Lucene search
+L

59504 matches found

Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•28 views

PT-2026-87015

Command Argument Injection Vulnerability in Cosminexus Component Container. This issue affects Cosminexus Component Container: from 11-70-01 before 11-70-03, from 11-60 before 11-60-03, from 11-50 through 11-50-03, from 11-40 through 11-40-03, from 11-30 through 11-30-08, from 11-20 before...

9.8CVSS5.7AI score0.00564EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•23 views

PT-2026-87493

Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...

7.8CVSS6AI score0.00333EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•22 views

PT-2026-87954

Name of the Vulnerable Software and Affected Versions Windows Imaging Component affected versions not specified Description A heap-based buffer overflow occurs in the Windows Imaging Component, which allows an unauthorized remote attacker to execute arbitrary code over a network and affect the...

8.8CVSS8.6AI score0.00819EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•20 views

PT-2026-88540

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An out of bounds read in the Media component allows a remote attacker to execute arbitrary code inside the sandbox by using a crafted HTML page. An out of bounds read occurs when a...

9.6CVSS7.4AI score0.00573EPSS
SaveExploits11References241
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•16 views

PT-2026-88642

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A use after free issue in Input allows a remote attacker to execute arbitrary code inside the sandbox by using a crafted HTML page. Use after free is a memory corruption flaw that occur...

9.6CVSS7.6AI score0.00573EPSS
SaveExploits11References241
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•19 views

PT-2026-88604

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A use after free issue in Core allows a remote attacker to execute arbitrary code outside the sandbox. This is achieved by leveraging social engineering and a crafted Chrome extension...

9.6CVSS7.5AI score0.00573EPSS
SaveExploits11References241
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•18 views

PT-2026-88607

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description UI misrepresentation in the Downloads component allows a remote attacker to spoof UI elements using a crafted HTML page through social engineering. Recommendations Update Google Chrome ...

9.6CVSS6.4AI score0.00573EPSS
SaveExploits11References241
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•19 views

PT-2026-88609

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Incorrect authorization in the Updater component on Windows allows a local attacker to execute arbitrary code outside the sandbox via a local program. Recommendations Update Google Chro...

9.6CVSS7.2AI score0.00573EPSS
SaveExploits11References241
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•25 views

PT-2026-88728

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A use after free issue exists in the Cast component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. An adjacent...

9.6CVSS7.1AI score0.00573EPSS
SaveExploits11References242
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•18 views

PT-2026-88736

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A type confusion issue exists in the XML processing of the browser. This allows a remote attacker to potentially execute arbitrary code within the sandbox by inducing the user to visit ...

9.6CVSS7.2AI score0.00573EPSS
SaveExploits9References241
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•16 views

PT-2026-88755

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Clickjacking in the Downloads component allows a remote attacker to spoof UI elements using a crafted HTML page through social engineering. Clickjacking is a technique where an attacker...

9.6CVSS6.4AI score0.00573EPSS
SaveExploits11References241
CVE
CVE
•added 2026/09/08 12:00 a.m.•21 views

CVE-2026-79576

The Digital-Infrastructure v9.6.7 software contains an improper authentication vulnerability within its Single-Sign On (SSO) component. This flaw allows an attacker to authenticate as any user, including the Admin , without providing a password. While a proof of concept (PoC) is indicated in the ...

9.8CVSS5.8AI score0.00483EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•20 views

CVE-2026-69713: Dependency on Vulnerable Third-Party Component

Dependency on vulnerable third-party component in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...

4.4CVSS5.7AI score0.00353EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•25 views

PT-2026-87610

Integer overflow or wraparound in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.00333EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•16 views

PT-2026-88137

Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...

7.8CVSS5.9AI score0.00333EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•10 views

CVE-2026-70296: Out-of-bounds Write

Out-of-bounds write in Windows Imaging Component allows an unauthorized attacker to execute code over a network...

9.8CVSS8.7AI score0.00974EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•32 views

PT-2026-87351

Name of the Vulnerable Software and Affected Versions Microsoft Windows Search Component affected versions not specified Description A use-after-free condition in the Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network. Use-after-free is a memory...

7.1CVSS6.1AI score0.0057EPSS
SaveExploits0References6
Redos
Redos
•added 2026/09/08 12:00 a.m.•16 views

ROS-20260908-73-0077

The vulnerability of the Password component in Google Chrome and Microsoft Edge relates to insufficient validation of entered data. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially crafted HTML page...

6.5CVSS6.8AI score0.00164EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•39 views

PT-2026-88096

Name of the Vulnerable Software and Affected Versions Microsoft Graphics Component affected versions not specified Description A heap-based buffer overflow in the Microsoft Graphics Component allows an unauthorized attacker to execute arbitrary code over a network, which can affect the system. A...

10CVSS8.5AI score0.00837EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•15 views

PT-2026-87915

Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network...

8.8CVSS8.5AI score0.00819EPSS
SaveExploits0References2
Rows per page
Query Builder