Lucene search
+L

43767 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/09 12:00 a.m.•2 views

CVE-2026-87506: Execution with Unnecessary Privileges

Privilege elevation in WebUI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

8.3CVSS8.2AI score0.00404EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/09/09 12:00 a.m.•15 views

Linux Distros Unpatched Vulnerability : CVE-2026-87506

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Privilege elevation in WebUI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute...

8.3CVSS8.2AI score0.00404EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/09 12:00 a.m.•4 views

CVE-2026-70425: Improper Neutralization of Special Elements used in an OS Command

Dell PowerScale OneFS, Versions 9.5.0.0 through 9.7.1.0, Versions 9.8.0.0 through 9.10.1.0, and Versions 9.11.0.0 through 9.14.0.1, contain a command injection vulnerability. An admin privileged local attacker could potentially exploit this vulnerability, leading to elevation of privileges to roo...

6.7CVSS6.1AI score0.00535EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/09 12:00 a.m.•9 views

CVE-2026-80171: Insufficient Entropy

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insufficient Entropy in PRNG vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to elevation of privileges...

4.7CVSS5.8AI score0.00117EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/09 12:00 a.m.•3 views

CVE-2026-79641: Improper Neutralization of Special Elements used in an OS Command

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with remote access could potentially exploit...

7.5CVSS5.9AI score0.01127EPSS
SaveExploits0References3
Talos Blog
Talos Blog
•added 2026/09/08 10:16 p.m.•17 views

Microsoft Patch Tuesday for September 2026 — Snort rules and prominent vulnerabilities

Microsoft has released its monthly security update for September 2026, which includes 973 vulnerabilities affecting a range of products, including 113 that Microsoft marked as "critical." Microsoft notes that 2 of the vulnerabilities disclosed this month have been exploited in the wild:...

9.8CVSS7.9AI score0.03616EPSS
SaveExploits0
Rapid7 Blog
Rapid7 Blog
•added 2026/09/08 9:44 p.m.•23 views

Patch Tuesday - September 2026

Microsoft is publishing 974 own-product vulnerabilities on September 2026 Patch Tuesday, including 723 vulnerabilities in Windows. Along with Microsoft fixes for 25 non-Microsoft CVEs, that brings the total number of vulnerabilities on the table today to 999. Whether this is the biggest Patch...

10CVSS7.5AI score0.48881EPSS
SaveExploits5
OSV
OSV
•added 2026/09/08 6:32 p.m.•6 views

GHSA-MQVM-GMC4-6RV2 Duplicate Advisory: Microsoft Security Advisory CVE-2026-69439 – .NET and Visual Studio Elevation of Privilege Vulnerability

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-527h-q9f6-p7qx. This link is maintained to preserve external references. Original Description Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a...

8.8CVSS6.1AI score
SaveExploits0References3
NVD
NVD
•added 2026/09/08 6:19 p.m.•26 views

CVE-2026-69775

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges over a network...

7.5CVSS0.0057EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/08 6:19 p.m.•19 views

CVE-2026-69762

Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network...

8.8CVSS0.00768EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/08 6:19 p.m.•3 views

CVE-2026-69439

Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network...

8.8CVSS6.2AI score
SaveExploits0References1
NVD
NVD
•added 2026/09/08 6:19 p.m.•16 views

CVE-2026-69418

Heap-based buffer overflow in Volume Manager Driver allows an authorized attacker to elevate privileges over a network...

8CVSS0.00768EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/08 6:18 p.m.•37 views

CVE-2026-69380

Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...

8.1CVSS0.00689EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/08 6:18 p.m.•11 views

CVE-2026-69373

Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...

6.7CVSS0.00348EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/08 6:18 p.m.•14 views

CVE-2026-69371

Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges over a network...

8CVSS0.00768EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/08 6:18 p.m.•14 views

CVE-2026-69366

Use after free in Windows Kernel allows an authorized attacker to elevate privileges over a network...

7.1CVSS0.0057EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/08 6:18 p.m.•13 views

CVE-2026-69341

Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally...

7CVSS0.00264EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/08 6:18 p.m.•13 views

CVE-2026-68889

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network...

7.1CVSS0.0057EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/08 6:18 p.m.•14 views

CVE-2026-68835

Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network...

7.1CVSS0.0057EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/08 6:18 p.m.•17 views

CVE-2026-68827

Integer underflow wrap or wraparound in Windows GDI+ allows an authorized attacker to elevate privileges over a network...

8CVSS0.00768EPSS
SaveExploits0References1
Rows per page
Query Builder