125 matches found
CVE-2026-113817
Heap-based buffer overflow in Windows Devices Human Interface allows an authorized attacker to elevate privileges with a physical attack...
CVE-2026-113817
A heap-based buffer overflow vulnerability exists in the Windows Devices Human Interface component. This flaw allows an authorized attacker to perform a physical attack to elevate privileges . No specific exploit details are provided in the documents. Remediation is available via official securit...
EUVD-2026-121942
Heap-based buffer overflow in Windows Devices Human Interface allows an authorized attacker to elevate privileges with a physical attack...
Windows Devices Human Interface Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Devices Human Interface allows an authorized attacker to elevate privileges with a physical attack...
PT-2026-143608
Heap-based buffer overflow in Windows Devices Human Interface allows an authorized attacker to elevate privileges with a physical attack...
Windows Devices Human Interface Elevation of Privilege Vulnerability
Integer overflow or wraparound in HID Parser Library allows an authorized attacker to elevate privileges locally...
EUVD-2026-72986
Use after free in Windows Devices Human Interface allows an authorized attacker to elevate privileges locally...
Windows Devices Human Interface Elevation of Privilege Vulnerability
Use after free in Windows Devices Human Interface allows an authorized attacker to elevate privileges locally...
CVE-2026-69472: Use After Free
Use after free in Windows Devices Human Interface allows an authorized attacker to elevate privileges locally...
EUVD-2026-43886
Integer overflow or wraparound in Windows Devices Human Interface allows an authorized attacker to disclose information locally...
CVE-2026-50310
Integer overflow or wraparound in Windows Devices Human Interface allows an authorized attacker to disclose information locally...
CVE-2026-50310: Integer Overflow or Wraparound
Integer overflow or wraparound in Windows Devices Human Interface allows an authorized attacker to disclose information locally...
PT-2026-58308
Integer overflow or wraparound in Windows Devices Human Interface allows an authorized attacker to disclose information locally...
CVE-2026-41220
Local privilege escalation due to improper input validation. The following products are affected: Acronis DeviceLock DLP Windows before build 9.0.93212, Acronis Cyber Protect Cloud Agent Windows before build 42183...
CVE-2025-63945
A privilege escalation PE vulnerability in the Tencent iOA app thru 210.9.28693.621001 on Windows devices enables a local user to execute programs with elevated privileges. However, execution requires that the local user is able to successfully exploit a race condition...
PT-2026-21541
Name of the Vulnerable Software and Affected Versions Tencent iOA versions through 210.9.28693.621001 Description A privilege escalation issue exists in the Tencent iOA app on Windows devices. A local user can execute programs with elevated privileges by exploiting a race condition. Recommendatio...
CVE-2025-63945
Tencent iOA versions through 210.9.28693.621001 on Windows devices are vulnerable to a privilege escalation (PE) flaw. The root cause is insecure handling of files and directories within C:\Windows\Temp by the LegacyKB_ioa_win.exe process. Because the TencentDownload directory can be created and ...
Konni Hackers Turn Google's Find Hub into a Remote Data-Wiping Weapon
The North Korea-affiliated threat actor known as Konni aka Earth Imp, Opal Sleet, Osmium, TA406, and Vedalia has been attributed to a new set of attacks targeting both Android and Windows devices for data theft and remote control. "Attackers impersonated psychological counselors and North Korean...
Stealit Malware Abuses Node.js Single Executable Feature via Game and VPN Installers
Cybersecurity researchers have disclosed details of an active malware campaign called Stealit that has leveraged Node.js' Single Executable Application SEA feature as a way to distribute its payloads. According to Fortinet FortiGuard Labs, select iterations have also employed the open-source...