Lucene search
+L

313141 matches found

Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•12 views

PT-2026-112199

Name of the Vulnerable Software and Affected Versions Windows DNS affected versions not specified Description An out-of-bounds read exists in Windows DNS, which allows an authorized attacker to disclose sensitive information locally. Recommendations At the moment, there is no information about a...

5.5CVSS5.7AI score0.00459EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•11 views

PT-2026-112640

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description An out-of-bounds read in the HID Parser Library allows an authorized attacker to disclose information locally. An out-of-bounds read occurs when the software reads data past the end of the...

5.5CVSS5.7AI score0.0036EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•16 views

PT-2026-112646

Name of the Vulnerable Software and Affected Versions Windows Win32K affected versions not specified Description A use-after-free issue in Windows Win32K allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption flaw that occurs when an application continu...

7.8CVSS6.1AI score0.00379EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•26 views

Microsoft Windows: CVE-2026-83666: Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Active Directory Certificate Services AD CS allows an authorized attacker to elevate privileges locally...

7CVSS5.9AI score0.00221EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•12 views

CVE-2026-83715: Missing Authentication for Critical Function

Missing authentication for critical function in Windows Error Reporting allows an authorized attacker to perform tampering locally...

7.1CVSS5.9AI score0.0032EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•14 views

PT-2026-112285

Improper resolution of path equivalence in Windows Backup Engine allows an authorized attacker to elevate privileges locally...

7.8CVSS5.9AI score0.00421EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•14 views

PT-2026-112837

Name of the Vulnerable Software and Affected Versions Windows 11 Version 24H2 Windows 11 Version 25H2 Windows 11 version 26H1 Windows 11 Version 26H2 Description Missing authentication for a critical function in the Windows Health and Optimized Experiences Service allows an authorized attacker to...

7.8CVSS6.2AI score0.00437EPSS
SaveExploits1References10
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•13 views

PT-2026-112322

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description An issue exists where sensitive system information is exposed to an unauthorized control sphere, allowing an authorized attacker to disclose information locally. Recommendations At the...

5.5CVSS5.7AI score0.00932EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•22 views

PT-2026-113548

Name of the Vulnerable Software and Affected Versions OpenVPN ovpn-dco-win versions 0.6.5 through 1.3.5 OpenVPN ovpn-dco-win versions 2.4.0 through 2.8.7 Description Improper synchronization in the Windows component allows local attackers to trigger a deadlock by performing a crafted write to the...

6.9CVSS5.7AI score0.00113EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•12 views

PT-2026-112481

Name of the Vulnerable Software and Affected Versions Windows Installer affected versions not specified Description An integer underflow wrap or wraparound occurs, which allows an authorized attacker to elevate privileges locally and affect the system. Integer underflow is a condition where a...

7CVSS5.8AI score0.00279EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•10 views

PT-2026-112885

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

7.8CVSS6.3AI score0.00303EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•16 views

PT-2026-112431

Name of the Vulnerable Software and Affected Versions Windows Audio Service affected versions not specified Description A null pointer dereference in the Windows Audio Service allows an authorized attacker to disclose sensitive information locally and affect the system. A null pointer dereference...

5.5CVSS5.4AI score0.00459EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•15 views

PT-2026-111408

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-432BRP version 3.10B20 Description A stack-based buffer overflow occurs when manipulating the Name argument within the formTcpipSetup function located in the /goform/formTcpipSetup file. This issue allows a remote attacker to...

9.9CVSS8.8AI score0.00593EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•14 views

PT-2026-112141

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

7.5CVSS6.8AI score0.00631EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•10 views

CVE-2026-83644: Use After Free

Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally...

7CVSS6.3AI score0.00279EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•11 views

Microsoft Windows: CVE-2026-85909: Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability

Out-of-bounds read in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to disclose information locally...

5.5CVSS5.7AI score0.0044EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•8 views

CVE-2026-96302: Use After Free

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

7CVSS6.3AI score0.00246EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•16 views

CVE-2026-96843: Heap-based Buffer Overflow

Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally...

7.8CVSS6.2AI score0.00353EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•8 views

CVE-2026-97811: Double Free

Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally...

7.8CVSS6AI score0.00291EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•12 views

CVE-2026-70083: Incorrect Authorization

Incorrect authorization in DNS Server allows an authorized attacker to perform tampering locally...

5.5CVSS5.8AI score0.0032EPSS
SaveExploits0References3
Rows per page
Query Builder