204 matches found
createdump
Windows App LSASS Dump - Proof of Concept This project demonstrates how to dump the LSASS process using the createdump.exe tool, a Microsoft signed executable, from the Windows App, leveraging a custom hook to enable process access to LSASS. Get-AuthentiCodeSignature -FilePath Join-Path -Path...
CVE-2026-95944
Weak authentication in Windows App Readiness Service allows an authorized attacker to perform tampering locally...
EUVD-2026-122257
Untrusted search path in Microsoft Windows App Store allows an authorized attacker to elevate privileges locally...
CVE-2026-119987
A vulnerability exists in the Microsoft Windows App Store where an untrusted search path allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-426 . No specific exploit details or in-the-wild exploitation information are provided in the doc...
EUVD-2026-121635
Weak authentication in Windows App Readiness Service allows an authorized attacker to perform tampering locally...
CVE-2026-95944
A weak authentication vulnerability exists in the Windows App Readiness Service , which allows an authorized attacker to perform tampering locally . This flaw is classified as CWE-1390 . While the provided documents confirm the vulnerability and its impact on integrity, specific technical details...
Microsoft Windows App Store Elevation of Privilege Vulnerability
Untrusted search path in Microsoft Windows App Store allows an authorized attacker to elevate privileges locally...
Windows App Readiness Service Tampering Vulnerability
Weak authentication in Windows App Readiness Service allows an authorized attacker to perform tampering locally...
PT-2026-144229
Name of the Vulnerable Software and Affected Versions Windows App Readiness Service affected versions not specified Description Weak authentication in the Windows App Readiness Service allows an authorized attacker to perform local tampering, which can enable them to affect the system...
PT-2026-143972
Name of the Vulnerable Software and Affected Versions Microsoft Windows App Store affected versions not specified Description An untrusted search path allows an authorized attacker to elevate privileges locally on the system. Recommendations At the moment, there is no information about a newer...
RHLW-2026-858CB80FC989D912 Lightwell Security Advisory: netty-common 4.1.100.Final-rhlw-00001
Red Hat Lightwell has released io.netty:netty-common 4.1.100.Final-rhlw-00001 with backported fixes for CVE-2024-47535 and CVE-2025-25193. CVE-2024-47535: Denial of Service attack on windows app using Netty CVE-2025-25193: Denial of Service attack on windows app using Netty This patched artifact ...
CVE-2026-78547 Out-of-Bounds Write
Out-of-bounds write vulnerability in Citrix Citrix Workspace app for Windows. This issue affects Citrix Workspace app for Windows: before 2603.11 Current Release CR, before 2507.1 LTSR CU3, and before LTSR 2607...
Windows Enterprise App Management Elevation of Privilege Vulnerability
Improper handling of insufficient permissions or privileges in Windows Enterprise App Management allows an authorized attacker to elevate privileges locally...
Citrix Workspace app for Windows Security Bulletin CVE-2026-78546 and CVE-2026-78547
Severity - Medium Description of Problem Two vulnerabilities have been discovered that impact the Citrix Workspace app for Windows. Affected Versions The vulnerabilities affect the following supported versions of the Citrix Workspace app for Windows. Current Release CR Citrix Workspace app for...
CVE-2026-69550 Windows App for Mac Information Disclosure Vulnerability
...
CVE-2026-69550
The Windows App for Mac information disclosure vulnerability (CVSS 6.5, MEDIUM) exposes sensitive data over the network; exploitation requires user interaction. No root cause, affected component, or remediation details are provided in the documents.
CVE-2026-69550 Windows App for Mac Information Disclosure Vulnerability
...
Windows App Store Privilege Escalation
The vulnerability of the Windows App Store application store for Windows operating systems is related to competitive access to resources a state of competition. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...