45401 matches found
CVE-2021-1732
CVE-2021-1732 CVE-2021-1732 Microsoft Windows 10 Local Privilege Elevation Vulnerability Research and Poc/Exploit Development Affected Systems and Application Versions Windows Server, version 20H2 Server Core Installation Windows 10 Version 20H2 for ARM64-based Systems Windows 10 Version 20H2 for...
CVE-2025-21293
CVE-2025-21293 CVE-2025-21293 is an elevation of privilege vulnerability in Active Directory Domain Services. It allows "Network Configuration Operators" to execute code with SYSTEM privileges via Windows Performance Counters. Affected Windows versions include Windows 10, 11, and Server. Microsof...
CVE-2025-54110-Kernel-EoP-PoC
CVE-2025-54110-Kernel-EoP-PoC PoC implementation for CVE-2025-54110 a Kernel-Level Integer Overflow Vulnerability in the Windows NtQueryDirectoryObject system call. CVE-2025-54110 - Windows Kernel Integer Overflow Analysis CVE: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-54110...
Kerberos-CVE-2026-27912
Kerberos-CVE-2026-27912 CVE-2026-27912 - Windows Kerberos Elevation of Privilege Vulnerability ResetNightmare - Unauthorized password reset via Kerberos Change Password protocol flaw. 📋 Details Field| Value ---|--- CVE| CVE-2026-27912 Title| Windows Kerberos Elevation of Privilege Vulnerability...
CVE-2026-110150
Privilege elevation in Installer in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to obtain sensitive information via a local program. Chromium security severity: High...
Security Updates for Azure Connected Machine Agent < 1.68 (October 2026)
The Microsoft Azure Connected Machine Agent installation on the remote host is missing security updates. It is, therefore, affected by an elevation of privilege vulnerability: - Server-side request forgery ssrf in Azure Arc allows an authorized attacker to elevate privileges over a network...
CVE-2026-70179
Authentication bypass by spoofing in ASP.NET Core allows an authorized attacker to elevate privileges over a network...
CVE-2026-70175
Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network...
EUVD-2026-101506
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...
CVE-2026-88164
A Missing Authorization vulnerability in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. This issue is associated with CWE-862 . While specific technical details regarding the affected component or root cause are not provided, the vulnerability has ...
CVE-2026-110150
A privilege elevation flaw was found in the Installer component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/561334760...
EUVD-2026-100637
Privilege elevation in Installer in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to obtain sensitive information via a local program. Chromium security severity: High...
Security Updates for Microsoft SharePoint Server Subscription Edition (October 2026)
The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Remote Code Execution via integer overflow in Microsoft Office SharePoint CVE-2026-88166 - Elevation of Privilege in SharePoi...
Security Updates for Microsoft Word Products C2R (October 2026)
The Microsoft Word Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. CVE-2026-70268, CVE-2026-70287, CVE-2026-70301, CVE-2026-70302,...
Security Updates for Microsoft Exchange Server (October 2026)
The Microsoft Exchange Server installed on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Exchange Server allows an unauthorized attacker to...
Linux Distros Unpatched Vulnerability : CVE-2026-70179
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Authentication bypass by spoofing in ASP.NET Core allows an authorized attacker to elevate privileges over a network. CVE-2026-70179 Note that Nessus relies on...
Linux Distros Unpatched Vulnerability : CVE-2026-70175
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network. CVE-2026-70175 Note that Nessus relies on the...
Linux Distros Unpatched Vulnerability : CVE-2026-110150
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Privilege elevation in Installer in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to obtain sensitive information via a local...
DEBIAN-CVE-2026-110150
Privilege elevation in Installer in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to obtain sensitive information via a local program. Chromium security severity: High...
