17 matches found
CVE-2026-69276
Integer underflow wrap or wraparound in Microsoft UxTheme Library uxtheme.dll allows an unauthorized attacker to execute code over a network...
CVE-2026-69276
CVE-2026-69276 is an integer underflow (wrap or wraparound) in the Microsoft UxTheme Library (uxtheme.dll) that allows an unauthorized attacker to achieve remote code execution over the network. The CVSS 3.1 score is 9.8 (Critical) , reflecting network-based attack vector with no privileges or us...
KB5122878: Windows 10 version 21H2 / Windows 10 Version 22H2 Security Update (September 2026)
The remote Windows host is missing security update 5122878. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. CVE-2026-68839 - Integer underflow wrap or...
KB5124012: Windows 11 Version 26H1 Security Update (September 2026)
The remote Windows host is missing security update 5124012. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. CVE-2026-68839 - Integer underflow wrap or...
KB5122876: Windows 10 version 1809 / Windows Server 2019 Security Update (September 2026)
The remote Windows host is missing security update 5122876. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. CVE-2026-68839 - Integer underflow wrap or...
KB5124008: Windows 11 Version 24H2 / 25H2 / 26H2 Security Update (September 2026)
The remote Windows host is missing security update 5124008. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. CVE-2026-68839 - Integer underflow wrap or...
KB5123066: Windows Server 2012 R2 Security Update (September 2026)
The remote Windows host is missing security update 5123066. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. CVE-2026-68839 - Integer underflow wrap or...
KB5122882: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (September 2026)
The remote Windows host is missing security update 5122882. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. CVE-2026-68839 - Integer underflow wrap or...
CVE-2026-45606
Out-of-bounds read in Microsoft UxTheme Library uxtheme.dll allows an authorized attacker to deny service locally...
CVE-2026-45606
Out-of-bounds read in Microsoft UxTheme Library uxtheme.dll allows an authorized attacker to deny service locally...
CVE-2026-45606 Microsoft UxTheme Library (uxtheme.dll) Denial of Service Vulnerability
...
CVE-2026-45606
CVE-2026-45606 concerns an out-of-bounds read in the Microsoft UxTheme Library (uxtheme.dll) that allows an authorized, low-privilege user to cause a local denial of service. The NVD/NIST and CVE records concur on the impact as a local DoS; attack vector is LOCAL, with LOW prerequisites and NONE ...
CVE-2026-45606 Microsoft UxTheme Library (uxtheme.dll) Denial of Service Vulnerability
...
Microsoft UxTheme Library (uxtheme.dll) Denial of Service Vulnerability
Out-of-bounds read in Microsoft UxTheme Library uxtheme.dll allows an authorized attacker to deny service locally...
Microsoft UxTheme 缓冲区错误漏洞
Microsoft UxTheme is a core system component built into the Windows operating system by Microsoft, used to render system windows, controls, and various graphical interface themes. There is a buffer overflow vulnerability in Microsoft UxTheme. Attackers can exploit this vulnerability to cause a...
CVE-2022-32168 notepad-plus-plus - DLL Hijacking
Notepad++ versions 8.4.1 and before are vulnerable to DLL hijacking where an attacker can replace the vulnerable dll UxTheme.dll with his own dll and run arbitrary code in the context of Notepad++...
HCView WriteAV Crash Proof Of Concept
!/usr/bin/perl Hardcoreview WriteAV Arbitrary Code Execution Author: Jean Pascal Pereira Vendor URI: http://sourceforge.net/projects/hardcoreview/ Vendor Description: Image browser. Designed and created for profesional and amature watching image files. All kind of image files ; . Support .jpg,...