CVE-2026-69621

Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69509

CVE-2026-69509 is a heap-based buffer overflow in the Windows Fax Service component of Microsoft Windows, allowing an authorized attacker with local access to escalate privileges . The vulnerability requires low privileges , low attack complexity , and no user interaction , resulting in a CVSS 3....

CVE-2026-72944

CVE-2026-72944 is a heap-based buffer overflow in the Windows Fax Service that allows an authorized attacker to achieve local privilege escalation . The vulnerability carries a CVSS 3.1 base score of 7.8 (High) , with a local attack vector, low complexity, low required privileges, and no user int...

CVE-2026-69621

CVE-2026-69621 is a heap-based buffer overflow in the Windows Fax Service that allows an authorized local attacker to elevate privileges , resulting in full compromise of confidentiality, integrity, and availability (CVSS 3.1: 7.0 HIGH , AV:L/AC:H/PR:L). CISA's SSVC assessment indicates no known ...

EUVD-2026-73004

Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally...

faxhell

faxhell "Fax Shell" A Proof-of-Concept bind shell using the Fax service and a DLL hijack based on Ualapi.dll. See our writeup at: https://windows-internals.com/faxing-your-way-to-system/ How to use Build Ualapi.dll and place in c:\windows\system32 Start the Fax service, which will load the DLL an...

faxhell

faxhell "Fax Shell" Un shell de enlace de prueba de concepto que utiliza el servicio Fax y un secuestro de DLL basado en Ualapi.dll. Consulte nuestro análisis en: https://windows-internals.com/faxing-your-way-to-system/ Cómo usar Compila Ualapi.dll y colócalo en c:\windows\system32 Inicia el...

NoFaxGiven

NoFaxGiven - Ejecución de código y persistencia en el servicio FAX de NETWORK SERVICE Una extensión de enrutamiento de fax es una DLL que añade funcionalidad de enrutamiento al servicio de fax. En un servidor pueden residir varias extensiones de enrutamiento de fax. Cuando el servidor de fax reci...

CVE-2025-66956

Insecure Access Control in Contact Plan, E-Mail, SMS and Fax components in Asseco SEE Live 2.0 allows remote attackers to access and execute attachments via a computable URL...

EUVD-2021-10993

Malware in sbrugna...

EUVD-2022-33526

Malicious code in bioql PyPI...

EUVD-2023-25861

Malicious code in bioql PyPI...

EUVD-2021-30178

Malicious code in bioql PyPI...

EUVD-2022-27204

Malicious code in bioql PyPI...

EUVD-2022-27181

Malicious code in bioql PyPI...

EUVD-2022-37640

Malicious code in bioql PyPI...

EUVD-2021-7188

Malicious code in bioql PyPI...

EUVD-2022-27178

Malicious code in bioql PyPI...

EUVD-2023-39384

Malicious code in bioql PyPI...

The vulnerability of the Fax Service in Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Fax Service in Windows operating systems is related to pointer swapping errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...