CVE-2026-15380: Improper Privilege Management

A non-administrator interactive user can obtain full SYSTEM code execution through a DCOM/task scheduler logic chain — no network access, no memory corruption required ITMS 8.7.3...

EUVD-2013-4768

Malware in sbrugna...

EUVD-2017-16322

Malware in sbrugna...

EUVD-2013-4770

Malware in sbrugna...

EUVD-2013-4769

Malware in sbrugna...

EUVD-2013-4767

Malware in sbrugna...

EUVD-2015-8591

Malware in sbrugna...

EUVD-2021-17525

Malware in sbrugna...

EUVD-2017-5538

Malware in sbrugna...

EUVD-2020-8067

Malware in sbrugna...

EUVD-2020-8066

Malware in sbrugna...

EUVD-2018-11311

Malware in sbrugna...

EUVD-2017-0654

Malware in sbrugna...

EUVD-2017-15921

Malware in sbrugna...

EUVD-2019-2632

Malware in sbrugna...

EUVD-2025-9126

Malicious code in bioql PyPI...

EUVD-2024-37757

Malicious code in bioql PyPI...

Exposing PathWiper: DCOM Abuse and Network Erasure

Exposing PathWiper: A Deep Dive into DCOM Abuse and Network Erasure With Trellix NDR By Maulik Maheta and Lishoy Mathew · August 12, 2025 Executive summary Ukraine’s national energy and telecommunications infrastructure was the primary targets of the PathWiper attack in 2025. The attack was...

CVE-2021-30605

Inappropriate implementation in the ChromeOS Readiness Tool installer on Windows prior to 1.0.2.0 loosens DCOM access rights on two objects allowing an attacker to potentially bypass discretionary access controls...

CVE-2002-2077

The DCOM client in Windows 2000 before SP3 does not properly clear memory before sending an "alter context" request, which may allow remote attackers to obtain sensitive information by sniffing the session...