257 matches found
CVE-2023-21752
CVE-2023-21752 Windows 备份服务中任意文件删除漏洞的 PoC。 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21752 此仓库包含两个利用程序： v1 - 仅执行用户选择的文件删除 v2 - 尝试滥用任意删除来生成提权的 cmd shell（不太稳定，可能需要运行几次，最好在物理机上运行） https://user-images.githubusercontent.com/44291883/211601142-c04534e5-f718-478d-b91a-65d6a4f06080.m...
CVE-2026-19820 Backblaze Client for Windows Improper Link Resolution Vulnerability
A vulnerability in the Backblaze Client allows a local user to make the system not bootable by creating a link from Backblaze's folder to Windows OS system files during a backup. Successful exploitation requires an administrator-level system change that results in the absence of specific Windows ...
CVE-2026-62908
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Backup Engine allows an authorized attacker to elevate privileges locally...
CVE-2026-62908 Windows Backup Engine Elevation of Privilege Vulnerability
...
CVE-2026-62908
CVE-2026-62908: A race condition in the Windows Backup Engine allows local privilege escalation by an authorized attacker. Documented impact: high across confidentiality, integrity, and availability (CVSS 3.1 base score 7.0; LOCAL access; HIGH likelihood of impact). Affected component is the Wind...
CVE-2026-62908 Windows Backup Engine Elevation of Privilege Vulnerability
...
EUVD-2026-56411
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Backup Engine allows an authorized attacker to elevate privileges locally...
Windows Backup Engine Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Backup Engine allows an authorized attacker to elevate privileges locally...
PT-2026-70595
Name of the Vulnerable Software and Affected Versions Windows Backup Engine affected versions not specified Description A race condition occurs in the Windows Backup Engine due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate privileges local...
CVE-2026-58598
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Backup Engine allows an authorized attacker to elevate privileges locally...
CVE-2026-58598 Windows Backup Service Elevation of Privilege Vulnerability
...
CVE-2026-58598 Windows Backup Service Elevation of Privilege Vulnerability
...
CVE-2026-58598
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Backup Engine allows an authorized attacker to elevate privileges locally...
CVE-2026-58598
Technical details are not publicly available in the provided documents. Monitor for updates from vendors and advisories for CVE-2026-58598.
Windows Backup Service Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Backup Engine allows an authorized attacker to elevate privileges locally...
CVE-2026-50406
Use after free in Windows Backup Engine allows an authorized attacker to elevate privileges locally...
CVE-2026-50406 Windows Backup Engine Elevation of Privilege Vulnerability
...
CVE-2026-50406
CVE-2026-50406 affects Windows Backup Engine with a use-after-free vulnerability that enables a locally authenticated attacker to elevate privileges. Connected sources confirm the issue exists in Windows Backup Engine and describe local privilege escalation as the impact, with Microsoft issuing u...