49 matches found
CVE-2017-0213
CVE-2017-0213: Windows COM – Sicherheitslücke bezüglich Berechtigungserweiterung Beschreibung Autor: Google Security Research CVE: 2017-0213 EDB-ID: 42020 Referenzen: Project-Zero Microsoft Exploit-Database Video: Youtube Betroffene Produkte Produkt| Version| Update| Build| Getestet...
CVE-2017-0213
CVE-2017-0213: Windows COM Berechtigungserweiterungs-Schwachstelle Beschreibung Autor: Google Security Research CVE: 2017-0213 EDB-ID: 42020 Referenzen: Project-Zero Microsoft Exploit-Database Video: Youtube Betroffene Produkte Produkt| Version| Update| Build| Getestet ---|---|---|---|--- Windows...
CVE-2026-57105
creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:11+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 22:01:22+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286 2026-08-12 01:01:07+00:00| seen|...
Agentic Vulnerability Reasoning on Windows COM Binaries
Windows Component Object Model COM services run with elevated privileges and are widely accessible to authenticated users, making race conditions in these binaries a critical surface for local privilege escalation. We present SLYP, an end-to-end agentic pipeline that discovers race condition...
CVE-2026-20806
Access of resource using incompatible type 'type confusion' in Windows COM allows an authorized attacker to disclose information locally...
CVE-2026-32162
Acceptance of extraneous untrusted data with trusted data in Windows COM allows an unauthorized attacker to elevate privileges locally...
Microsoft Windows COM 安全漏洞
Microsoft Windows COM is a technology developed by Microsoft Corporation in the United States, aimed at software reuse. COM is described as a platform-independent, distributed, object-oriented system used for creating interactive binary software components. There are security vulnerabilities in...
CVE-2025-58725
Heap-based buffer overflow in Windows COM allows an authorized attacker to elevate privileges locally...
CVE-2025-58725
Heap-based buffer overflow in Windows COM allows an authorized attacker to elevate privileges locally...
CVE-2025-58725
Heap-based buffer overflow in Windows COM allows an authorized attacker to elevate privileges locally...
EUVD-2017-0580
Malware in sbrugna...
EUVD-2019-1322
Malware in sbrugna...
EUVD-2025-2337
Malicious code in bioql PyPI...
EUVD-2025-2353
Malicious code in bioql PyPI...
EUVD-2022-44278
Malicious code in bioql PyPI...
CVE-2020-0685
An elevation of privilege vulnerability exists when Windows improperly handles COM object creation, aka 'Windows COM Server Elevation of Privilege Vulnerability'...
CVE-2025-21288
Windows COM Server Information Disclosure Vulnerability...
CVE-2025-21281
Microsoft COM for Windows Elevation of Privilege Vulnerability...
CVE-2025-21272
Windows COM Server Information Disclosure Vulnerability...
CVE-2025-21288
Technical details about CVE-2025-21288 are not publicly provided in the supplied connected documents; the record notes a Windows COM Server information disclosure vulnerability but lacks specifics on affected products/versions or mitigations. Monitor for official disclosures.