2171 matches found
CVE-2026-55000 Windows USB Print Driver Elevation of Privilege Vulnerability
...
CVE-2026-54989 Quality Windows Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability
...
DNS Client Tampering Vulnerability
Missing authentication for critical function in Microsoft Windows DNS allows an authorized attacker to perform tampering locally...
Windows USB Audio Class Driver Information Disclosure Vulnerability
Out-of-bounds read in Windows USB Audio Class driver usbaudio.sys allows an unauthorized attacker to disclose information with a physical attack...
Windows OLE Elevation of Privilege Vulnerability
Improper authorization in Windows OLE allows an authorized attacker to elevate privileges locally...
PT-2026-58313
Name of the Vulnerable Software and Affected Versions Windows Operating Systems affected versions not specified Description A race condition occurs when concurrent execution using a shared resource lacks proper synchronization. This issue, combined with a use-after-free condition, allows an...
PT-2026-58218
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Win32K allows an authorized attacker to elevate privileges locally...
PT-2026-58501
Name of the Vulnerable Software and Affected Versions Windows Cryptographic Services affected versions not specified Description An issue in Windows Cryptographic Services allows an authorized attacker to locally disclose sensitive information to an unauthorized actor. Recommendations At the...
PT-2026-58183
Name of the Vulnerable Software and Affected Versions Microsoft Windows DNS affected versions not specified Description Improper privilege management in Microsoft Windows DNS allows an authorized attacker to locally bypass a security feature. Recommendations At the moment, there is no information...
PT-2026-58439
Name of the Vulnerable Software and Affected Versions Windows Ancillary Function Driver for WinSock affected versions not specified Description External control of a file name or path in the Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...
FTP Fetch, Windows Meterpreter Shell, Reverse HTTPS Inline
Fetch and execute an x86 payload from an FTP server. Connect back to attacker and spawn a Meterpreter shell. Requires Windows XP SP2 or newer. Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module...
FTP Fetch, Windows Meterpreter Shell, Reverse HTTP Inline
Fetch and execute an x86 payload from an FTP server. Connect back to attacker and spawn a Meterpreter shell. Requires Windows XP SP2 or newer. Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module...
FTP Fetch, Windows Meterpreter Shell, Bind Named Pipe Inline
Fetch and execute an x86 payload from an FTP server. Connect to victim and spawn a Meterpreter shell. Requires Windows XP SP2 or newer. Module Options...
FTP Fetch, Windows Meterpreter Shell, Reverse HTTPS Inline (x64)
Fetch and execute an x64 payload from an FTP server. Connect back to attacker and spawn a Meterpreter shell. Requires Windows XP SP2 or newer. Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module...
FTP Fetch, Windows Meterpreter Shell, Reverse TCP Inline x64
Fetch and execute an x64 payload from an FTP server. Connect back to attacker and spawn a Meterpreter shell. Requires Windows XP SP2 or newer. Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module...
The vulnerability of Google Base database systems, as well as Google Chrome browser and Windows operating system-related vulnerabilities, allow attackers to bypass the sandboxing protection mechanisms.
The vulnerability of Google Base database, a browser-based system by Google, and the Google Chrome browser, as well as the Windows operating system, is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to bypass the sandboxing mechanism through a...
The vulnerability of the Media component of the Google Chrome browser on Windows operating systems, which allows a hacker to bypass the sandboxing protection mechanism.
The vulnerability of the Media component in Google Chrome’s Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass the sandboxing mechanism by using a specially created HTML page...
The vulnerability of the UEFI Secure Boot protection mechanism in Windows operating systems allows a hacker to circumvent security restrictions and execute arbitrary code.
The vulnerability of the UEFI Secure Boot security mechanism in Windows operating systems is related to a component that cannot be updated. Exploiting this vulnerability can allow attackers to bypass security restrictions and execute arbitrary code...
PT-2026-54308
Name of the Vulnerable Software and Affected Versions Google Chrome on Windows versions prior to 150.0.7871.47 Description Insufficient policy enforcement in the Media component allows a remote attacker to bypass site isolation, a security feature that ensures web pages from different sites are...
The vulnerability of the Windows Ancillary Function Driver for WinSock operating system allows attackers to increase their privileges.
The vulnerability of the Windows Ancillary Function Driver for WinSock operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges...