Lucene search
+L

312695 matches found

Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•14 views

PT-2026-112353

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description An issue exists where improper neutralization of special elements used in an SQL command leads to SQL injection. This allows an authorized attacker to elevate privileges...

8.8CVSS6AI score0.01076EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•11 views

PT-2026-112813

Name of the Vulnerable Software and Affected Versions Windows Management Instrumentation affected versions not specified Description An out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose sensitive information locally and affect the system. An...

5.5CVSS5.7AI score0.00387EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•12 views

CVE-2026-70248: NULL Pointer Dereference

Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally...

6.5CVSS5.7AI score0.00434EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•12 views

PT-2026-112850

Name of the Vulnerable Software and Affected Versions Windows Clipboard User Service affected versions not specified Description A race condition occurs in the Windows Clipboard User Service due to improper synchronization when using a shared resource. This allows an authorized attacker to elevat...

7CVSS5.7AI score0.00186EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•13 views

PT-2026-112848

Buffer over-read in Windows StateRepository API allows an authorized attacker to disclose information locally...

5.5CVSS5.7AI score0.0044EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•10 views

PT-2026-112761

Name of the Vulnerable Software and Affected Versions Windows Sysmain Service affected versions not specified Description Exposure of sensitive system information to an unauthorized control sphere in the Windows Sysmain Service allows an authorized attacker to disclose information locally...

5.5CVSS5.7AI score0.0046EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•11 views

PT-2026-112907

Null pointer dereference in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

7CVSS5.7AI score0.00279EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•12 views

Microsoft Windows: CVE-2026-85332: Windows Device Association Service Elevation of Privilege Vulnerability

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

7.8CVSS6.3AI score0.00311EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•8 views

PT-2026-112824

Improper privilege management in Python allows an authorized attacker to elevate privileges locally...

7.8CVSS5.9AI score0.00301EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•10 views

Microsoft Windows: CVE-2026-83866: Windows Win32k Elevation of Privilege Vulnerability

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...

7CVSS6.3AI score0.00279EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•12 views

CVE-2026-83695: Use of Uninitialized Resource

Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally...

5.5CVSS5.7AI score0.00459EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•13 views

PT-2026-112646

Name of the Vulnerable Software and Affected Versions Windows Win32K affected versions not specified Description A use-after-free issue in Windows Win32K allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption flaw that occurs when an application continu...

7.8CVSS6.1AI score0.00379EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•9 views

CVE-2026-105731: Use of Uninitialized Resource

Use of uninitialized resource in Microsoft Graphics Component allows an authorized attacker to disclose information locally...

5.5CVSS5.6AI score0.00433EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•8 views

CVE-2026-88096: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows DCOM Server allows an authorized attacker to elevate privileges locally...

7CVSS5.9AI score0.00153EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•14 views

PT-2026-112227

Name of the Vulnerable Software and Affected Versions Windows Client for NFS affected versions not specified Description An integer overflow or wraparound occurs in the Windows Client for NFS, which allows an authorized attacker to elevate privileges locally and affect the system. An integer...

7.8CVSS5.8AI score0.00379EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•11 views

CVE-2026-62879: Missing Authentication for Critical Function

Missing authentication for critical function in Windows SmartScreen allows an authorized attacker to perform tampering locally...

5.5CVSS5.8AI score0.00343EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•11 views

PT-2026-113027

Name of the Vulnerable Software and Affected Versions Microsoft Windows Media Foundation affected versions not specified Description Deserialization of untrusted data in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally. Deserialization is the process ...

7.8CVSS5.7AI score0.02399EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•10 views

CVE-2026-96108: Use After Free

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally...

7.8CVSS6.3AI score0.00299EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•10 views

PT-2026-113045

Name of the Vulnerable Software and Affected Versions Microsoft.NETCore.App.Runtime.linux-arm versions 8.0.0 through 8.0.31 Microsoft.NETCore.App.Runtime.linux-arm64 versions 8.0.0 through 8.0.31 Microsoft.NETCore.App.Runtime.linux-musl-arm versions 8.0.0 through 8.0.31...

7.8CVSS5.9AI score0.00411EPSS
SaveExploits0References81
UbuntuCve
UbuntuCve
•added 2026/10/13 12:00 a.m.•10 views

CVE-2026-58280

Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network...

7.5CVSS5.9AI score0.0125EPSS
SaveExploits0References5
Rows per page
Query Builder