Lucene search
+L

2999 matches found

Positive Technologies
Positive Technologies
added 2026/01/13 12:00 a.m.9 views

PT-2026-2760

Name of the Vulnerable Software and Affected Versions SharePoint Enterprise Server 2016 SharePoint Server 2019 SharePoint Server Subscription Edition Description Microsoft Office SharePoint contains a flaw involving the deserialization of untrusted data. Deserialization is the process of converti...

10CVSS6.4AI score0.31554EPSS
SaveExploits0References89
Positive Technologies
Positive Technologies
added 2026/01/13 12:00 a.m.3 views

PT-2026-2711

CVE-2026-20866 Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Management Services allows an authorized attacker to elevate pr… https://t.co/URu04Bnwnl...

7.8CVSS7AI score0.00299EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/01/13 12:00 a.m.8 views

PT-2026-2708

CVE-2026-20863 Double free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally. https://t.co/OJll1df465...

7CVSS7.1AI score0.0039EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/01/13 12:00 a.m.5 views

PT-2026-2724

Name of the Vulnerable Software and Affected Versions Windows SMB Server affected versions not specified Description A flaw in Windows SMB Server related to concurrent execution using a shared resource with improper synchronization, specifically a race condition, could allow an authorized attacke...

7.5CVSS6.5AI score0.00815EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/01/13 12:00 a.m.11 views

PT-2026-2696

CVE-2026-20849 Reliance on untrusted inputs in a security decision in Windows Kerberos allows an authorized attacker to elevate privileges over a network. https://t.co/YLkUwVtaPa...

7.5CVSS6.8AI score0.01011EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/01/13 12:00 a.m.9 views

PT-2026-2685

Name of the Vulnerable Software and Affected Versions Capability Access Management Service camsvc affected versions not specified Description An out-of-bounds read exists in the Capability Access Management Service camsvc. A local attacker who is authorized can exploit this to disclose informatio...

5.5CVSS5.8AI score0.00556EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/01/13 12:00 a.m.18 views

PT-2026-2681

Name of the Vulnerable Software and Affected Versions Windows Ancillary Function Driver for WinSock affected versions not specified Description A time-of-check time-of-use TOCTOU race condition exists in the Windows Ancillary Function Driver for WinSock. This condition allows a locally authorized...

7.8CVSS6.3AI score0.00306EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/01/13 12:00 a.m.8 views

PT-2026-2721

Name of the Vulnerable Software and Affected Versions Windows Virtualization-Based Security VBS Enclave affected versions not specified Description A heap-based buffer overflow exists within the Windows Virtualization-Based Security VBS Enclave component. This condition allows a locally authorize...

6.8CVSS7AI score0.00509EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/01/13 12:00 a.m.15 views

PT-2026-2683

Name of the Vulnerable Software and Affected Versions Windows Kerberos affected versions not specified Description The use of a broken or risky cryptographic algorithm in Windows Kerberos can allow an authorized attacker to disclose information locally. This issue allows attackers to obtain...

5.5CVSS6.1AI score0.00532EPSS
SaveExploits0References26
Positive Technologies
Positive Technologies
added 2026/01/13 12:00 a.m.12 views

PT-2026-2692

Name of the Vulnerable Software and Affected Versions Windows Routing and Remote Access Service RRAS affected versions not specified Description An issue with access control in Windows Routing and Remote Access Service RRAS could allow a local attacker to gain elevated privileges. The vulnerabili...

7.8CVSS6.4AI score0.03451EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/01/13 12:00 a.m.4 views

PT-2026-2715

CVE-2026-20870 Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally. https://t.co/fvnvcYOwh7...

7.8CVSS7.1AI score0.00467EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/01/09 12:39 p.m.12 views

CVE-2023-29111

The SAP AIF ODATA service - versions 755, 756, discloses more detailed information than is required. An authorized attacker can use the collected information possibly to exploit the component. As a result, an attacker can cause a low impact on the confidentiality of the application...

4.3CVSS6.6AI score0.00413EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 9:14 a.m.11 views

CVE-2022-42287

NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can upload and download arbitrary files under certain circumstances, which may lead to denial of service, escalation of privileges, information disclosure and data tampering...

7.8CVSS7.2AI score0.0022EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/07 11:15 p.m.24 views

CVE-2025-62224

User interface ui misrepresentation of critical information in Microsoft Edge for Android allows an authorized attacker to perform spoofing over a network...

5.5CVSS0.00277EPSS
SaveExploits0References1
OSV
OSV
added 2026/01/07 11:15 p.m.8 views

CVE-2025-62224

User interface ui misrepresentation of critical information in Microsoft Edge for Android allows an authorized attacker to perform spoofing over a network...

3.5CVSS5.8AI score0.00277EPSS
SaveExploits0References1
CVE
CVE
added 2026/01/07 10:54 p.m.34 views

CVE-2025-62224

CVE-2025-62224 affects Microsoft Edge for Android. The issue is a UI misrepresentation of critical information in the browser, enabling a network-based spoofing scenario by an authorized attacker. Documented impact is spoofing of the user interface with low to medium severity in various sources; ...

5.5CVSS6AI score0.00277EPSS
SaveExploits0References1Affected Software1
Microsoft CVE
Microsoft CVE
added 2026/01/07 8:00 a.m.60 views

Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability

User interface ui misrepresentation of critical information in Microsoft Edge for Android allows an authorized attacker to perform spoofing over a network...

5.5CVSS6.4AI score0.00277EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/01/07 12:00 a.m.13 views

PT-2026-1836

Name of the Vulnerable Software and Affected Versions Microsoft Edge for Android affected versions not specified Description The user interface in Microsoft Edge for Android exhibits a misrepresentation of critical information, potentially enabling an authorized attacker to conduct spoofing attac...

5.5CVSS6.1AI score0.00277EPSS
SaveExploits0References8
EUVD
EUVD
added 2025/12/18 10:02 p.m.10 views

EUVD-2025-204413

'.../...//' in Microsoft Purview allows an authorized attacker to execute code over a network...

7.2CVSS6.8AI score0.01026EPSS
SaveExploits0References2
Microsoft CVE
Microsoft CVE
added 2025/12/18 8:00 a.m.14 views

Microsoft Purview eDiscovery Remote Code Execution Vulnerability

'.../...//' in Microsoft Purview allows an authorized attacker to execute code over a network...

7.2CVSS7.3AI score0.01026EPSS
SaveExploits0
Rows per page
Query Builder