4936 matches found
CVE-2026-26170
Improper input validation in Microsoft PowerShell allows an authorized attacker to elevate privileges locally...
CVE-2026-26163
Double free in Windows Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-26165
Use after free in Windows Shell allows an authorized attacker to elevate privileges locally...
CVE-2026-20806
Access of resource using incompatible type 'type confusion' in Windows COM allows an authorized attacker to disclose information locally...
Apache Airflow 安全漏洞
Apache Airflow is an open-source platform developed by the Apache Foundation in the United States. It allows for the creation, management, and monitoring of workflows. This platform features scalability and dynamic monitoring capabilities. There is a security vulnerability in Apache Airflow, whic...
CVE-2025-15565
The Nexi XPay plugin for WordPress is vulnerable to unauthorized modification of data due to missing authorization checks on the redirect function in all versions up to, and including, 8.3.0. This makes it possible for unauthenticated attackers to mark pending WooCommerce orders as paid/completed...
EUVD-2026-22645
Improper input validation in Windows Active Directory allows an authorized attacker to execute code over an adjacent network...
EUVD-2026-22603
Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information locally...
EUVD-2026-22619
Use after free in Windows Container Isolation FS Filter Driver allows an authorized attacker to elevate privileges locally...
EUVD-2026-22597
Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information locally...
EUVD-2026-22601
Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information locally...
EUVD-2026-22612
Use after free in Windows Server Update Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-22621
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...
EUVD-2026-22637
Untrusted pointer dereference in SQL Server allows an authorized attacker to execute code over a network...
EUVD-2026-22557
Use after free in Windows User Interface Core allows an authorized attacker to elevate privileges locally...
EUVD-2026-22560
Insufficiently protected credentials in Azure Logic Apps allows an authorized attacker to elevate privileges over a network...
EUVD-2026-22559
Improper input validation in Azure Monitor Agent allows an authorized attacker to elevate privileges locally...
EUVD-2026-22546
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Push Notifications allows an authorized attacker to elevate privileges locally...