CVE-2023-21674

Первая 0-day уязвимость 2023 года, эксплуатируемая в реальных атаках 🔥 CVE-2023-21674 — это уязвимость в Windows Advanced Local Procedure Call ALPC, обнаруженная компанией Avast. Она может привести к обходу песочницы браузера и позволить злоумышленникам получить привилегии SYSTEM. kd !analyze -v...

China-Linked Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy GRIMWEDGE

A Chinese threat actor has been attributed to a spear-phishing campaign that exploits recently patched security flaws in Google Chrome and Microsoft Windows to deliver a malicious JavaScript backdoor called GRIMWEDGE. Volexity, which is tracking the threat cluster under the moniker UTA0560 , said...

Four Spy Groups Used the Same Chrome and Windows Exploit Kit Within a Week

Multiple espionage-motivated threat activity clusters have been found deploying a previously undocumented exploit kit called BlueMoon that chains together multiple vulnerabilities in Microsoft Windows and Google Chrome. The first in-the-wild use of BlueMoon has been attributed to the China-aligne...

September Microsoft Patch Tuesday

September Microsoft Patch Tuesday. A total of 973 vulnerabilities were addressed - more than twice as many as in August. Seven products had 20 or more vulnerabilities fixed: Windows Biometric Service 64, Microsoft SQL Server 54, Windows DHCP Server 36, Microsoft Office Word 35, Windows NTFS 29,...

Patch Tuesday - September 2026

Microsoft is publishing 974 own-product vulnerabilities on September 2026 Patch Tuesday, including 723 vulnerabilities in Windows. Along with Microsoft fixes for 25 non-Microsoft CVEs, that brings the total number of vulnerabilities on the table today to 999. Whether this is the biggest Patch...

CVE-2026-85880

Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally...

CVE-2026-69874

Untrusted pointer dereference in Windows ALPC allows an authorized attacker to elevate privileges locally...

CVE-2026-69834

Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally...

CVE-2026-69874

CVE-2026-69874 is a local privilege escalation vulnerability in Windows ALPC (Advanced Local Procedure Call) caused by an untrusted pointer dereference . An authorized attacker with local high-privilege access can exploit this to elevate privileges further. The vulnerability carries a CVSS 3.1 sc...

EUVD-2026-73637

Untrusted pointer dereference in Windows ALPC allows an authorized attacker to elevate privileges locally...

EUVD-2026-73580

Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally...

CVE-2026-69834

CVE-2026-69834 is a use-after-free vulnerability in Windows ALPC (Advanced Local Procedure Call) that allows an authorized local attacker to elevate privileges . The attack requires local access , high complexity , and low privileges , with no user interaction needed. The CVSS v3.1 base score is ...

EUVD-2026-73365

Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally...

CVE-2026-85880

CVE-2026-85880 is a heap-based buffer overflow in Windows ALPC (Advanced Local Procedure Call) that enables a locally authorized attacker to escalate privileges with full impact on confidentiality, integrity, and availability (CVSS 7.8 HIGH). CISA added this CVE to the Known Exploited Vulnerabili...

Windows ALPC Elevation of Privilege Vulnerability

Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally...

Windows ALPC Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows ALPC allows an authorized attacker to elevate privileges locally...

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally...

PT-2026-87767

Untrusted pointer dereference in Windows ALPC allows an authorized attacker to elevate privileges locally...

VulnCheck KEV: CVE-2026-85880

Microsoft Windows Advanced Local Procedure Call contains a heap-based buffer overflow vulnerability that allows an attacker to elevate privileges locally...

PT-2026-88151

Name of the Vulnerable Software and Affected Versions Windows 10 versions 1607 through 10.0.14393.9511 Windows 10 versions 1809 through 10.0.17763.9244 Windows 10 versions 21H2 through 10.0.19044.7724 Windows 10 versions 22H2 through 10.0.19045.7724 Windows Server 2012 versions prior to...