Windows biometric service Privilege Escalation

The vulnerability of the biometric service in Windows operating systems lies in the fact that the operation occurs outside the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

Windows biometric service Privilege Escalation

The vulnerability of the Biometric Service in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

Windows biometric service Privilege Escalation

The vulnerability of the biometric service in Windows operating systems lies in the fact that the operation occurs outside the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

CVE-2026-96940

Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-96940

A weak authorization vulnerability in Microsoft Exchange Server allows an authenticated attacker to elevate privileges over a network. The vulnerability is confirmed and is addressed in several security updates, including KB5129955 (Subscription Edition RTM), KB5129956 (2019 CU15), KB5129957 (201...

EUVD-2026-91771

Weak authorization in Microsoft Exchange Server allows an authenticated attacker to elevate privileges over a network...

Microsoft Exchange Server Elevation of Privilege Vulnerability

Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...

BIT-DOTNET-SDK-2026-69806 .NET Elevation of Privilege Vulnerability

Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally...

BIT-DOTNET-SDK-2026-69439 .NET and Visual Studio Elevation of Privilege Vulnerability

Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network...

BIT-DOTNET-2026-69806 .NET Elevation of Privilege Vulnerability

Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally...

BIT-DOTNET-2026-69439 .NET and Visual Studio Elevation of Privilege Vulnerability

Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network...

CLEANSTART-2025-KL68323 .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

CVE-2024-38081 affects multiple packages. . See references for individual vulnerability details...

CLEANSTART-2025-FE50155 .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

CVE-2023-36049 affects multiple packages. . See references for individual vulnerability details...

CLEANSTART-2025-CJ80565 .NET and Visual Studio Elevation of Privilege Vulnerability

CVE-2023-33127 affects multiple packages. . See references for individual vulnerability details...

CLEANSTART-2025-UN98061 .NET and Visual Studio Elevation of Privilege Vulnerability

CVE-2023-33135 affects multiple packages. . See references for individual vulnerability details...

CLEANSTART-2025-YT42568 .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

CVE-2023-24936 affects multiple packages. . See references for individual vulnerability details...

PT-2026-105086

Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally...

PT-2026-105085

Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network...

PT-2026-105088

Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network...

Rocky Linux 10.2 [CIQ] Security Update: aspnetcore-runtime-10.0 / aspnetcore-runtime-dbg-10.0 / etc Multiple Vulnerabilities (crlsa-2026_67530)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202667530 advisory. dotnet10.0: dotnet9.0: dotnet8.0: .NET Information Disclosure Vulnerability CVE-2026-58649 dotnet10.0: dotnet9.0: .NET Elevation of Privilege...