223544 matches found
Microsoft Remote Help Denial of Service Vulnerability
Uncontrolled search path element in Windows Remote Help allows an authorized attacker to deny service locally...
Moderate: Red Hat Security Advisory: OpenJDK 11.0.32.1 ELS Security Update for Windows Builds
An update is now available for OpenJDK. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References...
CVE-2026-41091-PoC-Exploit Full-PoCv2
☀️ CVE-2026-41091 - RedSun SolarFlare - Microsoft Defender LPE Exploit Microsoft Defender Link Following Vulnerability - Local Privilege Escalation to NT AUTHORITY\SYSTEM The vulnerability is known as "RedSun" 🎯, "SolarFlare" is the name I gave to my exploit. ✅ 📌 Overview This repository contains...
EUVD-2026-63111
In Splunk Enterprise for Windows versions below 10.4.2, 10.2.6, 10.0.9, 9.4.13, and 9.3.14, a local user with access to the Windows host could bind to the management port before Splunk Enterprise starts, intercept authentication tokens from child processes, and use those tokens to compromise all...
CVE-2026-47827 - BOSH CLI Powershell Injection | Cloud Foundry
HIGH CVSSv4: High 7.7 CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVSSv3: High 7.5 CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Vendor CloudFoundry Foundation Versions Affected Severity is HIGH unless otherwise noted. BOSH CLI tool – All versions v2.840.0 Description Command...
PT-2026-79190
Uncontrolled search path element in Windows Remote Help allows an authorized attacker to deny service locally...
PT-2026-79189
Name of the Vulnerable Software and Affected Versions Windows Remote Help Defense affected versions not specified Description An uncontrolled search path element allows an authorized attacker to perform local spoofing. This occurs when the application searches for a file in a directory that can b...
CVE-2026-76259
In Splunk Enterprise for Windows versions below 10.4.2, 10.2.6, 10.0.9, 9.4.13, and 9.3.14, a local user with access to the Windows host could bind to the management port before Splunk Enterprise starts, intercept authentication tokens from child processes, and use those tokens to compromise all...
CVE-2026-76259
On Windows, a low-privileged local user can bind to Splunk's management port before the service starts, intercept authentication tokens from child processes, and escalate privileges to compromise all data and system integrity accessible to the Splunk service account. No in-the-wild exploitation i...
CVE-2026-76259 Improper Privilege Management on the Management Port in Splunk Enterprise for Windows
In Splunk Enterprise for Windows versions below 10.4.2, 10.2.6, 10.0.9, 9.4.13, and 9.3.14, a local user with access to the Windows host could bind to the management port before Splunk Enterprise starts, intercept authentication tokens from child processes, and use those tokens to compromise all...
CVE-2026-69550
The Windows App for Mac information disclosure vulnerability (CVSS 6.5, MEDIUM) exposes sensitive data over the network; exploitation requires user interaction. No root cause, affected component, or remediation details are provided in the documents.
CVE-2026-69550 Windows App for Mac Information Disclosure Vulnerability
...
CVE-2026-69550 Windows App for Mac Information Disclosure Vulnerability
...
CVE-2026-62727
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Telephony Service allows an authorized attacker to elevate privileges locally...
CVE-2026-62727
A race condition in Windows Telephony Service allows a locally authenticated low-privilege attacker to elevate privileges to SYSTEM. CVSS 3.1 base score 7.0 (HIGH). Microsoft has published an update guide; apply the patch from the MSRC link. No exploitation details or in-the-wild activity are pro...
CVE-2026-62727 Windows Telephony Service Elevation of Privilege Vulnerability
...
EUVD-2026-63093
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Telephony Service allows an authorized attacker to elevate privileges locally...
CVE-2026-62727 Windows Telephony Service Elevation of Privilege Vulnerability
...
CVE-2026-22306
Download of code without integrity check, inclusion of functionality from untrusted control sphere, and cleartext transmission of sensitive information vulnerability in Ozols Grupa OZOLS on Windows caused by an abandoned auto-update domain. Affected component: the automatic update channel...
Moderate: Red Hat Security Advisory: OpenJDK 21.0.12.1 Security Update for Windows Builds
An update is now available for OpenJDK. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References...