Lucene search
+L

311342 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•7 views

CVE-2026-70295: Out-of-bounds Read

Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...

5.5CVSS5.6AI score0.00459EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•9 views

CVE-2026-109526: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability has been found in HBAI-Ltd Toonflow-app up to 1.1.8. This affects an unknown function of the component exportData Endpoint. Such manipulation leads to information disclosure. An attack has to be approached locally. The exploit has been disclosed to the public and may be used...

4.8CVSS4.3AI score0.00103EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•10 views

CVE-2026-96852: Use After Free

Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally...

7CVSS6.2AI score0.00279EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•10 views

CVE-2026-70149: Heap-based Buffer Overflow

Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver csc.sys allows an authorized attacker to disclose information locally...

8.8CVSS5.7AI score0.00928EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•10 views

CVE-2026-85320: Use of Uninitialized Resource

Use of uninitialized resource in Windows Print Spooler Components allows an authorized attacker to disclose information locally...

5.5CVSS5.7AI score0.00298EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•6 views

CVE-2026-87695: Inclusion of Functionality from Untrusted Control Sphere

Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.00292EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•10 views

CVE-2026-96323: Use After Free

Use after free in Windows Update allows an authorized attacker to elevate privileges locally...

7CVSS6.2AI score0.00279EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•11 views

CVE-2026-96217: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally...

7.8CVSS6.1AI score0.00311EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•13 views

CVE-2026-102202: Improper Link Resolution Before File Access

Improper access control in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.00406EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•13 views

PT-2026-111164

A vulnerability has been found in code-projects Online Reviewer System 1.0. This vulnerability affects unknown code of the file /reviewer/system/system/admins/manage/users/btn functions.php of the component User Profile Update Handler. The manipulation of the argument usertype id leads to...

5.5CVSS5.4AI score0.00328EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•8 views

PT-2026-113240

Name of the Vulnerable Software and Affected Versions OpenSSH for Windows affected versions not specified Description A double free issue exists that allows an authorized attacker to elevate privileges locally. A double free occurs when the program attempts to free the same memory location twice,...

7.8CVSS6.2AI score0.00291EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•14 views

PT-2026-113117

Untrusted pointer dereference in Microsoft Windows Search Component allows an authorized attacker to disclose information locally...

5.5CVSS5.5AI score0.0044EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•10 views

Microsoft Windows: CVE-2026-96215: Windows Autopilot Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Autopilot allows an authorized attacker to elevate privileges locally...

7CVSS5.8AI score0.00188EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•11 views

PT-2026-113028

External control of system or configuration setting in Microsoft PowerToys allows an authorized attacker to elevate privileges locally...

7.3CVSS5.7AI score0.00376EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•11 views

Microsoft Windows: CVE-2026-70059: Windows OLE Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally...

7.8CVSS6.1AI score0.00379EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•13 views

PT-2026-112632

Name of the Vulnerable Software and Affected Versions Windows Push Notifications affected versions not specified Description A heap-based buffer overflow exists in Windows Push Notifications. This issue allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occu...

7.8CVSS6.1AI score0.0041EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•10 views

Microsoft Windows: CVE-2026-96313: Windows Push Notifications Elevation of Privilege Vulnerability

Missing authentication for critical function in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

7CVSS5.7AI score0.0022EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•9 views

Microsoft Windows: CVE-2026-69952: Windows Overlay Filter Elevation of Privilege Vulnerability

Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.00379EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•9 views

PT-2026-112234

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description A heap-based buffer overflow occurs in the Windows Kernel, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory corruption issue...

7.8CVSS6.1AI score0.00379EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•13 views

CVE-2026-103567: Buffer Over-read

Buffer over-read in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally...

5.5CVSS5.6AI score0.0044EPSS
SaveExploits0References3
Rows per page
Query Builder