39549 matches found
CVE-2026-69507: Insertion of Sensitive Information into Externally-Accessible File or Directory
Insertion of sensitive information into externally-accessible file or directory in Microsoft Windows Search Component allows an authorized attacker to disclose information over a network...
PT-2026-87370
Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally...
PT-2026-87602
Name of the Vulnerable Software and Affected Versions Microsoft Windows Search Component affected versions not specified Description A use-after-free condition in the Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. Use-after-free is a memory...
CVE-2026-69453: Missing Authorization
Missing authorization in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally...
PT-2026-87718
Name of the Vulnerable Software and Affected Versions Windows Smart Card affected versions not specified Description An untrusted search path in Windows Smart Card allows an authorized attacker to elevate privileges locally. This issue enables attackers to affect the system by gaining higher-leve...
CVE-2026-69554: Missing Authentication for Critical Function
Missing authentication for critical function in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally...
CVE-2026-69305: Use After Free
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network...
PT-2026-87563
Missing authentication for critical function in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally...
Adobe Photoshop 26.x < 26.11.7 / 27.x < 27.7 Multiple Vulnerabilities (APSB26-130)
The version of Adobe Photoshop installed on the remote Windows host is prior to 26.11.7/27.7. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb26-130 advisory. - Photoshop Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in...
PT-2026-87782
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
PT-2026-87610
Integer overflow or wraparound in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
PT-2026-87184
A weakness has been identified in aircheng-org iWebShop-5 up to 5.15. The affected element is the function member list of the file controllers/member.php. This manipulation of the argument Search causes sql injection. The attack is possible to be carried out remotely. The exploit has been made...
PT-2026-87310
Name of the Vulnerable Software and Affected Versions Microsoft Windows Search Component affected versions not specified Description An absolute path traversal issue exists in the Microsoft Windows Search Component. This flaw allows an authorized attacker to elevate privileges locally on the...
PT-2026-88469
Acrobat Reader is affected by an Untrusted Search Path vulnerability that could result in privilege escalation. An attacker with high privileges could leverage this vulnerability to gain elevated access. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue...
CVE-2026-80159: Untrusted Search Path
Acrobat Reader is affected by an Untrusted Search Path vulnerability that could result in privilege escalation. An attacker with high privileges could leverage this vulnerability to gain elevated access. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue...
CVE-2026-78574: Untrusted Search Path
The Okta Hyperdrive Integration plugin resolves a required assembly using a registry path within the current user's hive without integrity verification. The referenced path is loaded via Assembly.LoadFrom without signature validation, resulting in an unverified assembly executing within the conte...
CVE-2026-69911: Use After Free
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
CVE-2026-69785: Untrusted Search Path
Untrusted search path in Windows Smart Card allows an authorized attacker to elevate privileges locally...