197 matches found
CVE-2026-58598
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Backup Engine allows an authorized attacker to elevate privileges locally...
Windows Backup Service Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Backup Engine allows an authorized attacker to elevate privileges locally...
CVE-2026-50406
Use after free in Windows Backup Engine allows an authorized attacker to elevate privileges locally...
CVE-2026-50406 Windows Backup Engine Elevation of Privilege Vulnerability
...
CVE-2026-50406
CVE-2026-50406 affects Windows Backup Engine with a use-after-free vulnerability that enables a locally authenticated attacker to elevate privileges. Connected sources confirm the issue exists in Windows Backup Engine and describe local privilege escalation as the impact, with Microsoft issuing u...
CVE-2026-50406 Windows Backup Engine Elevation of Privilege Vulnerability
...
Windows Backup Engine Elevation of Privilege Vulnerability
Use after free in Windows Backup Engine allows an authorized attacker to elevate privileges locally...
PT-2026-60596
Name of the Vulnerable Software and Affected Versions Windows Backup Engine affected versions not specified Description A race condition occurs in the Windows Backup Engine due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate privileges local...
PT-2026-58385
Name of the Vulnerable Software and Affected Versions Windows Backup Engine affected versions not specified Description A use-after-free condition in the Windows Backup Engine allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when...
Directory Traversal
Overview Affected versions of this package are vulnerable to Directory Traversal via the fullPath function in the builtinbackupengine.go file. An attacker can write files to arbitrary locations on the file system by manipulating backup manifest files if they have read/write access to the backup...
Directory Traversal
Overview Affected versions of this package are vulnerable to Directory Traversal via the fullPath function in the builtinbackupengine.go file. An attacker can write files to arbitrary locations on the file system by manipulating backup manifest files if they have read/write access to the backup...
EUVD-2020-12425
Malware in sbrugna...
EUVD-2020-12416
Malware in sbrugna...
EUVD-2020-12418
Malware in sbrugna...
EUVD-2021-10995
Malware in sbrugna...
EUVD-2020-12420
Malware in sbrugna...
EUVD-2020-12419
Malware in sbrugna...
EUVD-2020-8918
Malware in sbrugna...