Lucene search
+L

2999 matches found

Positive Technologies
Positive Technologies
added 2026/05/12 12:00 a.m.21 views

PT-2026-40230

Improper access control in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally...

8.8CVSS5.8AI score0.00212EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/05/12 12:00 a.m.20 views

PT-2026-40180

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally...

5.5CVSS5.8AI score0.00374EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/05/12 12:00 a.m.18 views

PT-2026-40258

Name of the Vulnerable Software and Affected Versions Microsoft Dynamics 365 on-premises affected versions not specified Description Execution with unnecessary privileges allows an authorized attacker to execute code over a network. Recommendations At the moment, there is no information about a...

9.1CVSS6.2AI score0.00748EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/05/12 12:00 a.m.15 views

PT-2026-40148

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description A heap-based buffer overflow in the Windows Kernel allows an authorized local attacker to elevate their privileges to administrative levels. A heap-based buffer overflow occurs when a...

7.8CVSS6AI score0.0031EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2026/05/12 12:00 a.m.22 views

PT-2026-39990

A vulnerability has been identified in blueplanet 100 NX3 M8 All versions, blueplanet 100 TL3 GEN2 All versions, blueplanet 105 TL3 All versions, blueplanet 105 TL3 GEN2 All versions, blueplanet 110 TL3 All versions, blueplanet 125 NX3 M11 All versions, blueplanet 125 TL3 All versions, blueplanet...

6CVSS5.8AI score0.00155EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/05/12 12:00 a.m.17 views

PT-2026-40177

Name of the Vulnerable Software and Affected Versions Windows Ancillary Function Driver for WinSock affected versions not specified Description A use after free issue in the Windows Ancillary Function Driver for WinSock AFD.sys allows an authorized attacker to elevate privileges locally. A use...

7CVSS6AI score0.01647EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2026/05/12 12:00 a.m.13 views

PT-2026-40143

Name of the Vulnerable Software and Affected Versions Windows Cloud Files Mini Filter Driver affected versions not specified Description A use after free issue in the Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. Use after free is a memory...

7.8CVSS5.7AI score0.02117EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/05/12 12:00 a.m.17 views

PT-2026-40165

Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...

7CVSS5.8AI score0.00261EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/05/12 12:00 a.m.14 views

PT-2026-40156

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00163EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/05/12 12:00 a.m.15 views

PT-2026-40157

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00249EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/05/12 12:00 a.m.17 views

PT-2026-40236

Use after free in Data Deduplication allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00332EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/05/12 12:00 a.m.16 views

PT-2026-40144

Name of the Vulnerable Software and Affected Versions Windows TCP/IP affected versions not specified Description A heap-based buffer overflow in the tcpip.sys driver allows an authorized low-privilege attacker to perform a local privilege escalation to the kernel level. A heap-based buffer overfl...

7.8CVSS6AI score0.01838EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/05/12 12:00 a.m.18 views

PT-2026-40153

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A use after free issue in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs when an application continu...

7.8CVSS6.1AI score0.00298EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/05/12 12:00 a.m.15 views

PT-2026-40112

Name of the Vulnerable Software and Affected Versions Windows Rich Text Edit affected versions not specified Description A double free issue in Windows Rich Text Edit allows an authorized attacker to elevate privileges locally. A double free occurs when a program attempts to free the same memory...

6.7CVSS5.8AI score0.00319EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/05/12 12:00 a.m.24 views

PT-2026-40145

Name of the Vulnerable Software and Affected Versions Windows Message Queuing affected versions not specified Description A double free issue in Windows Message Queuing allows an authorized attacker to elevate privileges locally. A double free occurs when a program attempts to free the same memor...

7.8CVSS7.1AI score0.00398EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/05/12 12:00 a.m.20 views

PT-2026-40204

Name of the Vulnerable Software and Affected Versions Windows 11 versions 24H2 through 25H2 Description A heap-based buffer overflow and untrusted pointer dereference in the Windows Kernel ntoskrnl.exe allows an authorized attacker to elevate privileges locally to SYSTEM level. The issue exists...

7.8CVSS6.1AI score0.04725EPSS
SaveExploits4References48
Positive Technologies
Positive Technologies
added 2026/05/12 12:00 a.m.18 views

PT-2026-40192

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

8.8CVSS6AI score0.01698EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/05/09 8:21 a.m.19 views

CVE-2026-41105

Server-side request forgery ssrf in Azure Notification Service allows an authorized attacker to elevate privileges over a network...

8.1CVSS5.8AI score0.00827EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/05/09 2:21 a.m.15 views

CVE-2026-33844

Improper access control in Azure Managed Instance for Apache Cassandra allows an authorized attacker to execute code over a network...

9CVSS6.2AI score0.00988EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/05/08 12:31 a.m.23 views

EUVD-2026-28457

Server-side request forgery ssrf in Azure Notification Service allows an authorized attacker to elevate privileges over a network...

8.1CVSS5.8AI score0.00827EPSS
SaveExploits0References2
Rows per page
Query Builder