35934 matches found
Microsoft Windows Search Component Elevation of Privilege Vulnerability
Incorrect type conversion or cast in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
Microsoft Windows Search Component Elevation of Privilege Vulnerability
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
Microsoft Windows Search Component Tampering Vulnerability
Missing authorization in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally...
Windows Storage Elevation of Privilege Vulnerability
Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally...
Microsoft Windows Search Component Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally...
Microsoft Windows Search Component Information Disclosure Vulnerability
Insertion of sensitive information into externally-accessible file or directory in Microsoft Windows Search Component allows an authorized attacker to disclose information over a network...
Microsoft Windows Search Component Elevation of Privilege Vulnerability
Absolute path traversal in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
Microsoft Windows Search Component Elevation of Privilege Vulnerability
Integer overflow or wraparound in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
Windows Smart Card Elevation of Privilege Vulnerability
Untrusted search path in Windows Smart Card allows an authorized attacker to elevate privileges locally...
Microsoft Windows Search Component Elevation of Privilege Vulnerability
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network...
Microsoft Windows Search Component Elevation of Privilege Vulnerability
Double free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network...
CVE-2026-82073: Incorrect Authorization
A security issue in the MongoDB Server aggregation framework allows an authenticated user with limited read privileges to bypass view-level authorization checks and access data from unauthorized collections when Atlas Search features are in use. The issue stems from insufficient validation of an...
CVE-2026-69322: Double Free
Double free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network...
PT-2026-87782
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
PT-2026-87718
Untrusted search path in Windows Smart Card allows an authorized attacker to elevate privileges locally...
PT-2026-87602
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
PT-2026-87366
Double free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network...
PT-2026-88469
Acrobat Reader is affected by an Untrusted Search Path vulnerability that could result in privilege escalation. An attacker with high privileges could leverage this vulnerability to gain elevated access. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue...
CVE-2026-86667: Improper Neutralization of Special Elements used in an SQL Command
A weakness has been identified in aircheng-org iWebShop-5 up to 5.15. The affected element is the function memberlist of the file controllers/member.php. This manipulation of the argument Search causes sql injection. The attack is possible to be carried out remotely. The exploit has been made...
PT-2026-88513
Impact The OpenAI Chat Model node checked a custom base URL against the credential's allowed-domains configuration before sending a request, but the model-search dropdown did not. A request setting options.baseURL on that path reached an arbitrary host with the credential attached, so the domain...