3216 matches found
Windows Update Orchestrator Service Privilege Escalation
The vulnerability of the Windows Update Orchestrator Service on Windows operating systems is related to the improper handling of symbolic links before accessing the file. Exploiting this vulnerability can allow an attacker to elevate their privileges to the SYSTEM level...
Windows Update Orchestrator Service Privilege Escalation
The vulnerability of the Windows Update Orchestrator Service on Windows operating systems is related to incorrect handling of symbolic links before accessing the file. Exploiting this vulnerability can allow an attacker to elevate their privileges to the SYSTEM level and gain unauthorized access ...
CVE-2025-48799
Description This is PoC for CVE-2025-48799, an elevation of privilege vulnerability in Windows Update service. This vulnability affects windows clients win11/win10 with at least 2 hard drives. When machine have multiple hard drives it is possible to change location where new content is saved usin...
nuc-winring0-fix
Intel NUC WinRing0 Vulnerable Driver - Permanent Removal Guide Windows Defender flags OpenHardwareMonitorLib.sys WinRing0 driver as VulnerableDriver:WinNT/Winring0 due to CVE-2020-14979. This driver is bundled with Intel's NUC Software Studio service and gets reinstalled via Windows Update. This...
CVE-2020-1313
CVE-2020-1313 Abstract Windows Update Orchestrator Service is a DCOM service used by other components to install windows updates that are already downloaded. USO was vulnerable to Elevation of Privileges any user to local system due to an improper authorization of the callers. The vulnerability...
CVE-2025-48799
Description This is PoC for CVE-2025-48799, an elevation of privilege vulnerability in Windows Update service. This vulnability affects windows clients win11/win10 with at least 2 hard drives. When machine have multiple hard drives it is possible to change location where new content is saved usin...
CVE-2023-23397-Patch
CVE-2023-23397 Windows Update Patch CVE-2023-23397 powershell patch script for Windows 10 and 11 This version of the script allows you to check if your device has the most reach sent patches for the latest Microsoft exploit. if the security updates are not found using the Powershell Command...
PPLmedic
PPLmedic This tool implements a Userland exploit chain for injecting arbitrary code into a PPL with the signer type Windows and elevating to the signer type WinTcb. These techniques were originally discussed by James Forshaw a.k.a. @tiraniddo in his blog post Injecting Code into Windows Protected...
CVE-2026-122162
Integer underflow wrap or wraparound in Windows Update Stack allows an authorized attacker to disclose information locally...
CVE-2026-122162
An integer underflow (wrap or wraparound) vulnerability exists in the Windows Update Stack . This flaw allows an authorized attacker to perform a local information disclosure attack. While the technical root cause is identified as an integer underflow, specific exploit code or in-the-wild exploit...
EUVD-2026-122485
Integer underflow wrap or wraparound in Windows Update Stack allows an authorized attacker to disclose information locally...
August 11, 2026âKB5121000 (OS Build 28000.2704)
August 11, 2026âKB5121000 OS Build 28000.2704 Applies To Windows 11 version 26H1, all editions This cumulative update for Windows 11, version 26H1 KB5121000 includes the latest security fixes and improvements, along with non-security updates from last month's optional preview release. Visit the...
Windows Update Stack Information Disclosure Vulnerability
Integer underflow wrap or wraparound in Windows Update Stack allows an authorized attacker to disclose information locally...
PT-2026-144020
Integer underflow wrap or wraparound in Windows Update Stack allows an authorized attacker to disclose information locally...
dazzleUP
dazzleUP A tool that detects the privilege escalation vulnerabilities caused by misconfigurations and missing updates in the Windows operating systems. dazzleUP detects the following vulnerabilities. Exploit Checks The first feature of dazzleUP is that it uses Windows Update Agent API instead of...
CVE-2026-97812
Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally...
CVE-2026-96323
Use after free in Windows Update allows an authorized attacker to elevate privileges locally...
CVE-2026-96218
Improper access control in Windows Update Stack allows an authorized attacker to perform tampering locally...