Lucene search
+L

225964 matches found

Positive Technologies
Positive Technologies
•added 2026/08/11 12:00 a.m.•11 views

PT-2026-70426

Name of the Vulnerable Software and Affected Versions Windows Sensor Data Service affected versions not specified Description A heap-based buffer overflow in the Windows Sensor Data Service allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a...

7.8CVSS5.4AI score0.00333EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/08/11 12:00 a.m.•7 views

PT-2026-70431

Name of the Vulnerable Software and Affected Versions Windows GDI affected versions not specified Description An untrusted pointer dereference in Windows GDI allows an authorized attacker to disclose sensitive information locally. Recommendations At the moment, there is no information about a new...

5.5CVSS5AI score0.00404EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/08/11 12:00 a.m.•15 views

PT-2026-70696

Improper input validation in Power BI allows an authorized attacker to execute code over a network...

8.8CVSS5.4AI score0.00958EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/11 12:00 a.m.•15 views

PT-2026-70544

Name of the Vulnerable Software and Affected Versions Windows LDAP affected versions not specified Description A use after free issue in the Lightweight Directory Access Protocol LDAP allows an unauthorized attacker to execute arbitrary code over a network, potentially affecting the system...

8.8CVSS5.7AI score0.00819EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/08/11 12:00 a.m.•11 views

PT-2026-70027

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Application Server Java Adobe Document Service affected versions not specified Description The Adobe Document Service component uses outdated open source cryptographic and data transfer libraries. A low-privileged authenticated...

6.3CVSS5.2AI score0.00295EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/11 12:00 a.m.•1 views

CVE-2026-66301: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 on-premises allows an authorized attacker to disclose information over a network...

6.5CVSS5.7AI score0.00995EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/11 12:00 a.m.•9 views

PT-2026-70791

A Use‑After‑Free UAF vulnerability in the AMD Ryzen™ Master Utility Driver could allow a local attacker to access kernel memory, potentially resulting in loss of availability...

5.6CVSS5.2AI score0.00152EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/11 12:00 a.m.•12 views

PT-2026-70412

Name of the Vulnerable Software and Affected Versions Microsoft High Performance Computing HPC Pack affected versions not specified Description Execution with unnecessary privileges allows an authorized attacker to elevate privileges over a network. Recommendations At the moment, there is no...

8.8CVSS5.2AI score0.00913EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/08/11 12:00 a.m.•8 views

PT-2026-70596

Name of the Vulnerable Software and Affected Versions .NET affected versions not specified Description An uncaught exception in .NET allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no information about a newer version that contains a fix for th...

7.8CVSS5.3AI score0.00264EPSS
SaveExploits0References32
Positive Technologies
Positive Technologies
•added 2026/08/11 12:00 a.m.•11 views

PT-2026-70649

Improper neutralization of special elements used in a command 'command injection' in Microsoft Office allows an unauthorized attacker to execute code locally...

7.8CVSS5.3AI score0.00462EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/11 12:00 a.m.•10 views

PT-2026-70639

Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally...

7.8CVSS5.3AI score0.00466EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/11 12:00 a.m.•6 views

PT-2026-70644

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description An out-of-bounds read exists in Microsoft Office Word, which allows an unauthorized attacker to disclose sensitive information locally and affect the system. An out-of-bounds re...

5.5CVSS5AI score0.00541EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/11 12:00 a.m.•10 views

PT-2026-70656

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally...

7.8CVSS5.6AI score0.00466EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/11 12:00 a.m.•36 views

PT-2026-70558

Name of the Vulnerable Software and Affected Versions Active Directory Certificate Services affected versions not specified Description A use after free issue in Active Directory Certificate Services allows an authorized attacker to execute arbitrary code over a network, which can affect the...

8.8CVSS5.9AI score0.00913EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/08/11 12:00 a.m.•16 views

PT-2026-70575

Name of the Vulnerable Software and Affected Versions Windows DNS affected versions not specified Description A stack-based buffer overflow in Windows DNS allows an unauthorized attacker to execute arbitrary code over a network, which can affect the system. A stack-based buffer overflow occurs wh...

10CVSS6.4AI score0.00974EPSS
SaveExploits0References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/11 12:00 a.m.•0 views

CVE-2026-62914: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network...

7.3CVSS5.8AI score0.00446EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/11 12:00 a.m.•0 views

CVE-2026-65658: Deserialization of Untrusted Data

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

8.8CVSS6.1AI score0.02044EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/11 12:00 a.m.•0 views

CVE-2026-62818: Use After Free

Use after free in Active Directory Certificate Services AD CS allows an authorized attacker to execute code over a network...

8.8CVSS8.4AI score0.00913EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/11 12:00 a.m.•0 views

CVE-2026-66805: Deserialization of Untrusted Data

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

8.8CVSS6.1AI score0.02044EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/11 12:00 a.m.•0 views

CVE-2026-62725: Use After Free

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally...

7CVSS6.1AI score0.00264EPSS
SaveExploits0References3
Rows per page
Query Builder