Lucene search
+L

3135 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•6 views

Microsoft Windows: CVE-2026-97812: Windows Update Orchestrator Service Elevation of Privilege Vulnerability

Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally...

7CVSS5.8AI score0.00264EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•3 views

CVE-2026-108465: Use After Free

Use after free in Windows Update Delivery Optimization allows an authorized attacker to elevate privileges locally...

7CVSS6.2AI score0.00252EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•6 views

Microsoft Windows: CVE-2026-83507: Windows Update Orchestrator Service Information Disclosure Vulnerability

Improper link resolution before file access 'link following' in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally...

5.5CVSS5.7AI score0.00446EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•8 views

Microsoft Windows: CVE-2026-69718: Windows Update Elevation of Privilege Vulnerability

Improper neutralization of special elements used in a command 'command injection' in Windows Update allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00963EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•6 views

Microsoft Windows: CVE-2026-69882: Windows Update Elevation of Privilege Vulnerability

Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.0041EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•7 views

Microsoft Windows: CVE-2026-81964: Windows Update Orchestrator Service Security Feature Bypass Vulnerability

Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker to bypass a security feature locally...

5.5CVSS5.8AI score0.00309EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•4 views

Microsoft Windows: CVE-2026-83930: Windows Update Orchestrator Service Elevation of Privilege Vulnerability

Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally...

7CVSS6.2AI score0.00219EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•5 views

Microsoft Windows: CVE-2026-69733: Windows Update Elevation of Privilege Vulnerability

Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.00439EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•4 views

Microsoft Windows: CVE-2026-96218: Windows Update Stack Tampering Vulnerability

Improper access control in Windows Update Stack allows an authorized attacker to perform tampering locally...

5.5CVSS5.7AI score0.00552EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•5 views

Microsoft Windows: CVE-2026-96323: Windows Update Elevation of Privilege Vulnerability

Use after free in Windows Update allows an authorized attacker to elevate privileges locally...

7CVSS6.2AI score0.00246EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•6 views

PT-2026-113241

Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally...

7CVSS5.8AI score0.00264EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•6 views

Microsoft Windows: CVE-2026-83933: Windows Update Orchestrator Service Information Disclosure Vulnerability

Improper link resolution before file access 'link following' in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally...

5.5CVSS5.6AI score0.00427EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•8 views

PT-2026-111882

Name of the Vulnerable Software and Affected Versions Windows Update Service affected versions not specified Description A heap-based buffer overflow occurs in the Windows Update Service, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory...

7CVSS6.3AI score0.0027EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•4 views

Microsoft Windows: CVE-2026-83886: Windows Update Orchestrator Service Elevation of Privilege Vulnerability

Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally...

7CVSS6.2AI score0.00296EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•5 views

PT-2026-111879

Name of the Vulnerable Software and Affected Versions Windows Update Service affected versions not specified Description A use-after-free condition in the Windows Update Service allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs wh...

7CVSS6.2AI score0.0027EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•2 views

CVE-2026-100203: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally...

7CVSS6.1AI score0.0027EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•3 views

CVE-2026-100200: Use After Free

Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally...

7CVSS6.2AI score0.0027EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•7 views

PT-2026-112649

Name of the Vulnerable Software and Affected Versions Windows Update Orchestrator Service affected versions not specified Description A use after free issue exists in the Windows Update Orchestrator Service. This flaw allows an authorized attacker to elevate privileges locally. Use after free is ...

7CVSS6.1AI score0.00296EPSS
SaveExploits0References3
Kaspersky
Kaspersky
•added 2026/10/13 12:00 a.m.•10 views

KLA91347 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface. Below is a complete list of...

7AI score
SaveExploits0References1167
Kitploit
Kitploit
•added 2026/10/12 4:05 a.m.•23 views

CVE-2023-23397-Patch

CVE-2023-23397 Windows Update Patch CVE-2023-23397 powershell patch script for Windows 10 and 11 This version of the script allows you to check if your device has the most reach sent patches for the latest Microsoft exploit. if the security updates are not found using the Powershell Command...

9.8CVSS8.5AI score0.97159EPSS
SaveExploits19
Rows per page
Query Builder