CVE-2020-1313

CVE-2020-1313 Resumen El servicio Windows Update Orchestrator Service es un servicio DCOM utilizado por otros componentes para instalar actualizaciones de Windows que ya se han descargado. USO era vulnerable a una elevación de privilegios de cualquier usuario a sistema local debido a una...

BadOutlook

Bad Outlook Un PoC simple que aprovecha la Interfaz de la Aplicación de Outlook Interfaz COM para ejecutar shellcode en un sistema basado en una línea de asunto de activación específica. Al utilizar el espacio de nombres Microsoft.Office.Interop.Outlook, los desarrolladores pueden representar tod...

CVE-2023-36874

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 Exigimos el regreso seguro de todos los ciudadanos que han sido tomados como rehenes por el grupo terrorista Hamás. No descansaremos hasta que cada rehén sea liberado y regrese a casa sano y salvo. Puedes ayudar a traerlos de vuelta a...

CVE-2017-0213

CVE-2017-0213: Windows COM 권한 상승 취약점 설명 작성자: Google Security Research CVE: 2017-0213 EDB-ID: 42020 참고 자료: Project-Zero Microsoft Exploit-Database 동영상: Youtube 영향받는 제품 제품| 버전| 업데이트| 빌드| 테스트됨 ---|---|---|---|--- Windows 10| 1511| | 10586| √ Windows 10| 1607| | 14393| √ Windows 10| 1703| | 15063| √...

OWN-Defender

OWN-Defender — Windows Security Center COM Research OWN-Defender is a Windows security research project focused on understanding how Windows Security Center WSC represents and manages antivirus security products through its COM interfaces. The project began as an investigation into the behavior...

CVE-2023-36874

CVE-2023-36874 Prueba de Concepto PoC Una implementación educativa y de investigación defensiva de la vulnerabilidad CVE-2023-36874 , que demuestra una falla de Escalada Local de Privilegios LPE dentro del componente Informe de Errores de Windows WER. ⚠️ Descargo de responsabilidad Este repositori...

Malwarebytes for Teams 安全漏洞

Malwarebytes for Teams is a multi-terminal protection suite from US-based Malwarebytes, Inc. A security vulnerability exists in Malwarebytes for Teams version 1.0.990 and earlier, which stems from a flaw in the COM interface that could lead to elevated privileges...

CVE-2021-43768

In Malwarebytes For Teams v.1.0.990 and before and fixed in v.1.0.1003 and later a privilege escalation can occur via the COM interface running in mbamservice.exe...

CVE-2021-43768: Improper Privilege Management

In Malwarebytes For Teams v.1.0.990 and before and fixed in v.1.0.1003 and later a privilege escalation can occur via the COM interface running in mbamservice.exe...

PT-2025-43621

Name of the Vulnerable Software and Affected Versions Malwarebytes For Teams versions prior to 1.0.1003 Description A privilege escalation can occur through the COM interface within the mbamservice.exe process. Recommendations Update Malwarebytes For Teams to version 1.0.1003 or later...

CVE-2021-43768

In Malwarebytes For Teams v.1.0.990 and before and fixed in v.1.0.1003 and later a privilege escalation can occur via the COM interface running in mbamservice.exe...

CVE-2021-43768

In Malwarebytes For Teams v.1.0.990 and before and fixed in v.1.0.1003 and later a privilege escalation can occur via the COM interface running in mbamservice.exe...

EUVD-2025-16873

Malicious code in bioql PyPI...

CVE-2025-27811

A local privilege escalation in the razerelevationservice.exe in Razer Synapse 4 through 4.0.86.2502180127 allows a local attacker to escalate their privileges via a vulnerable COM interface in the target service...

CVE-2025-27811

A local privilege escalation in the razerelevationservice.exe in Razer Synapse 4 through 4.0.86.2502180127 allows a local attacker to escalate their privileges via a vulnerable COM interface in the target service...

CVE-2025-27811

A local privilege escalation in the razerelevationservice.exe in Razer Synapse 4 through 4.0.86.2502180127 allows a local attacker to escalate their privileges via a vulnerable COM interface in the target service...

CVE-2025-27811

A local privilege escalation in the razerelevationservice.exe in Razer Synapse 4 through 4.0.86.2502180127 allows a local attacker to escalate their privileges via a vulnerable COM interface in the target service...

CVE-2025-27811: Improper Privilege Management

A local privilege escalation in the razerelevationservice.exe in Razer Synapse 4 through 4.0.86.2502180127 allows a local attacker to escalate their privileges via a vulnerable COM interface in the target service...

CVE-2025-27811

A local privilege escalation in the razerelevationservice.exe in Razer Synapse 4 through 4.0.86.2502180127 allows a local attacker to escalate their privileges via a vulnerable COM interface in the target service...

PT-2025-23806 · Razer · Razer Synapse

Name of the Vulnerable Software and Affected Versions: Razer Synapse versions 4 through 4.0.86.2502180127 Description: A local privilege escalation issue in the razer elevation service.exe allows a local attacker to escalate their privileges via a vulnerable COM interface in the target service...