CVE-2026-21228 Azure Local Remote Code Execution Vulnerability

...

CVE-2026-21244

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally...

CVE-2026-21247

Improper input validation in Windows Hyper-V allows an authorized attacker to execute code locally...

CVE-2026-21248

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally...

CVE-2025-22453

Improper input validation for some Server Firmware Update UtilitySysFwUpdt before version 16.0.12 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable local code execution. This...

CVE-2025-31648

Improper handling of values in the microcode flow for some IntelR Processor Family may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local...

CVE-2025-22453

Improper input validation for some Server Firmware Update UtilitySysFwUpdt before version 16.0.12 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable local code execution. This...

CVE-2025-22453

Improper input validation for some Server Firmware Update UtilitySysFwUpdt before version 16.0.12 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable local code execution. This...

Windows Hyper-V Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally...

PT-2026-7352

Name of the Vulnerable Software and Affected Versions Windows Hyper-V affected versions not specified Description A heap-based buffer overflow exists in Windows Hyper-V, potentially allowing an attacker to execute code locally. Exploitation may allow an attacker to execute arbitrary code and impa...

Security Updates for Microsoft Office Products (February 2026) (macOS)

The version of Microsoft Office for Mac installed on the remote host is affected by multiple vulnerabilities as referenced in the february-10-2026 advisory. - Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. CVE-2026-20952 - Untrusted pointer dereference...

PT-2026-7348

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally...

PT-2026-7351

Improper input validation in Windows Hyper-V allows an authorized attacker to execute code locally...

PT-2026-7285

Name of the Vulnerable Software and Affected Versions Server Firmware Update UtilitySysFwUpdt versions prior to 16.0.12 Description A flaw exists in the input validation process of the Server Firmware Update UtilitySysFwUpdt within Ring 3: User Applications. This issue could allow a system softwa...

PT-2026-33807

Name of the Vulnerable Software and Affected Versions DeepCool DeepCreative versions prior to 1.2.7 Description Insecure permissions for a critical resource allow a local attacker to execute arbitrary code via a crafted file. Recommendations Update to a version newer than 1.2.7...

CVE-2019-25293

BlueStacks App Player 2.4.44.62.57 contains an unquoted service path vulnerability in the BstHdLogRotatorSvc service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in C:\Program Files x86\Bluestacks\HD-LogRotatorService.exe to inject...

EUVD-2019-19409

BlueStacks App Player 2.4.44.62.57 contains an unquoted service path vulnerability in the BstHdLogRotatorSvc service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in C:\Program Files x86\Bluestacks\HD-LogRotatorService.exe to inject...

EUVD-2019-19405

Alps HID Monitor Service 8.1.0.10 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code with elevated privileges. Attackers can exploit the unquoted path in C:\Program Files\Apoint2K\HidMonitorSvc.exe to inject malicious executables and...

CVE-2025-10314

Incorrect Default Permissions vulnerability in Mitsubishi Electric Corporation FREQSHIP-mini for Windows versions 8.0.0 to 8.0.2 allows a local attacker to execute arbitrary code with system privileges by replacing service executable files EXE or DLLs in the installation directory with specially...

BlueStacks App Player 代码问题漏洞

BlueStacks App Player is a software developed by BlueStacks Inc. in the United States, designed to allow Android applications to run on Windows systems. Version 2.4.44.62.57 of BlueStacks App Player has a code vulnerability. This vulnerability stems from an incorrect service path in the...