Microsoft Windows Search Component Tampering Vulnerability

Missing authorization in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally...

Microsoft Windows Search Component Elevation of Privilege Vulnerability

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

Microsoft Windows Search Component Elevation of Privilege Vulnerability

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

Microsoft Windows Search Component Tampering Vulnerability

Missing authentication for critical function in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally...

Microsoft Windows Search Component Elevation of Privilege Vulnerability

Incorrect type conversion or cast in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

Windows Storage Elevation of Privilege Vulnerability

Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally...

Microsoft Windows Search Component Elevation of Privilege Vulnerability

Absolute path traversal in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

Microsoft Windows Search Component Information Disclosure Vulnerability

Insertion of sensitive information into externally-accessible file or directory in Microsoft Windows Search Component allows an authorized attacker to disclose information over a network...

Microsoft Windows Search Component Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally...

Microsoft Windows Search Component Elevation of Privilege Vulnerability

Double free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network...

Microsoft Windows Search Component Elevation of Privilege Vulnerability

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network...

Windows Smart Card Elevation of Privilege Vulnerability

Untrusted search path in Windows Smart Card allows an authorized attacker to elevate privileges locally...

Microsoft Windows Search Component Elevation of Privilege Vulnerability

Integer overflow or wraparound in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

PT-2026-87782

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

CVE-2026-77827: Unquoted Search Path or Element

Maono Link 3.8.13 MaonoAiServices Windows service allows local privilege escalation for a standard user account via improper write privileges in 'C:\ProgramData\Maono'. Fixed in 4.0.80...

PT-2026-87184

A weakness has been identified in aircheng-org iWebShop-5 up to 5.15. The affected element is the function member list of the file controllers/member.php. This manipulation of the argument Search causes sql injection. The attack is possible to be carried out remotely. The exploit has been made...

PT-2026-87602

Name of the Vulnerable Software and Affected Versions Microsoft Windows Search Component affected versions not specified Description A use-after-free condition in the Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. Use-after-free is a memory...

CVE-2026-69608: Integer Overflow or Wraparound

Integer overflow or wraparound in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

CVE-2026-80159: Untrusted Search Path

Acrobat Reader is affected by an Untrusted Search Path vulnerability that could result in privilege escalation. An attacker with high privileges could leverage this vulnerability to gain elevated access. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue...

CVE-2026-82073: Incorrect Authorization

A security issue in the MongoDB Server aggregation framework allows an authenticated user with limited read privileges to bypass view-level authorization checks and access data from unauthorized collections when Atlas Search features are in use. The issue stems from insufficient validation of an...