515 matches found
CVE-2026-110746
A local privilege escalation vulnerability in TotalAV allows an unprivileged local user to forge the gRPC IPC authentication token, through loading IPC.dll and abuse the SYSTEM service's within TotalAV to execute arbitrary code as NT AUTHORITY\SYSTEM...
CVE-2019-6329
Local Privilege Escalation in HP Support Assistant A local privilege escalation bug in HP Support Assistant by abusing hard link Researcher: ManhNDd of Bkav Description In HP Support Assistant GUI , when you click Check for updates and messages , the service HP Support Solution Framework will run...
EUVD-2026-102075
A local privilege escalation vulnerability in TotalAV allows an unprivileged local user to forge the gRPC IPC authentication token, through loading IPC.dll and abuse the SYSTEM service's within TotalAV to execute arbitrary code as NT AUTHORITY\SYSTEM...
CVE-2014-7911_poc
CVE-2014-7911poc Local root exploit for Nexus5 Android 4.4.4KTU8P author: retme [email protected] @returnsme on twitter & @retme on weibo website: retme.net how to build Import the project into eclipse,and build. ./cve20147911/assets/msmattack is the binary file of CVE-2014-4322 exploit.You...
CVE-2022-35841
CVE-2022-35841 This is only a small writeup with the theory, as this bug was collided on and I never did get around to properly testing this. EnterpriseAppMgmtSvc is an interesting service implementing COM objects. Seems to date from Windows Phone and indeed, most of the COM interfaces implemente...
CVE-2014-7911-CVE-2014-4322_get_root_privilege
CVE-2014-7911poc Local root exploit for Nexus5 Android 4.4.4KTU8P author: andy website: https://blog.csdn.net/koozxcv how to build Import the project into eclipse,and build. bug info http://seclists.org/fulldisclosure/2014/Nov/51 analysis...
acheron
About Acheron is a library inspired by SysWhisper3/FreshyCalls/RecycledGate, with most of the functionality implemented in Go assembly. acheron package can be used to add indirect syscall capabilities to your Golang tradecraft, to bypass AV/EDRs that makes use of usermode hooks and instrumentatio...
CVE-2026-96933
Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...
CVE-2026-96933
The Windows COM+ Event System Service is vulnerable to an untrusted pointer dereference . This security flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is assigned a CVSS v3.1 score of 7.8 (High) , indicating significant impact on confidentiality, integ...
EUVD-2026-100252
Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...
CVE-2026-83830
A heap-based buffer overflow exists in the Windows COM+ Event System Service . This vulnerability allows an authorized attacker to achieve local privilege escalation . No specific details regarding the root cause, affected versions, or available exploits are provided in the documents. Remediation...
CVE-2026-83785
A Use after free vulnerability exists in the Windows COM+ Event System Service . This flaw allows an authorized attacker to achieve local privilege escalation . No specific software versions or exploit links are provided in the documents; however, a remediation level of OFFICIAL_FIX is indicated.
CVE-2026-83848
A vulnerability exists in the Windows COM+ Event System Service due to an untrusted pointer dereference . This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit details or versions are provided in the documents, though the issue is confirmed with a HIG...
Windows COM+ Event System Service Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...
Windows COM+ Event System Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...
Windows COM+ Event System Service Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-83830: Windows COM+ Event System Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...
PT-2026-113139
Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-83785: Windows COM+ Event System Service Elevation of Privilege Vulnerability
Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-83848: Windows COM+ Event System Service Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...