861 matches found
Security Bulletin: Security vulnerabilities have been identified in third party libraries shipped with IBM Guardium Cryptography Manager (GCM)
Summary Security vulnerabilities identified in the third party libraries shipped with IBM Guardium Cryptography Manager GCM have been addressed. Vulnerability Details CVEID:CVE-2026-59313 DESCRIPTION: Spring MVC applications using the functional web framework are vulnerable to stream corruption...
CVE-2026-97774
Time-of-check time-of-use toctou race condition in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally...
CVE-2026-96939
Time-of-check time-of-use toctou race condition in Servicing Stack Updates allows an authorized attacker to elevate privileges locally...
CVE-2026-96853
Time-of-check time-of-use toctou race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...
CVE-2026-85943
Time-of-check time-of-use toctou race condition in Reliable Multicast Transport Driver RMCAST allows an authorized attacker to elevate privileges locally...
CVE-2026-85879
Time-of-check time-of-use toctou race condition in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally...
CVE-2026-70075
Time-of-check time-of-use toctou race condition in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to bypass a security feature locally...
EUVD-2026-100264
Time-of-check time-of-use toctou race condition in Servicing Stack Updates allows an authorized attacker to elevate privileges locally...
CVE-2026-96853
A Time-of-check time-of-use (TOCTOU) race condition exists in the Windows Win32 Kernel Subsystem . This vulnerability allows an authorized attacker to perform a local information disclosure . While the technical details of the root cause are limited to the TOCTOU classification (CWE-367), the imp...
CVE-2026-70122
A Time-of-check time-of-use (TOCTOU) race condition exists in the Windows Broadcast DVR User Service . This vulnerability allows an authorized attacker to achieve local privilege escalation . The vulnerability is tracked under CWE-367 . Remediation is available via an official fix provided by Mic...
CVE-2026-85943
A Time-of-check time-of-use (TOCTOU) race condition exists in the Reliable Multicast Transport Driver (RMCAST) . This vulnerability allows an authorized attacker to achieve local privilege elevation . While the specific affected versions are not detailed in the provided documents, the vulnerabili...
CVE-2026-85879
A Time-of-check time-of-use (TOCTOU) race condition exists in the Windows Subsystem for Linux . This vulnerability allows an authorized attacker to achieve local privilege elevation . The impact includes high levels of confidentiality, integrity, and availability. Official fixes are available; ho...
SNEK_Equinox
SNEK Equinox I would like to thank Nightmare-Eclipse for the inspiration not personal from the project UnDefend - https://web.archive.org/web/20260521145157/https://github.com/Nightmare-Eclipse/UnDefend: Now funnily enough, I found a way to lie to the EDR web console to show that defender is up a...
Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
Time-of-check time-of-use toctou race condition in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally...
Windows Virtualization-Based Security (VBS) Enclave Security Feature Bypass Vulnerability
Time-of-check time-of-use toctou race condition in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to bypass a security feature locally...
Servicing Stack Updates Elevation of Privilege Vulnerability
Time-of-check time-of-use toctou race condition in Servicing Stack Updates allows an authorized attacker to elevate privileges locally...
CVE-2026-41651
🚨 CVE-2026-41651 — Pack2TheRoot Privilege Escalation Vulnerability in PackageKit TOCTOU Race Condition 📌 Overview CVE-2026-41651 is a local privilege escalation vulnerability affecting the PackageKit system service used in various Linux distributions. The vulnerability is caused by a Time-of-Chec...
CVE-2025-5777
Exploit for CVE-2025-5777: Citrix NetScaler Memory Disclosure CitrixBleed 2 T1606 Disclaimer Intented for authorized use only. It is your responsibility to verify authorization before use. I am not responsible for any legal or criminal proceedings filed against you for using this. Description...
PT-2026-112699
Name of the Vulnerable Software and Affected Versions Windows Projected File System affected versions not specified Description A time-of-check time-of-use toctou race condition exists in the Windows Projected File System. This flaw allows an authorized attacker to perform local tampering. A TOCT...