Lucene search
+L

688 matches found

Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•12 views

Windows Push Notifications Elevation of Privilege Vulnerability

Missing authentication for critical function in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

7CVSS6AI score0.0022EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•10 views

Windows Push Notifications Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

7.8CVSS6.3AI score0.0041EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•14 views

Windows Push Notifications Elevation of Privilege Vulnerability

Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

7CVSS6.4AI score0.003EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•12 views

CVE-2026-83867: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

7.8CVSS6.2AI score0.0041EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•10 views

CVE-2026-96313: Missing Authentication for Critical Function

Missing authentication for critical function in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

7CVSS5.9AI score0.0022EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•11 views

CVE-2026-70198: Use After Free

Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

7CVSS6.3AI score0.003EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•9 views

Microsoft Windows: CVE-2026-70198: Windows Push Notifications Elevation of Privilege Vulnerability

Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

7CVSS6.3AI score0.003EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•13 views

PT-2026-112295

CVE advisory: CVE-2026-70198 - microsoft: Windows Push Notifications Elevation of Privilege Vulnerability. https://t.co/THUwdqoH0Q CVE CyberSecurity Microsoft WindowsServer...

7CVSS5.9AI score0.003EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•10 views

Microsoft Windows: CVE-2026-96313: Windows Push Notifications Elevation of Privilege Vulnerability

Missing authentication for critical function in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

7CVSS5.9AI score0.0022EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•13 views

PT-2026-112632

Name of the Vulnerable Software and Affected Versions Windows Push Notifications affected versions not specified Description A heap-based buffer overflow exists in Windows Push Notifications. This issue allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occu...

7.8CVSS6.1AI score0.0041EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•12 views

PT-2026-113078

Name of the Vulnerable Software and Affected Versions Windows Push Notifications affected versions not specified Description A missing authentication flaw in a critical function allows an authorized attacker to elevate privileges locally, potentially affecting the system. Recommendations At the...

7CVSS5.8AI score0.0022EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•10 views

Microsoft Windows: CVE-2026-83867: Windows Push Notifications Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

7.8CVSS6.2AI score0.0041EPSS
SaveExploits0References2
Malwarebytes
Malwarebytes
•added 2026/10/06 2:11 p.m.•25 views

ASOS “hackers” send push notifications to customers

Thousands of global fashion retailer ASOS customers have received a push notification through the ASOS app this morning alleging that the company has been hacked. The notification, addressed to ASOS’s data protection officer and IT, says: “ASOS HACKED Dear Asos DPO and IT, we have fully compromis...

5.7AI score
SaveExploits0
NVD
NVD
•added 2026/10/01 8:17 p.m.•15 views

CVE-2026-102666

The Joyland AI app contains hard-coded credentials for the GeTui push notification service, allowing an attacker to access the GeTui REST API and send push notifications containing arbitrary content to any user, group of users, or all users of the app at once...

6.9CVSS0.00166EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/10/01 7:41 p.m.•19 views

EUVD-2026-91023

The Joyland AI app contains hard-coded credentials for the GeTui push notification service, allowing an attacker to access the GeTui REST API and send push notifications containing arbitrary content to any user, group of users, or all users of the app at once...

6.9CVSS6AI score0.00166EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/10/01 7:41 p.m.•44 views

CVE-2026-102666 Joyland AI hard-coded credentials for push notifications

The Joyland AI app contains hard-coded credentials for the GeTui push notification service, allowing an attacker to access the GeTui REST API and send push notifications containing arbitrary content to any user, group of users, or all users of the app at once...

6.9CVSS0.00166EPSS
SaveExploits0References2
CVE
CVE
•added 2026/10/01 7:41 p.m.•12 views

CVE-2026-102666

The Joyland AI app contains hard-coded credentials for the GeTui push notification service . This vulnerability allows an attacker to access the GeTui REST API to send push notifications with arbitrary content to any individual user, specific groups, or the entire user base of the app. No specifi...

6.9CVSS6AI score0.00166EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/01 12:00 a.m.•16 views

PT-2026-103981

Name of the Vulnerable Software and Affected Versions Joyland AI affected versions not specified Description The application contains hard-coded credentials for the GeTui push notification service. This allows an attacker to access the GeTui REST API and send push notifications with arbitrary...

6.9CVSS5.9AI score0.00166EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/01 12:00 a.m.•15 views

CVE-2026-102666: Use of Hard-coded Credentials

The Joyland AI app contains hard-coded credentials for the GeTui push notification service, allowing an attacker to access the GeTui REST API and send push notifications containing arbitrary content to any user, group of users, or all users of the app at once...

6.9CVSS6AI score0.00166EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/10/01 12:00 a.m.•22 views

Rocky Linux 8 [CIQ] Security Update: firefox / firefox-debuginfo / firefox-debugsource Multiple Vulnerabilities (crlsa-2023_4952)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20234952 advisory. Mozilla: Memory corruption in IPC CanvasTranslator CVE-2023-4573 Mozilla: Memory corruption in IPC ColorPickerShownCallback CVE-2023-4574 Mozilla: Memory...

8.8CVSS6.9AI score0.00804EPSS
SaveExploits0References40
Rows per page
Query Builder