Microsoft Windows Search Component Elevation of Privilege Vulnerability

Integer overflow or wraparound in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

Windows Broadcast DVR User Service Elevation of Privilege Vulnerability

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...

Windows DNS Server Remote Code Execution Vulnerability

Use after free in Windows DNS allows an authorized attacker to execute code over a network...

Windows Devices Human Interface Elevation of Privilege Vulnerability

Use after free in Windows Devices Human Interface allows an authorized attacker to elevate privileges locally...

Windows NTFS Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally...

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...

Remote Desktop Licensing Service Elevation of Privilege Vulnerability

Use after free in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges over a network...

Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability

Missing authorization in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...

Windows Fast FAT Driver Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally...

Windows NTFS Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally...

Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...

CVE-2025-33073

CVE-2025-33073 — Windows SMB Client NTLM Reflection EoP Research writeup by Sentinel AI Defense. Defensive analysis only — no working exploit or PoC is published here. An improper access control flaw in the Windows SMB Client that revives NTLM reflection techniques thought to be mitigated — letti...

EUVD-2026-72759

XenForo before 2.3.13 contains a path traversal vulnerability in the style archive importer on Windows deployments that allows authenticated non-super administrators with style permissions to write arbitrary files outside the intended extraction directory by using backslash-based traversal...

CVE-2026-74239

XenForo before 2.3.13 is affected by a path traversal vulnerability in the style archive importer on Windows deployments. Authenticated non-super administrators with style permissions can exploit backslash-based traversal sequences in ZIP member names to bypass forward-slash validation, writing a...

CVE-2026-74239 XenForo < 2.3.13 Path Traversal via Style Archive Importer on Windows

XenForo before 2.3.13 contains a path traversal vulnerability in the style archive importer on Windows deployments that allows authenticated non-super administrators with style permissions to write arbitrary files outside the intended extraction directory by using backslash-based traversal...

CVE-2026-74239 XenForo < 2.3.13 Path Traversal via Style Archive Importer on Windows

XenForo before 2.3.13 contains a path traversal vulnerability in the style archive importer on Windows deployments that allows authenticated non-super administrators with style permissions to write arbitrary files outside the intended extraction directory by using backslash-based traversal...

CVE-2023-21768-DSE-Bypass

Forked This project was forked from: WindowsLPEAFDCVE-2023-21768 . Updates This project is updated from chompie1337 exploit and will disable DSE, load an unsigned driver and enable DSE...

Citrix Workspace app for Windows Security Bulletin CVE-2026-78546 and CVE-2026-78547

Severity - Medium Description of Problem Two vulnerabilities have been discovered that impact the Citrix Workspace app for Windows. Affected Versions The vulnerabilities affect the following supported versions of the Citrix Workspace app for Windows. Current Release CR Citrix Workspace app for...

eternalblue-ms17-010-research

💀 EternalBlue MS17-010 Exploitation Research Controlled reproduction of CVE-2017-0144 — the SMB vulnerability behind the WannaCry ransomware outbreak ⚠️ Disclaimer: This research was conducted in a fully isolated, controlled lab environment for academic and educational purposes only. No production...

CVE-2024-37726-MSI-Center-Local-Privilege-Escalation

CVE-2024-37726 Escalada de Privilegios Local en MSI Center – Vulnerabilidad de Sobrescritura Arbitraria de Archivos Resumen de la Vulnerabilidad Se ha identificado una vulnerabilidad de escalada de privilegios local en sistemas Windows en versiones de MSI Center = 2.0.36.0, que permite a un usuar...