CVE-2026-77827

Maono Link 3.8.13 MaonoAiServices Windows service allows local privilege escalation for a standard user account via improper write privileges in 'C:\ProgramData\Maono'. Fixed in 4.0.80...

EUVD-2026-74191

Maono Link 3.8.13 MaonoAiServices Windows service allows local privilege escalation for a standard user account via improper write privileges in 'C:\ProgramData\Maono'. Fixed in 4.0.80...

CVE-2026-77827

Maono Link version 3.8.13 contains a local privilege escalation vulnerability in its MaonoAiServices Windows service. The root cause is improper write permissions on C:\ProgramData\Maono, allowing a standard user to modify service files and escalate privileges. The CVSS 3.1 score is 7.1 (HIGH) an...

CVE-2026-73001

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69852

Remote Code Execution in Windows Routing and Remote Access Service RRAS allows attacker to gain an unauthorized access to victim's machine...

CVE-2026-69563

Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-73672

Remote Code Execution in Windows Routing and Remote Access Service RRAS allows attacker to gain an unauthorized access to victim's machine...

CVE-2026-69852

CVE-2026-69852 is a Remote Code Execution vulnerability in Windows Routing and Remote Access Service (RRAS) , allowing a network-based attacker with low privileges to gain unauthorized access to a victim's machine. The CVSS v3.1 score is 7.5 (HIGH) with the vector AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/...

EUVD-2026-73409

Out-of-bounds read in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information over a network...

CVE-2026-68876

Windows Program Compatibility Assistant Service is affected by a heap-based buffer overflow that allows an authorized attacker to elevate privileges over a network . The CVSS 3.1 score is 8.0 (HIGH) with vector AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H, indicating a network-based attack with low comple...

EUVD-2026-73039

Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally...

CVE-2026-69563

CVE-2026-69563 is a heap-based buffer overflow in the Windows Program Compatibility Assistant Service that allows an authorized attacker to achieve local privilege escalation . The vulnerability carries a CVSS 3.1 score of 7.0 (HIGH) , with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicat...

EUVD-2026-73011

Improper neutralization of special elements used in a command 'command injection' in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...

CVE-2025-27237

CVE-2025-27237 通过 OpenSSL 配置文件劫持实现 Zabbix Agent/Agent2 for Windows 的本地权限提升漏洞。 概述 字段| 值 ---|--- CVE ID| CVE-2025-27237 CVSS v4.0| 7.3 高 CWE| CWE-427: 不受控制的搜索路径元素 类型| 本地权限提升 供应商| Zabbix Zabbix Agent for Windows 从硬编码路径 C:\vcpkg... 加载 OpenSSL 配置，该路径可被低权限用户写入。攻击者可以放置恶意的 openssl.cnf，在 Zabbix Agent...

CVE-2026-78043

A flaw was found in OpenVPN. The Windows Interactive Service allows local authenticated users to bypass security restrictions and load unauthorized configuration files. By crafting special paths, an attacker can manipulate the service's configuration, potentially leading to privilege escalation...

CVE-2026-78221

A flaw was found in OpenVPN. An incorrect buffer size calculation within the Windows Interactive Service allows local authenticated users to trigger memory corruption or disclose sensitive information. This vulnerability can be exploited by providing specially crafted inputs...

CVE-2026-81830

A flaw was found in OpenVPN. The Windows interactive service in OpenVPN contains an incorrect file path validation vulnerability. A local authenticated user could exploit this flaw to bypass the trusted configuration directory constraint, leading to a security bypass and potential integrity...

CVE-2026-81830

The Windows interactive service in OpenVPN 2.4.0 through 2.6.22 allows local authenticated users to bypass the trusted configuration directory constraint via incorrect file path validation...

CVE-2026-78043

The Windows Interactive Service in OpenVPN 2.7alpha1 through 2.7.6 allows local authenticated users to bypass the trusted configuration directory constraint and load arbitrary configuration files via specially crafted paths...

CVE-2026-81830

OpenVPN versions 2.4.0 through 2.6.22 contain a vulnerability in the Windows interactive service caused by incorrect file path validation , allowing local authenticated users to bypass the trusted configuration directory constraint. The impact is primarily a security bypass with high integrity im...