CVE-2026-27911: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows User Interface Core allows an authorized attacker to elevate privileges locally...

PT-2026-32773

CVE-2026-27911 Concurrent execution using shared resource with improper synchronization 'race condition' in Windows User Interface Core allows an authorized attacker to elevate pr… https://t.co/1EBHUgkLHF...

UacExploit

🛡️ UACExploit - Windows UAC Bypass Hidden This tool is a P...

CVE-2025-1789

Local privilege escalation in Genetec Update Service. An authenticated, low-privileged, Windows user could exploit this vulnerability to gain elevated privileges on the affected system...

CVE-2025-1789

Local privilege escalation in Genetec Update Service. An authenticated, low-privileged, Windows user could exploit this vulnerability to gain elevated privileges on the affected system...

CVE-2025-1789

Local privilege escalation in Genetec Update Service. An authenticated, low-privileged, Windows user could exploit this vulnerability to gain elevated privileges on the affected system...

CVE-2025-1789

CVE-2025-1789 affects the Genetec Update Service on Windows, enabling local privilege escalation. An authenticated, low-privileged user could exploit this to gain elevated privileges on the affected system. Related Red Hat advisories describe a potential path to privilege escalation and condition...

CVE-2025-1789

Local privilege escalation in Genetec Update Service. An authenticated, low-privileged, Windows user could exploit this vulnerability to gain elevated privileges on the affected system...

CVE-2025-1789

Local privilege escalation in Genetec Update Service. An authenticated, low-privileged, Windows user could exploit this vulnerability to gain elevated privileges on the affected system...

CVE-2025-1787

Local admin could to leak information from the Genetec Update Service configuration web page. An authenticated, admin privileged, Windows user could exploit this vulnerability to gain elevated privileges in the Genetec Update Service. Could be combined with CVE-2025-1789 to achieve low privilege...

CVE-2025-1790

CVE-2025-1790 describes a Local Privilege Escalation in the Genetec Sipelia Plugin. An authenticated low-priv Windows user could exploit this to gain elevated privileges on the affected system. CVSSv4.0: AV:L/AC:L/PR:L/UI:N/SI:H/SC:H/VC:H/VI:H/VN. Base score 8.8 (HIGH); Attack Vector LOCAL, Attac...

PT-2026-8012

Local privilege escalation in Genetec Sipelia Plugin. An authenticated low-privileged Windows user could exploit this vulnerability to gain elevated privileges on the affected system...

Microsoft Windows Tablet Windows User Interface (TWINUI) Subsystem Information Disclosure Vulnerability

Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. An information disclosure vulnerability exists in the Microsoft Windows Tablet Windows User Interface TWINUI Subsystem, which can be exploited by attackers to obtain sensitive...

CVE-2026-20827 Tablet Windows User Interface (TWINUI) Subsystem Information Disclosure Vulnerability

...

CVE-2026-20826: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Tablet Windows User Interface TWINUI Subsystem allows an authorized attacker to elevate privileges locally...

CVE-2026-20827: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of sensitive information to an unauthorized actor in Tablet Windows User Interface TWINUI Subsystem allows an authorized attacker to disclose information locally...

CVE-2023-29187

A Windows user with basic user authorization can exploit a DLL hijacking attack in SapSetup Software Installation Program - version 9.0, resulting in a privilege escalation running code as administrator of the very same Windows PC. A successful attack depends on various preconditions beyond the...

CVE-2025-64701

CVE-2025-64701 affects QualitySoft QND (Premium/Advance/Standard) versions 11.0.9i and earlier. The root cause is a privilege escalation vulnerability that could allow a user who can log in to a Windows system running the affected product to obtain administrator privileges, with potential access/...

CVE-2025-61940: Use of Client-Side Authentication

NMIS/BioDose V22.02 and previous versions rely on a common SQL Server user account to access data in the database. User access in the client application is restricted by a password authentication check in the client software but the underlying database connection always has access. The latest...

CVE-2025-11696

A local server-side request forgery SSRF security issue exists within Studio 5000® Simulation Interface™ via the API. This vulnerability allows any Windows user on the system to trigger outbound SMB requests, enabling the capture of NTLM hashes...