Lucene search
+L

558 matches found

Japan Vulnerability Notes
Japan Vulnerability Notes
added 2026/03/31 6:53 a.m.17 views

Security information for Hitachi Disk Array Systems

Overview CVE-2026-20846 | GDI+ Denial of Service Vulnerability CVE-2026-21222 | Windows Kernel Information Disclosure Vulnerability CVE-2026-21231 | Windows Kernel Elevation of Privilege Vulnerability CVE-2026-21234 | Windows Connected Devices Platform Service Elevation of Privilege Vulnerability...

8.8CVSS6.8AI score0.25835EPSS
SaveExploits9References25
RedhatCVE
RedhatCVE
added 2026/03/26 3:4 p.m.5 views

CVE-2026-25189

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00334EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2026/03/25 6:18 a.m.243 views

Exploit for Heap-based Buffer Overflow in Microsoft

CVE-2024-30051 — Windows DWM Heap Overflow EoP · Master's Thes...

7.8CVSS8AI score0.05687EPSS
SaveExploits2
Information Security Automation
Information Security Automation
added 2026/03/22 9:0 a.m.13 views

March "In the Trend of VM" (#25): once again, vulnerabilities are only in Microsoft products

March "In the Trend of VM" 25: once again, vulnerabilities are only in Microsoft products. I present the traditional monthly roundup of trending vulnerabilities according to Positive Technologies. As in February, it turned out to be quite compact and focused on a single vendor. 🗞 Post on Habr rus...

8.8CVSS7.2AI score0.25835EPSS
SaveExploits8
Information Security Automation
Information Security Automation
added 2026/03/12 3:14 p.m.17 views

About Elevation of Privilege - Desktop Window Manager (CVE-2026-21519) vulnerability

About Elevation of Privilege - Desktop Window Manager CVE-2026-21519 vulnerability. The vulnerability is from the February Microsoft Patch Tuesday. Desktop Window Manager is a compositing window manager included in Windows starting with Windows Vista. A Type Confusion error CWE-843 in Desktop...

7.8CVSS6AI score0.0242EPSS
SaveExploits0
EUVD
EUVD
added 2026/03/10 6:31 p.m.15 views

EUVD-2026-10664

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00334EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/03/10 6:31 p.m.16 views

EUVD-2026-10663

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00334EPSS
SaveExploits0References2
CVE
CVE
added 2026/03/10 5:5 p.m.49 views

CVE-2026-25189

The CVE-2026-25189 entry concerns a Use-after-Free in Windows DWM Core Library that allows an authorized attacker to locally elevate privileges. Affected component is Windows DWM Core Library; root cause is a use-after-free condition leading to privilege escalation. Microsoft and related advisori...

7.8CVSS5.8AI score0.00334EPSS
SaveExploits0References1Affected Software5
ATTACKERKB
ATTACKERKB
added 2026/03/10 5:5 p.m.10 views

CVE-2026-25189

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00334EPSS
SaveExploits0References2Affected Software6
Positive Technologies
Positive Technologies
added 2026/03/10 12:0 a.m.7 views

PT-2026-24313

Уязвимость библиотеки DWM Core Library операционных систем Windows связана c использованием памяти после ее освобождения. Эксплуатация уязвимости может позволить нарушителю повысить привилегии...

7.8CVSS5.8AI score0.00334EPSS
SaveExploits0References7
CNVD
CNVD
added 2026/03/09 12:0 a.m.8 views

Google Android elevation of privilege vulnerability (CNVD-2026-16155)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability, which stems from a lack of privilege checking in the relayoutWindow function of WindowManagerService.java, which can be exploited by an attacker to gain...

8.4CVSS5.7AI score0.00094EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/03/04 1:57 a.m.7 views

CVE-2025-48634

In relayoutWindow of WindowManagerService.java, there is a possible tapjack attack due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

8.4CVSS6.1AI score0.00094EPSS
SaveExploits0References1
OSV
OSV
added 2026/03/02 7:16 p.m.5 views

CVE-2025-48634

In relayoutWindow of WindowManagerService.java, there is a possible tapjack attack due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.3CVSS5.9AI score0.00094EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/02 6:42 p.m.6 views

CVE-2025-48634

In relayoutWindow of WindowManagerService.java, there is a possible tapjack attack due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

8.4CVSS6.1AI score0.00094EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/03/02 6:42 p.m.2 views

CVE-2025-48634

In relayoutWindow of WindowManagerService.java, there is a possible tapjack attack due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

6.1AI score0.00094EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/03/02 6:42 p.m.10 views

EUVD-2025-208213

In relayoutWindow of WindowManagerService.java, there is a possible tapjack attack due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

6.1AI score0.00094EPSS
SaveExploits0References1
CVE
CVE
added 2026/03/02 6:42 p.m.21 views

CVE-2025-48634

The CVE-2025-48634 entry involves Android’s WindowManagerService relayoutWindow where a missing permission check enables a local elevation-of-privilege (EoP) attack. The vulnerability can be exploited with no user interaction and does not require additional execution privileges. Connected documen...

8.4CVSS6.1AI score0.00094EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2026/03/01 12:0 a.m.9 views

ASB-A-406243581

In relayoutWindow of WindowManagerService.java, there is a possible tapjack attack due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

8.4CVSS6.1AI score0.00094EPSS
SaveExploits0References2
Fedora
Fedora
added 2026/02/19 1:33 a.m.10 views

[SECURITY] Fedora 42 Update: fvwm3-1.1.4-4.fc42

Fvwm is a window manager for X11. It is designed to minimize memory consumption, provide a 3D look to window frames, and implement a virtual desktop...

7.5CVSS5.5AI score0.00639EPSS
SaveExploits1
Fedora
Fedora
added 2026/02/19 1:14 a.m.11 views

[SECURITY] Fedora 43 Update: fvwm3-1.1.4-4.fc43

Fvwm is a window manager for X11. It is designed to minimize memory consumption, provide a 3D look to window frames, and implement a virtual desktop...

7.5CVSS5.5AI score0.00639EPSS
SaveExploits1
Rows per page
Query Builder