CVE-2023-21674

أول ثغرة يوم-صفر في البرية لعام 2023 🔥 CVE-2023-21674 هي ثغرة في استدعاء الإجراءات المحلية المتقدمة في ويندوز ALPC يمكن أن تؤدي إلى الهروب من صندوق رمل المتصفح وتسمح للمهاجمين بالحصول على صلاحيات SYSTEM، تم اكتشافها بواسطة Avast root@kitploit: kd !analyze -v تحليل خطأ الفحص PAGEFAULTINNONPAGEDARE...

CVE-2020-0688

Identifier les serveurs Exchange vulnérables à CVE-2020-0688 CVE-2020-0688 est une vulnérabilité critique dans Microsoft Exchange due à l'utilisation de clés statiques. Bien que l'exploitation nécessite des informations d'identification valides au niveau d'un utilisateur de messagerie et que le...

WSUS-RCE-Mitigation-59287

🚨 ALERTE CRITIQUE EN CYBERSÉCURITÉ : RCE sur WSUS CVE-2025-59287 🚨 CRÉATEUR ET CRÉDITS : @esteban11121 Ce guide a été élaboré pour aider la communauté à atténuer rapidement la vulnérabilité. STATUT : Exploitation Active In-the-Wild Confirmée. Il s'agit d'une vulnérabilité d'Exécution de Code à...

IDiagnosticProfileUAC

IDiagnosticProfileUAC مجرد ثغرة أخرى لتجاوز UAC باستخدام كائن COM مرفوع الصلاحيات تلقائيًا Virtual Factory الخاص بـ DiagCpl 12C21EA7-2EB8-4B55-9249-AC243DA8C666. يمكن استخدام كائن COM هذا لإنشاء مثيل لكائن COM الخاص بـ DiagnosticProfile D0B7E02C-E1A3-11DC-81FF-001185AE5E76 الذي يوفّر طريقة...

Windows-WinSock-UAF-Mitigation

CVE-2026-68820: Windows WinSock afd.sys UAF-Mitigation Dieses Repository enthält einen konzeptionellen Patch, der die Mitigation für CVE-2026-68820 demonstriert – eine kritische Use-After-Free-Schwachstelle UAF im Windows Ancillary Function Driver für WinSock afd.sys. Die aktive Ausnutzung dieses...

EUVD-2026-52640

The background service of ABP or AES runs as NT AUTHORITY\SYSTEM and implements a file-based inter-process communication IPC mechanism protected by AES encryption. Because the encryption key file is readable by standard users and protected using DPAPI. Any authenticated local user can recover the...

CVE-2026-15430 CVE-2026-15430

Improper access control in the IRPMJWRITE command interface in Wellbia XIGNCODE3 xhunter2.sys, version 2026.6.1.192, allows a local, unprivileged attacker to achieve local privilege escalation to NT AUTHORITY\SYSTEM, extract credentials from PPL-protected lsass.exe, and terminate PPL-protected...

CVE-2026-20474

In display, there is a possible escalation of privilege due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11019183; Issue ID: MSV-7758...

CVE-2026-12168

The CVE-2026-12168 entry concerns the Little Orbit GFAC product, specifically the GFAC_Sys_x64.sys driver. The vulnerability is described as an improper validation in the Minifilter communication port handling, allowing a local attacker to escalate privileges to SYSTEM and execute arbitrary kerne...

CVE-2026-57919

CVE-2026-57919 affects Matrix42 Empirum (pre-25.5 and pre-26.2). The issue: PBackupVSS.exe creates a named pipe (\.\pipe\PBackupVSS) with a permissive DACL granting GENERIC_READ/WRITE to all authenticated users, enabling a low-privileged, local attacker to connect and send crafted IPC messages to...

CVE-2026-0138

In lwisiobufferwrite of lwisiobuffer.c, there is a possible out of bounds write due to memory corruption. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-44406 DLL Hijacking Vulnerability in ZTE Cloud PC Client uSmartview

ZTE Cloud PC client uSmartView contains a DLL hijacking vulnerability; since uSmartViewServiceAgent.exe runs with SYSTEM privileges, successful hijacking enables local arbitrary code execution, privilege escalation, and memory corruption.contains a DLL hijacking vulnerability; since...

CVE-2026-34459 Sandboxie-Plus sandbox escape via uninitialized memory leak and stack overflow in GetRawInputDeviceInfoSlave

Sandboxie-Plus is an open source sandbox-based isolation software for Windows. In versions 1.17.2 and earlier, the SbieSvc proxy service's GetRawInputDeviceInfoSlave handler contains two vulnerabilities that can be chained for sandbox escape. First, when a sandboxed process sends an IPC request...

CVE-2026-20447

In geniezone, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10724073; Issue ID: MSV-6296...

Exploit for Heap-based Buffer Overflow in Microsoft

CVE-2024-30051 — Windows DWM Heap Overflow EoP · Master's Thes...

PT-2026-24911

An Insufficient Integrity Verification vulnerability in the ASUS ROG peripheral driver installation process allows privilege escalation to SYSTEM. The vulnerability is due to improper access control on the installation directory, which enables the exploitation of a race condition where the...

CVE-2026-20425

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10320471; Issue ID: MSV-5539...

CVE-2026-20440

In MAE, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10431968; Issue ID: MSV-5824...

CVE-2026-20426

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10320471; Issue ID: MSV-5538...

CVE-2026-20443

CVE-2026-20443 involves a memory corruption vulnerability caused by a use-after-free in the display path of MediaTek chipsets. This can lead to local escalation of privilege if an attacker already has System-level privileges; exploitation does not require user interaction. The issue is tracked wi...