232742 matches found
Microsoft Remote Help Denial of Service Vulnerability
Uncontrolled search path element in Windows Remote Help allows an authorized attacker to deny service locally...
Moderate: Red Hat Security Advisory: OpenJDK 11.0.32.1 ELS Security Update for Windows Builds
An update is now available for OpenJDK. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References...
CVE-2026-41091-PoC-Exploit Full-PoCv2
āļø CVE-2026-41091 - RedSun SolarFlare - Microsoft Defender LPE Exploit Microsoft Defender Link Following Vulnerability - Local Privilege Escalation to NT AUTHORITY\SYSTEM The vulnerability is known as "RedSun" šÆ, "SolarFlare" is the name I gave to my exploit. ā š Overview This repository contains...
EUVD-2026-63111
In Splunk Enterprise for Windows versions below 10.4.2, 10.2.6, 10.0.9, 9.4.13, and 9.3.14, a local user with access to the Windows host could bind to the management port before Splunk Enterprise starts, intercept authentication tokens from child processes, and use those tokens to compromise all...
CVE-2026-55586: Improper Restriction of Operations within the Bounds of a Memory Buffer
SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, a crafted CHM file can supply malformed LZX Huffman code lengths to makedecodetable in ext/CHMLib/lzx.c. In the long-code branch, the function writes new internal nodes through nextsymbol before validating that the canonical...
CVE-2026-47827 - BOSH CLI Powershell Injection | Cloud Foundry
HIGH CVSSv4: High 7.7 CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVSSv3: High 7.5 CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Vendor CloudFoundry Foundation Versions Affected Severity is HIGH unless otherwise noted. BOSH CLI tool ā All versions v2.840.0 Description Command...
KLA91240 Multiple vulnerabilities in Microsoft Windows
Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, gain privileges, spoof user interface. Below is a complete list of vulnerabilities: 1. A spoofing vulnerability in Windows Remote...
CVE-2026-55015: Uncontrolled Search Path Element
Uncontrolled search path element in Windows Remote Help allows an authorized attacker to deny service locally...
CVE-2026-55013: Uncontrolled Search Path Element
Uncontrolled search path element in Windows Remote Help Defense allows an authorized attacker to perform spoofing locally...
PT-2026-79190
Uncontrolled search path element in Windows Remote Help allows an authorized attacker to deny service locally...
PT-2026-79189
Name of the Vulnerable Software and Affected Versions Windows Remote Help Defense affected versions not specified Description An uncontrolled search path element allows an authorized attacker to perform local spoofing. This occurs when the application searches for a file in a directory that can b...
CVE-2026-76259
In Splunk Enterprise for Windows versions below 10.4.2, 10.2.6, 10.0.9, 9.4.13, and 9.3.14, a local user with access to the Windows host could bind to the management port before Splunk Enterprise starts, intercept authentication tokens from child processes, and use those tokens to compromise all...
CVE-2026-76259 Improper Privilege Management on the Management Port in Splunk Enterprise for Windows
In Splunk Enterprise for Windows versions below 10.4.2, 10.2.6, 10.0.9, 9.4.13, and 9.3.14, a local user with access to the Windows host could bind to the management port before Splunk Enterprise starts, intercept authentication tokens from child processes, and use those tokens to compromise all...
CVE-2026-76259
On Windows, a low-privileged local user can bind to Splunk's management port before the service starts, intercept authentication tokens from child processes, and escalate privileges to compromise all data and system integrity accessible to the Splunk service account. No in-the-wild exploitation i...
CVE-2026-76259 Improper Privilege Management on the Management Port in Splunk Enterprise for Windows
In Splunk Enterprise for Windows versions below 10.4.2, 10.2.6, 10.0.9, 9.4.13, and 9.3.14, a local user with access to the Windows host could bind to the management port before Splunk Enterprise starts, intercept authentication tokens from child processes, and use those tokens to compromise all...
CVE-2026-69550
The Windows App for Mac information disclosure vulnerability (CVSS 6.5, MEDIUM) exposes sensitive data over the network; exploitation requires user interaction. No root cause, affected component, or remediation details are provided in the documents.
CVE-2026-69550 Windows App for Mac Information Disclosure Vulnerability
...
CVE-2026-69550 Windows App for Mac Information Disclosure Vulnerability
...