OWN-Defender

OWN-Defender — Windows 安全中心 COM 研究 OWN-Defender 是一个 Windows 安全研究项目，专注于理解 Windows 安全中心（WSC） 如何通过其 COM 接口表示和管理防病毒安全产品。 该项目最初是对 DefendNot 所展示行为的一项调查，但我没有将现有实现视为黑盒，而是将其作为独立逆向工程和验证的起点。 该项目的目标是理解完整的执行路径： COM ↓ CLSID / IID ↓ CoCreateInstance ↓ QueryInterface ↓ ATL 接口映射 ↓ vtable ↓ IWscAVStatus4 ↓ CWscIsv...

CVE-2026-77899

Use after free in Windows Security Center allows an authorized attacker to elevate privileges locally...

CVE-2026-77899

CVE-2026-77899 is a use-after-free vulnerability in Windows Security Center that allows an authorized attacker to escalate privileges locally . The CVSS v3.1 score is 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting the need for low privileges and high attack complexity...

EUVD-2026-73291

Use after free in Windows Security Center allows an authorized attacker to elevate privileges locally...

Windows Security Center Elevation of Privilege Vulnerability

Use after free in Windows Security Center allows an authorized attacker to elevate privileges locally...

CVE-2026-77899: Use After Free

Use after free in Windows Security Center allows an authorized attacker to elevate privileges locally...

PT-2026-87976

Use after free in Windows Security Center allows an authorized attacker to elevate privileges locally...

EUVD-2022-27030

Malicious code in bioql PyPI...

Microsoft Windows Security Center 安全漏洞

Microsoft Windows Security Center is a security center of Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Security Center. An attacker exploits the vulnerability to perform spoofing attacks...

Microsoft Windows Security Center 缓冲区错误漏洞

Microsoft Windows Security Center is a security center from Microsoft Corporation USA. A buffer error vulnerability exists in Microsoft Windows Security Center. An attacker exploiting this vulnerability could gain access to sensitive information. The following products and versions are...

The vulnerability of the Windows Security Center API component of the Windows operating system, which allows a perpetrator to execute arbitrary code.

The vulnerability of the Windows Security Center API component of the Windows operating system is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2022-21874

Windows Security Center API Remote Code Execution Vulnerability...

CVE-2022-21874

Windows Security Center API Remote Code Execution Vulnerability...

CVE-2022-21874

Windows Security Center API Remote Code Execution Vulnerability...

Remote code execution

Windows Security Center API Remote Code Execution Vulnerability...

CVE-2022-21874 Windows Security Center API Remote Code Execution Vulnerability

...

Windows Security Center API Remote Code Execution Vulnerability

...

CVE-2022-21874: Undefined Security Weakness

Windows Security Center API Remote Code Execution Vulnerability...

Microsoft Windows Security Center 代码注入漏洞

Microsoft Windows Security Center is a security center of Microsoft Corporation USA. A code injection vulnerability exists in Microsoft Windows Security Center. The following products and editions are affected:Windows 10 Version 1809 for ARM64-based Systems,Windows Server 2019,Windows Server 2019...

PT-2022-1507 · Microsoft · Windows Security Center Api +1

Name of the Vulnerable Software and Affected Versions: Windows Security Center API affected versions not specified Description: The issue is related to incorrect code generation management in the Windows Security Center API component of the Windows operating system. This allows remote attackers t...