a command. An authorized attacker can leverage this flaw to achieve local privilege escalation , with a CVSS 3.1 score of 7.8 ...
EUVD-2026-73011
Improper neutralization of special elements used in a command 'command injection' in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...
CVE-2026-68845
CVE-2026-68845 is a heap-based buffer overflow in the Windows Program Compatibility Assistant Service that allows an authorized attacker to perform local privilege escalation . Microsoft rates it HIGH severity (CVSS 3.1: 7.8) with a local attack vector, low complexity, low privileges required, an...
EUVD-2026-73199
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...
Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability
Improper neutralization of special elements used in a command 'command injection' in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...
Windows Program Compatibility Assistant Service Information Disclosure Vulnerability
Out-of-bounds read in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information over a network...
Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges over a network...
Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...
Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69534: Improper Neutralization of Special Elements used in a Command
Improper neutralization of special elements used in a command 'command injection' in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...
PT-2026-87547
Name of the Vulnerable Software and Affected Versions Windows Program Compatibility Assistant Service affected versions not specified Description Improper neutralization of special elements used in a command, known as command injection, allows an authorized attacker to elevate privileges locally...
CVE-2026-68873: Insertion of Sensitive Information into Log File
Insertion of sensitive information into log file in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information locally...
CVE-2026-68874: Out-of-bounds Read
Out-of-bounds read in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information over a network...
CVE-2026-69563: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...
PT-2026-87293
Name of the Vulnerable Software and Affected Versions Windows Program Compatibility Assistant Service affected versions not specified Description A heap-based buffer overflow occurs in the Windows Program Compatibility Assistant Service. This issue allows an authorized attacker to elevate...
CVE-2026-68876: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges over a network...
CVE-2026-68845: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...
PT-2026-87291
Name of the Vulnerable Software and Affected Versions Windows Program Compatibility Assistant Service affected versions not specified Description An out-of-bounds read in the Windows Program Compatibility Assistant Service allows an authorized attacker to disclose sensitive information over a...
