Lucene search
+L

313197 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•9 views

CVE-2026-83740: Use After Free

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...

7CVSS6.3AI score0.00279EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•9 views

CVE-2026-70127: Use After Free

Use after free in DNS Server allows an unauthorized attacker to execute code over a network...

8.1CVSS6.8AI score0.00818EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•13 views

CVE-2026-109160: URL Redirection to Untrusted Site

A vulnerability was determined in PublicCMS up to 5.202608.a. Affected by this issue is the function SafeConfigComponent.getSafeUrl of the file publiccms-core/src/main/java/com/publiccms/logic/component/config/SafeConfigComponent.java of the component pay Endpoint. Executing a manipulation of the...

5.3CVSS4.9AI score0.0025EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•13 views

PT-2026-111126

A vulnerability was detected in iMoonLab yolov13 up to 73289949533efac82bb5f72ec19b746618656bd2. Affected by this issue is the function eval of the file ultralytics/nn/autobackend.py of the component AutoBackend Model Loading. Performing a manipulation of the argument imgsz/names/kpt shape result...

5.3CVSS5.4AI score0.00138EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•11 views

Microsoft Windows: CVE-2026-96932: Windows Embedded Mode Service Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally...

7CVSS5.9AI score0.00214EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•12 views

CVE-2026-70248: NULL Pointer Dereference

Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally...

6.5CVSS5.7AI score0.00434EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•12 views

CVE-2026-83695: Use of Uninitialized Resource

Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally...

5.5CVSS5.7AI score0.00459EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•8 views

CVE-2026-88096: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows DCOM Server allows an authorized attacker to elevate privileges locally...

7CVSS5.9AI score0.00153EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•11 views

CVE-2026-62879: Missing Authentication for Critical Function

Missing authentication for critical function in Windows SmartScreen allows an authorized attacker to perform tampering locally...

5.5CVSS5.8AI score0.00343EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•10 views

CVE-2026-96108: Use After Free

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally...

7.8CVSS6.3AI score0.00299EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•12 views

CVE-2026-96928: Out-of-bounds Read

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally...

7.8CVSS5.9AI score0.00311EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•12 views

CVE-2026-70199: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally...

5.5CVSS5.7AI score0.00932EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•11 views

Microsoft Windows: CVE-2026-83659: Windows User Profile Service Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Windows User Profile Service allows an authorized attacker to elevate privileges locally...

7.8CVSS5.9AI score0.00333EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•10 views

CVE-2026-83659: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows User Profile Service allows an authorized attacker to elevate privileges locally...

7.8CVSS5.9AI score0.00333EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•10 views

Microsoft SQL Server: CVE-2026-88085: Microsoft SQL Server Elevation of Privilege Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally...

6.4CVSS6.1AI score0.00242EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•10 views

CVE-2026-69644: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of sensitive system information to an unauthorized control sphere in Windows iSCSI allows an authorized attacker to disclose information locally...

5.5CVSS5.7AI score0.00932EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•12 views

CVE-2026-83781: Improper Null Termination

Improper null termination in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00353EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•10 views

Microsoft Windows: CVE-2026-69880: Desktop Window Manager Elevation of Privilege Vulnerability

Access of resource using incompatible type 'type confusion' in Desktop Window Manager allows an authorized attacker to elevate privileges locally...

7.8CVSS5.9AI score0.0041EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•15 views

PT-2026-112601

Name of the Vulnerable Software and Affected Versions Windows Common Log File System Driver affected versions not specified Description A buffer over-read in the Windows Common Log File System Driver allows an authorized attacker to disclose sensitive information locally and affect the system. A...

5.5CVSS5.9AI score0.00892EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•10 views

Microsoft Windows: CVE-2026-83567: Windows NTFS Elevation of Privilege Vulnerability

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally...

7.8CVSS5.9AI score0.00379EPSS
SaveExploits0References2
Rows per page
Query Builder