Lucene search
+L

472 matches found

RedHat Linux
RedHat Linux
•added 2026/04/22 11:44 a.m.•50 views

Important: Red Hat Security Advisory: rhc security update

An update for rhc is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System...

7.5CVSS7.5AI score0.00834EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/04/16 9:31 a.m.•15 views

EUVD-2026-23197

In ONLYOFFICE DesktopEditors before 9.3.0, the update service allows attackers to perform actions on files with SYSTEM privileges...

6.2CVSS5.8AI score0.00157EPSS
SaveExploits0References2
NVD
NVD
•added 2026/04/16 7:16 a.m.•13 views

CVE-2026-41030

In ONLYOFFICE DesktopEditors before 9.3.0, the update service allows attackers to perform actions on files with SYSTEM privileges...

6.2CVSS0.00157EPSS
SaveExploits0References1
CVE
CVE
•added 2026/04/16 5:51 a.m.•65 views

CVE-2026-41030

CVE-2026-41030 affects ONLYOFFICE DesktopEditors prior to 9.3.0. The update service can be abused to perform actions on files with SYSTEM privileges, indicating a local privilege escalation. CVSS 3.1: AV=L/AC=L/PR=N/UI=N/S=U, Impact: Confidentiality=NONE, Integrity=NONE, Availability=HIGH. Exploi...

6.2CVSS6.5AI score0.00157EPSS
SaveExploits0References1
OSV
OSV
•added 2026/04/16 5:51 a.m.•13 views

CVE-2026-41030

In ONLYOFFICE DesktopEditors before 9.3.0, the update service allows attackers to perform actions on files with SYSTEM privileges...

6.2CVSS6AI score
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/04/16 5:51 a.m.•9 views

CVE-2026-41030

In ONLYOFFICE DesktopEditors before 9.3.0, the update service allows attackers to perform actions on files with SYSTEM privileges...

6.2CVSS6.5AI score0.00157EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/04/16 5:51 a.m.•40 views

CVE-2026-41030

In ONLYOFFICE DesktopEditors before 9.3.0, the update service allows attackers to perform actions on files with SYSTEM privileges...

6.2CVSS0.00157EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/04/16 5:51 a.m.•11 views

CVE-2026-41030

In ONLYOFFICE DesktopEditors before 9.3.0, the update service allows attackers to perform actions on files with SYSTEM privileges...

6.2CVSS5.8AI score0.00157EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/16 12:00 a.m.•1 views

CVE-2026-41030: Incorrect Resource Transfer Between Spheres

In ONLYOFFICE DesktopEditors before 9.3.0, the update service allows attackers to perform actions on files with SYSTEM privileges...

6.2CVSS6.5AI score0.00157EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/04/16 12:00 a.m.•19 views

DesktopEditors 安全漏洞

DesktopEditors is an open-source offline office suite developed by ONLYOFFICE, supporting editing of documents, spreadsheets, presentations, and PDFs. Versions of DesktopEditors prior to 9.3.0 contained a security vulnerability. This vulnerability stemmed from defects in the update service, which...

6.2CVSS5.9AI score0.00157EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/04/16 12:00 a.m.•15 views

PT-2026-33271

In ONLYOFFICE DesktopEditors before 9.3.0, the update service allows attackers to perform actions on files with SYSTEM privileges...

6.2CVSS5.8AI score0.00157EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/04/15 7:23 p.m.•16 views

CVE-2026-32224

Use after free in Windows Server Update Service allows an authorized attacker to elevate privileges locally...

7CVSS5.8AI score0.00264EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2026/04/15 12:00 a.m.•19 views

The vulnerability of the OpenShift Update Service, a service for updating corporate platform Red Hat OpenShift Container Platform, allows attackers to increase their privileges.

The vulnerability of the OpenShift Update Service, a component of the Red Hat OpenShift Container Platform corporate platform, is related to the improper use of standard permissions. Exploiting this vulnerability could allow an attacker to add a new user with any arbitrary UID and gain...

6.4CVSS5.9AI score0.00145EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/04/14 6:30 p.m.•15 views

EUVD-2026-22410

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Server Update Service allows an authorized attacker to elevate privileges locally...

7CVSS5.9AI score0.00202EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/04/14 6:30 p.m.•16 views

EUVD-2026-22376

Improper input validation in Windows Server Update Service allows an unauthorized attacker to perform tampering over a network...

7.5CVSS5.8AI score0.01232EPSS
SaveExploits0References2
NVD
NVD
•added 2026/04/14 6:17 p.m.•19 views

CVE-2026-32224

Use after free in Windows Server Update Service allows an authorized attacker to elevate privileges locally...

7CVSS0.00264EPSS
SaveExploits0References1
NVD
NVD
•added 2026/04/14 6:16 p.m.•8 views

CVE-2026-26154

Improper input validation in Windows Server Update Service allows an unauthorized attacker to perform tampering over a network...

7.5CVSS0.01232EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/04/14 4:57 p.m.•10 views

CVE-2026-32224

Use after free in Windows Server Update Service allows an authorized attacker to elevate privileges locally...

7CVSS5.7AI score0.00264EPSS
SaveExploits0References2Affected Software1
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:00 p.m.•17 views

Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Server Update Service allows an authorized attacker to elevate privileges locally...

7CVSS7.1AI score0.00202EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/04/14 2:00 p.m.•19 views

Windows Server Update Service (WSUS) Tampering Vulnerability

Improper input validation in Windows Server Update Service allows an unauthorized attacker to perform tampering over a network...

7.5CVSS7.3AI score0.01232EPSS
SaveExploits0
Rows per page
Query Builder