UnCanny

UNCanny Coerce La idea detrás de esta investigación era simple, ya que quería encontrar mi propia técnica de coerción. Empecé buscando nuevas superficies de ataque RPC, pero después de que Microsoft agregó monitoreo de actividad RPC...

CVE-2026-69605

Use after free in Microsoft Install Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69605

CVE-2026-69605 is a use-after-free vulnerability in Microsoft Install Service that allows an authorized attacker to perform a local privilege escalation . The flaw is classified with a CVSS 3.1 base score of 7.0 (HIGH) , requiring local access, low privileges, and high attack complexity, with hig...

EUVD-2026-73027

Use after free in Microsoft Install Service allows an authorized attacker to elevate privileges locally...

Microsoft Install Service Elevation of Privilege Vulnerability

Use after free in Microsoft Install Service allows an authorized attacker to elevate privileges locally...

PT-2026-87607

Use after free in Microsoft Install Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69605: Use After Free

Use after free in Microsoft Install Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-43876

Improper privilege management in Microsoft Install Service allows an authorized attacker to elevate privileges locally...

CVE-2026-50343

Improper privilege management in Microsoft Install Service allows an authorized attacker to elevate privileges locally...

CVE-2026-50343 Microsoft Install Service Elevation of Privilege Vulnerability

...

CVE-2026-50343

CVE-2026-50343, a Microsoft Install Service Elevation of Privilege vulnerability, arises from improper privilege management. An authorized local attacker could elevate privileges on affected Windows systems. The vulnerability is listed among several critical Windows privilege-escalation issues di...

CVE-2026-50343 Microsoft Install Service Elevation of Privilege Vulnerability

...

Microsoft Install Service Elevation of Privilege Vulnerability

Improper privilege management in Microsoft Install Service allows an authorized attacker to elevate privileges locally...

CVE-2026-50343: Improper Privilege Management

Improper privilege management in Microsoft Install Service allows an authorized attacker to elevate privileges locally...

Exploit for Improper Privilege Management in Microsoft

CVE-2026-50343: InstallService StaticPluginMap EoP Standard U...

PT-2026-58331

Name of the Vulnerable Software and Affected Versions Microsoft Install Service affected versions not specified Description Improper privilege management in the Microsoft Install Service allows an authorized attacker to elevate privileges locally, potentially granting full system control. The iss...

CVE-2026-7630 innocommerce InnoShop Installation Endpoint InstallServiceProvider.php boot improper authentication

A vulnerability has been found in innocommerce InnoShop up to 0.7.8. The affected element is the function InstallServiceProvider::boot of the file innopacks/install/src/InstallServiceProvider.php of the component Installation Endpoint. The manipulation leads to improper authentication. Remote...

CVE-2026-7630 innocommerce InnoShop Installation Endpoint InstallServiceProvider.php boot improper authentication

A vulnerability has been found in innocommerce InnoShop up to 0.7.8. The affected element is the function InstallServiceProvider::boot of the file innopacks/install/src/InstallServiceProvider.php of the component Installation Endpoint. The manipulation leads to improper authentication. Remote...

CVE-2026-7630 innocommerce InnoShop Installation Endpoint InstallServiceProvider.php boot improper authentication

A vulnerability has been found in innocommerce InnoShop up to 0.7.8. The affected element is the function InstallServiceProvider::boot of the file innopacks/install/src/InstallServiceProvider.php of the component Installation Endpoint. The manipulation leads to improper authentication. Remote...

EUVD-2020-30872

Wondershare Driver Install Service contains an unquoted service path vulnerability in the ElevationService executable that allows local attackers to potentially inject malicious code. Attackers can exploit the unquoted path to replace the service binary with a malicious executable, enabling...