59 matches found
PT-2026-32717
CVE-2026-20806 Access of resource using incompatible type 'type confusion' in Windows COM allows an authorized attacker to disclose information locally. https://t.co/pPGYfQ4IPk...
CVE-2026-21240
Time-of-check time-of-use toctou race condition in Windows HTTP.sys allows an authorized attacker to elevate privileges locally...
PT-2026-5928
Insecure Permissions vulnerability in avanquest Driver Updater v.9.1.57803.1174 allows a local attacker to escalate privileges via the Driver Updater Service windows component...
EUVD-2025-206729
Insecure Permissions vulnerability in avanquest Driver Updater v.9.1.57803.1174 allows a local attacker to escalate privileges via the Driver Updater Service windows component...
Net-SNMP snmptrapd crash
...
Microsoft Inbox COM Objects Code Execution Vulnerability
Microsoft Inbox COM Objects is a built-in COM component of the Windows operating system from the U.S. company Microsoft Microsoft. A code execution vulnerability exists in Microsoft Inbox COM Objects, which can be exploited by an attacker to execute arbitrary code on a system...
EUVD-2025-34317
Heap-based buffer overflow in Windows COM allows an authorized attacker to elevate privileges locally...
The vulnerability of Windows COM Server servers allows attackers to gain unauthorized access to protected information.
The vulnerability of Windows COM Server operating system servers is related to the use of uninitialized resources. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
CVE-2024-43509 Windows Graphics Component Elevation of Privilege Vulnerability
...
PT-2024-3520 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the use of memory after it has been freed in the Win32k component of Windows operating systems. This can allow an attacker to elevate their privileges. The estimated...
PT-2024-3519 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a buffer overflow in the Win32k component Win32k.sys of Windows operating systems, which can allow an attacker to elevate their privileges and access sensitive data...
VulnCheck KEV: CVE-2020-1375
An elevation of privilege vulnerability exists when Windows improperly handles COM object creation, aka 'Windows COM Server Elevation of Privilege Vulnerability'...
Vulnerability fixed in IBM Personal Communications
IBM has fixed a vulnerability in Personal Communications PCOMM. The vulnerability is located in an underlying Windows component and allows a malicious person to afford granted elevated privileges and execute code with privileges of SYSTEM. IBM has released updates to fix the vulnerability in...
PT-2023-6159 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient access control in the Win32k component of the Windows operating system, which can be exploited to elevate privileges. This allows an attacker to affect...
PT-2023-15939 · Caphyon · Caphyon Advanced Installer
Name of the Vulnerable Software and Affected Versions: Caphyon Advanced Installer version 19.7 Description: A critical vulnerability has been found in the WinSxS DLL Handler component of Caphyon Advanced Installer. The manipulation leads to an uncontrolled search path. Attacking locally is a...
The vulnerability of the Windows CDP component of the Windows operating system allows attackers to disclose sensitive information that is protected by this component.
The vulnerability of the Windows CDP component of the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information...
F5 BIG-IP Edge Client Windows Component Installer < 7.2.4.1 MITM (K000132522)
The version of the Big-IP Edge Client Windows Component Installer installed on the remote Windows host is before 7.2.4.1. In the pre connection stage, an improper enforcement of message integrity vulnerability exists in BIG-IP Edge Client for Windows. An unauthenticated attacker with a...
PT-2023-14188 · Wacom · Wacom Driver
Name of the Vulnerable Software and Affected Versions: Wacom Driver version 6.3.46-1 Description: The Wacom Driver for Windows contains an arbitrary file write issue via the Wacom Tablet.exe component. This allows for potential malicious activity. Recommendations: For Wacom Driver version 6.3.46-...
