CVE-2023-36884-MS-Office-HTML-RCE

CVE-2023-36884: RCE HTML di MS Office con documenti appositamente predisposti L'11 luglio 2023, Microsoft ha rilasciato una patch volta a risolvere molteplici vulnerabilità di esecuzione remota di codice RCE attivamente sfruttate. Questa azione ha anche fatto luce su una campagna di phishing...

mitigate-folina

mitigate-folina Mitiga il "Folina"-ZeroDay CVE-2022-30190 e l'incubo "Search" nessun CVE fornito al momento Questo script eseguirà il backup e poi rimuoverà la chiave di registro interessata come suggerito da Microsoft per mitigare CVE-2022-30190. Se parametrizzato con "-revert", lo script...

CVE-2026-59135

Weak authentication in Microsoft Windows Search Component allows an authorized attacker to disclose information locally...

CVE-2026-59135

Weak authentication in Microsoft Windows Search Component allows an authorized attacker to disclose information locally...

CVE-2026-59135 Microsoft Windows Search Component Information Disclosure Vulnerability

...

CVE-2026-59135

The CVE-2026-59135 entry describes a weakness in the Microsoft Windows Search Component where weak authentication could allow an authorized local attacker to disclose information. Affected software is Windows with the Windows Search Component implicated as the vulnerable element; root cause is we...

CVE-2026-59135 Microsoft Windows Search Component Information Disclosure Vulnerability

...

EUVD-2026-56313

Weak authentication in Microsoft Windows Search Component allows an authorized attacker to disclose information locally...

Microsoft Windows Search Component Information Disclosure Vulnerability

Weak authentication in Microsoft Windows Search Component allows an authorized attacker to disclose information locally...

PT-2026-70414

Name of the Vulnerable Software and Affected Versions Microsoft Windows Search Component affected versions not specified Description Weak authentication in the Microsoft Windows Search Component allows an authorized attacker to disclose sensitive information locally, which can affect the system...

CVE-2026-50679

Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

CVE-2026-50373

Improper access control in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

CVE-2026-50679 Windows Search Service Elevation of Privilege Vulnerability

...

CVE-2026-50679

CVE-2026-50679 is a Windows-focused elevation-of-privileges vulnerability in the Windows Search Component. The core issue is a heap-based buffer overflow that can be triggered by an authenticated local attacker to gain higher privileges on the system. Public descriptions consistently name the aff...

CVE-2026-50679 Windows Search Service Elevation of Privilege Vulnerability

...

CVE-2026-50373 Windows Search Service Elevation of Privilege Vulnerability

...

CVE-2026-50373

CVE-2026-50373 affects the Microsoft Windows Search Component (Windows Search Service). It enables local elevation of privileges via improper access control. Microsoft has released updates (e.g., KB5101650 and MSRC guidance) to address the vulnerability; apply the available security updates to mi...

Windows Search Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

PT-2026-58499

Name of the Vulnerable Software and Affected Versions Microsoft Windows Search Component affected versions not specified Description A heap-based buffer overflow in the Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. This issue enables a low-privile...

Unpatched Windows Search URI Vulnerability Lets Attackers Steal NTLMv2 Hashes

Cybersecurity researchers have disclosed details of an unpatched issue that could be exploited to disclose a user's NTLMv2 hash to the attacker. Like in the case of CVE-2026-33829, which impacted the Windows Snipping Tool's ms-screensketch: URI handler, the newly flagged issue resides in the...