4392 matches found
CVE-2026-40144
A memory-corruption vulnerability exists in a kernel-mode component of BeyondTrust Endpoint Privilege Management Windows deployments prior to version 26.1.2. Insufficient validation of input processed by the component may result in memory being accessed outside its intended bounds...
CVE-2026-40144 Memory corruption vulnerability in Endpoint Privilege Management (Windows deployments)
A memory-corruption vulnerability exists in a kernel-mode component of BeyondTrust Endpoint Privilege Management Windows deployments prior to version 26.1.2. Insufficient validation of input processed by the component may result in memory being accessed outside its intended bounds...
CVE-2026-40144
A memory-corruption flaw in the kernel-mode driver of BeyondTrust Endpoint Privilege Management for Windows (versions before 26.1.2) allows insufficiently validated input to trigger out-of-bounds memory access, yielding HIGH confidentiality, integrity, and availability impact. Exploitation requir...
EUVD-2026-60260
A memory-corruption vulnerability exists in a kernel-mode component of BeyondTrust Endpoint Privilege Management Windows deployments prior to version 26.1.2. Insufficient validation of input processed by the component may result in memory being accessed outside its intended bounds...
CVE-2026-40144
A memory-corruption vulnerability exists in a kernel-mode component of BeyondTrust Endpoint Privilege Management Windows deployments prior to version 26.1.2. Insufficient validation of input processed by the component may result in memory being accessed outside its intended bounds...
APT group HoneyMyte upgrades CoolClient: the backdoor gets a kernel-level Windows rootkit
Introduction CoolClient is a backdoor family attributed to the HoneyMyte APT group also known as Mustang Panda that has been used in their cyber-espionage campaigns targeting organizations across Asia and Russia. It supports such capabilities as keylogging, clipboard theft, credential harvesting,...
CVE-2026-62917
creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:19+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 22:01:24+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286 2026-08-12 01:01:15+00:00| seen|...
CVE-2026-62888
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
CVE-2026-20778
Out-of-bounds read for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a high complexity attack may enable denial of service. This result may potentially occur via...
CVE-2026-65794 Windows SMB Client Information Disclosure Vulnerability
...
CVE-2026-65773 Windows Kernel Elevation of Privilege Vulnerability
...
EUVD-2026-56673
Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally...
CVE-2026-62799 Windows SMB Client Elevation of Privilege Vulnerability
...
CVE-2026-62774
Technical details are not publicly available in the provided documents for CVE-2026-62774. Monitor for updates on affected products, impact, and remediation.
CVE-2026-62772
The CVE-2026-62772 entry describes a heap-based buffer overflow in the Windows Container Isolation FS Filter Driver (unionfs.sys) that enables an authorized local attacker to elevate privileges. Affected component: Windows container isolation FS filter driver (unionfs.sys). Root cause: heap-based...
CVE-2026-62750 Windows HTTP Protocol Stack Tampering Vulnerability
...
CVE-2026-62739 Windows HTTP.sys Elevation of Privilege Vulnerability
...
CVE-2026-62735 Windows HTTP.sys Elevation of Privilege Vulnerability
...