Lucene search
+L

69689 matches found

Positive Technologies
Positive Technologies
•added 2026/04/14 12:00 a.m.•15 views

PT-2026-32874

🪟 CVE-2026-33100 in AFD.sys is the kind of bug that quietly hands a local attacker admin power. No splashy “new feature” — just patch and move on. https://t.co/QqYCpRIup5 WindowsSecurity PrivilegeEscalation AfdSys Cve202633100 https://t.co/Lrf56niqJN...

7CVSS6.9AI score0.00178EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/04/14 12:00 a.m.•16 views

PT-2026-32812

CVE-2026-32086 Concurrent execution using shared resource with improper synchronization 'race condition' in Function Discovery Service fdwsd.dll allows an authorized attacker to… https://t.co/AVyM2yQmdJ...

7CVSS7AI score0.00158EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/14 12:00 a.m.•6 views

CVE-2026-26182: Use After Free

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

7CVSS7.2AI score0.00203EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/14 12:00 a.m.•7 views

CVE-2026-26168: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

7.8CVSS7.3AI score0.00179EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/14 12:00 a.m.•7 views

CVE-2026-32073: Use After Free

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

7CVSS7.4AI score0.00351EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/04/14 12:00 a.m.•33 views

Microsoft Windows Virtualization-Based Security Enclave Access Control Vulnerability

The Microsoft Windows Virtualization-Based Security Enclave is a software-based trusted execution environment within the host application address space provided by Microsoft. There is an access control vulnerability associated with the Microsoft Windows Virtualization-Based Security Enclave...

4.4CVSS5.5AI score0.00288EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/04/14 12:00 a.m.•35 views

PT-2026-44319

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to kernel-devel-7.0.11-1.1 Description An issue exists in the tracepoint add func function where the subsystem's ext-regfunc is invoked before attempting to install a new probe via func add. If func add fails, such ...

5.5CVSS5.9AI score0.00134EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2026/04/14 12:00 a.m.•28 views

Totolink A7100RU Router setDdnsCfg Arbitrary Command Execution

The vulnerability of the setDdnsCfg function /cgi-bin/cstecgi.cgi of the Totolink A7100RU router software relates to the failure to eliminate special elements used in the operating system’s command for processing the provider parameter. Exploiting this vulnerability allows a malicious actor to...

7.5CVSS8.1AI score0.01577EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/04/14 12:00 a.m.•25 views

Maltrail Authentication Code Execution

The vulnerability of the Maltrail malware detection system lies in the lack of authentication for the critical function when processing the username parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted request...

10CVSS7.5AI score0.05472EPSS
SaveExploits1References5Affected Software1
Redos
Redos
•added 2026/04/14 12:00 a.m.•25 views

ROS-20260414-73-0042

A vulnerability in the cifssmb3domount function of the fs/smb/client/cifsfs.c module of the SMB client support module of the Linux operating system kernel is related to improper memory release "memory leak". Exploitation of the vulnerability could allow an attacker to cause a denial of service...

5.5CVSS5.9AI score0.00159EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/04/14 12:00 a.m.•42 views

PT-2026-32993

Name of the Vulnerable Software and Affected Versions 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery versions prior to 1.16.18 Description This plugin for WordPress allows unauthenticated attackers to retrieve flipbook page metadata for draft, private, and...

5.3CVSS5.7AI score0.00892EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2026/04/14 12:00 a.m.•17 views

PT-2026-32754

CVE-2026-26177 Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. https://t.co/AzyibGnFso...

7CVSS7.2AI score0.00203EPSS
SaveExploits0References3
Redos
Redos
•added 2026/04/14 12:00 a.m.•21 views

ROS-20260414-73-0044

A vulnerability in the smclgrterminate function of the net/smc/smccore.c module of the Linux kernel's implementation of the SMC family of socket protocols is related to the occurrence of mutual blocking. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

5.5CVSS5.8AI score0.00121EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/04/14 12:00 a.m.•4 views

PT-2026-42350

Multiple security vulnerabilities affect the prometheus package. The Delete function fails to properly validate offsets when processing malformed JSON input. See references for individual vulnerability details...

9.8CVSS6.7AI score0.01584EPSS
SaveExploits4References22
CNNVD
CNNVD
•added 2026/04/14 12:00 a.m.•33 views

Microsoft Windows Ancillary Function Driver for WinSock code-related vulnerabilities

The Microsoft Windows Ancillary Function Driver for WinSock is a supplementary function driver for Winsock by Microsoft Corporation. There are code-related vulnerabilities in the Microsoft Windows Ancillary Function Driver for WinSock. Attackers can exploit these vulnerabilities to gain elevated...

7CVSS6.9AI score0.00162EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/04/14 12:00 a.m.•14 views

PT-2026-32873

CVE-2026-33099 Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. https://t.co/FciJfCRRR2...

7CVSS6.2AI score0.00178EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/04/14 12:00 a.m.•27 views

Microsoft Function Discovery Service competitive condition vulnerability

The Microsoft Function Discovery Service is a background service provided by Microsoft Corporation. There are vulnerabilities related to competition conditions in the Microsoft Function Discovery Service fdwsd.dll. Attackers can exploit these vulnerabilities to gain elevated privileges. The...

7CVSS6.9AI score0.00158EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/04/14 12:00 a.m.•38 views

Microsoft Function Discovery Service security vulnerabilities

The Microsoft Function Discovery Service is a background service provided by Microsoft Corporation. There are security vulnerabilities associated with the Microsoft Function Discovery Service. Attackers can exploit these vulnerabilities to gain higher privileges. The following products and versio...

7CVSS6.9AI score0.01116EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/04/14 12:00 a.m.•30 views

Microsoft Function Discovery Service security vulnerabilities

The Microsoft Function Discovery Service is a background service provided by Microsoft Corporation. There are security vulnerabilities associated with the Microsoft Function Discovery Service fdwsd.dll. Attackers can exploit these vulnerabilities to gain elevated privileges. The following product...

7CVSS6.9AI score0.00252EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/14 12:00 a.m.•5 views

CVE-2026-33100: Use After Free

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

7CVSS7.2AI score0.00178EPSS
SaveExploits0References3
Rows per page
Query Builder