318 matches found
-EXPLOIT-CVE-2023-36025
EXPLOIT CVE-2023-36025 - Description Windows SmartScreen Security Feature Bypass Vulnerability Usage NOTE handler waiting for tcp request for target P.S configure CVE-2023-36025.vbs file to change the ip and port to machine ip and port that is being used for the TCP handler configure reverse TCP...
CVE-2024-29988-exploit
CVE-2024-29988-exploit Exploit for Microsoft SmartScreen malicious execution april 2024 Description A critical vulnerability, CVE-2024-29988, has been discovered in Microsoft's April 2024 Patch Tuesday release. This vulnerability allows threat actors to bypass Microsoft's Mark of the Web MotW...
CVE-2026-21514_CVE-2026-21510
CVE-2026-21514 & CVE-2026-21510 Builders 1; CVE-2026-21514 SBX bypass or Protected View Bypass Rebuild document package with obfuscated path to WindowsUpdateDiagnostic.xml inside word/rels/webSettings.xml.rels Pending Check other xml configs in path C:\Windows\diagnostics\index if they support th...
Four-Byte Write and Timing Bug Let Researchers Run Code in Windows SmartScreen Enclave
Security researchers ran their own code inside a protected part of Windows that is meant to stay sealed off even when the rest of the computer is taken over. The protected area is a VBS enclave , an isolated slice of memory the operating system uses to guard secrets, and the one they broke into...
CVE-2026-85851
Use after free in Windows SmartScreen allows an authorized attacker to elevate privileges locally...
CVE-2026-83504
Time-of-check time-of-use toctou race condition in Windows SmartScreen allows an authorized attacker to disclose information locally...
CVE-2026-70051
Access of resource using incompatible type 'type confusion' in Windows SmartScreen allows an authorized attacker to elevate privileges locally...
CVE-2026-62879
Missing authentication for critical function in Windows SmartScreen allows an authorized attacker to perform tampering locally...
CVE-2026-108463
Improper resolution of path equivalence in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-108463
A vulnerability in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network due to the improper resolution of path equivalence (CWE-41). The impact is rated as HIGH for confidentiality, integrity, and availability. No specific exploitative code or remediatio...
EUVD-2026-100457
Improper resolution of path equivalence in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-70051
A type confusion vulnerability in Windows SmartScreen allows an authorized attacker to achieve local privilege escalation . The root cause involves the access of resources using incompatible types, which can lead to high impact on confidentiality, integrity, and availability. The CVSS 3.1 score i...
EUVD-2026-99859
Access of resource using incompatible type 'type confusion' in Windows SmartScreen allows an authorized attacker to elevate privileges locally...
CVE-2026-62879
A missing authentication vulnerability in Windows SmartScreen (CWE-306) allows an authorized attacker to perform tampering locally . The vulnerability impacts the integrity of the system by enabling unauthorized modifications to critical functions. No specific exploit details or in-the-wild explo...
EUVD-2026-99838
Missing authentication for critical function in Windows SmartScreen allows an authorized attacker to perform tampering locally...
CVE-2026-85851
A Use after free vulnerability in Windows SmartScreen allows an authorized attacker to achieve local privilege elevation . The vulnerability is classified with a CVSS v3.1 base score of 7.8 (High) . While specific component details or exploit links are not provided in the documents, an official f...
EUVD-2026-99555
Use after free in Windows SmartScreen allows an authorized attacker to elevate privileges locally...
EUVD-2026-99293
Time-of-check time-of-use toctou race condition in Windows SmartScreen allows an authorized attacker to disclose information locally...
CVE-2026-83504
A Time-of-check time-of-use (TOCTOU) race condition exists in Windows SmartScreen . This vulnerability allows an authorized attacker to perform a local information disclosure . Exploitation details are not provided in the documentation, but the vulnerability is confirmed to have a MEDIUM base sev...
