Lucene search
+L

140 matches found

Vulnrichment
Vulnrichment
•added 2025/10/14 12:13 p.m.•12 views

CVE-2025-9437 Rockwell Automation ArmorStart® AOP Denial-of-Service Vulnerability

A security issue exists within the Studio 5000 Logix Designer add-on profile AOP for the ArmorStart Classic distributed motor controller, resulting in denial-of-service. This vulnerability is possible due to the input of invalid values into Component Object Model COM methods...

8.7CVSS5.8AI score0.00366EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/10/14 12:13 p.m.•31 views

CVE-2025-9437 Rockwell Automation ArmorStart® AOP Denial-of-Service Vulnerability

A security issue exists within the Studio 5000 Logix Designer add-on profile AOP for the ArmorStart Classic distributed motor controller, resulting in denial-of-service. This vulnerability is possible due to the input of invalid values into Component Object Model COM methods...

8.7CVSS0.00366EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/10/14 12:00 a.m.•24 views

Microsoft Inbox COM Objects Resource Management Vulnerability

Microsoft Inbox COM Objects is a built-in COM component of the Windows operating system from the U.S. company Microsoft Microsoft. A code execution vulnerability exists in Microsoft Inbox COM Objects, which can be exploited by an attacker to execute arbitrary code on a system...

7CVSS8.6AI score0.0035EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/10/14 12:00 a.m.•23 views

PT-2025-42067

Name of the Vulnerable Software and Affected Versions versions prior to 2025-58731 Description A use after free issue exists in Inbox COM Objects, potentially allowing an unauthorized attacker to execute code locally. Recommendations At the moment, there is no information about a newer version th...

7CVSS8.3AI score0.0035EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2025/10/14 12:00 a.m.•14 views

PT-2025-42061

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A heap-based buffer overflow exists in Windows COM. An authorized attacker with local access can exploit this flaw to elevate privileges. Successful exploitation could lead to code execution...

7CVSS8.2AI score0.00253EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/10/14 12:00 a.m.•15 views

PT-2025-42068

Name of the Vulnerable Software and Affected Versions versions prior to 2025 affected versions not specified Description A use-after-free issue exists in Inbox COM Objects. This allows an unauthorized attacker to execute code locally. Recommendations At the moment, there is no information about a...

7CVSS8AI score0.00474EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/10/14 12:00 a.m.•22 views

Microsoft Windows COM Security Vulnerabilities

Microsoft Windows COM is a technology for the purpose of reusing software from Microsoft Corporation USA.COM is described as a platform-independent, decentralized, object-oriented system for creating interactive binary software components. A security vulnerability exists in Microsoft Windows COM...

7CVSS7.7AI score0.00253EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•25 views

EUVD-2011-5253

Malware in sbrugna...

8.7CVSS6.4AI score0.01642EPSS
SaveExploits1References8
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•27 views

EUVD-2007-5625

Malware in sbrugna...

9.3CVSS6.3AI score0.0482EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/08/21 12:00 a.m.•18 views

PT-2025-34284 · America Online · Phobos.Dll +3

Name of the Vulnerable Software and Affected Versions: AOL versions prior to 9.6 Description: AOL versions up to and including 9.5 include an ActiveX control Phobos.dll that exposes a method called Import via the Phobos.Playlist COM object. This method is vulnerable to a stack-based buffer overfl...

8.4CVSS7.2AI score0.00597EPSS
SaveExploits1References11
Vulnrichment
Vulnrichment
•added 2025/08/20 3:39 p.m.•18 views

CVE-2011-10028 RealNetworks Arcade Games StubbyUtil.ProcessMgr ActiveX Arbitrary Code Execution

The RealNetworks RealArcade platform includes an ActiveX control InstallerDlg.dll, version 2.6.0.445 that exposes a method named Exec via the StubbyUtil.ProcessMgr COM object. This method allows remote attackers to execute arbitrary commands on a victim's Windows machine without proper validation...

8.7CVSS6.6AI score0.01642EPSS
SaveExploits1References7
Cvelist
Cvelist
•added 2025/08/20 3:39 p.m.•38 views

CVE-2011-10028 RealNetworks Arcade Games StubbyUtil.ProcessMgr ActiveX Arbitrary Code Execution

The RealNetworks RealArcade platform includes an ActiveX control InstallerDlg.dll, version 2.6.0.445 that exposes a method named Exec via the StubbyUtil.ProcessMgr COM object. This method allows remote attackers to execute arbitrary commands on a victim's Windows machine without proper validation...

8.7CVSS0.01642EPSS
SaveExploits1References7
CNNVD
CNNVD
•added 2025/06/04 12:00 a.m.•22 views

Razer Synapse 4 security vulnerabilities

Razer Synapse 4 is an application from the American company Razer, Inc. cloud-based unified hardware configuration tool. A security vulnerability exists in Razer Synapse 4 4.0.86.2502180127 and prior versions, which stems from a COM interface vulnerability that could lead to local elevation of...

7.8CVSS5.8AI score0.00133EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/05/30 12:00 a.m.•19 views

HCL Traveler code issue vulnerabilities

HCL Traveler is a software from HCL India. It is used to provide automatic, bi-directional, wireless synchronization between HCL Domino servers and wireless handheld devices. A security vulnerability exists in HCL Traveler for Microsoft Outlook that stems from vulnerability to COM hijacking attac...

9.8CVSS5.8AI score0.0027EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/05/22 3:54 p.m.•15 views

CVE-2020-1311

An elevation of privilege vulnerability exists when Component Object Model COM client uses special case IIDs, aka 'Component Object Model Elevation of Privilege Vulnerability'...

7.8CVSS7.2AI score0.03116EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2025/02/27 12:00 a.m.•24 views

Microsoft COM Privilege Escalation

The vulnerability of the Microsoft COM component in the Windows operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.8CVSS7.7AI score0.0061EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/02/26 12:00 a.m.•24 views

BeyondTrust Endpoint Privilege Management for Windows security vulnerabilities

BeyondTrust Endpoint Privilege Management for Windows is a complete endpoint privilege management solution from BeyondTrust USA. A security vulnerability exists in BeyondTrust Endpoint Privilege Management for Windows prior to version 25.2 that originates from a local authentication attacker who...

7.8CVSS6.5AI score0.00201EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2025/02/26 12:00 a.m.•22 views

Microsoft COM Server Disclosure

The vulnerability of the Microsoft COM Server component of the Windows operating system is related to the use of an uninitialized resource. Exploiting this vulnerability could allow an attacker to disclose sensitive information that is protected by security measures...

6.5CVSS7.6AI score0.00712EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2025/01/14 6:15 p.m.•8 views

CVE-2025-21288

Windows COM Server Information Disclosure Vulnerability...

6.5CVSS7.3AI score0.00712EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/01/14 12:00 a.m.•21 views

Microsoft Windows COM Security Vulnerabilities

Microsoft Windows COM is a technology for the purpose of reusing software from Microsoft Corporation USA.COM is described as a platform-independent, decentralized, object-oriented system for creating interactive binary software components. A security vulnerability exists in Microsoft Windows COM...

6.5CVSS8.6AI score0.00712EPSS
SaveExploits0References2
Rows per page
Query Builder