8166 matches found
CVE-2012-5519
cups-root-file-read.sh ⭐ a bash implementation of the metasploit 'cupsrootfileread.rb' module designed for pentesting and CTFs. mainly a short exercise in bash scripting. intended to be a self-contained program that exploits CVE-2012-5519 on linux systems; it provides the user with an interactive...
Astra Linux – Vulnerability in Linux, Linux 5.10
In the handling of offloads in ipgre.c, there is a possibility of a page fault due to an invalid memory access. This could lead to the disclosure of local information without the need for additional execution privileges. User interaction is not required for exploitation. Product: Android Versions...
CVE-2026-96854
Access of resource using incompatible type 'type confusion' in Windows Device Association Service allows an authorized attacker to disclose information locally...
CVE-2026-88140
Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally...
CVE-2026-85910
Buffer over-read in Windows StateRepository API allows an authorized attacker to disclose information locally...
CVE-2026-83933
Improper link resolution before file access 'link following' in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally...
CVE-2026-83835
Buffer over-read in Windows Common Log File System Driver allows an authorized attacker to disclose information locally...
CVE-2026-83723
Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally...
CVE-2026-70277
Out-of-bounds read in Windows Fast FAT Driver allows an unauthorized attacker to disclose information locally...
CVE-2026-70195
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to disclose information locally...
CVE-2026-70137
Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to disclose information locally...
CVE-2026-69506
The Windows Key Storage Provider is vulnerable to an out-of-bounds read (CWE-125). This vulnerability allows an authorized attacker to disclose information locally . The vulnerability is assigned a CVSS 3.1 base score of 4.7 (Medium) , characterized by a LOCAL attack vector and HIGH confidentiali...
CVE-2026-70227
An out-of-bounds read vulnerability exists in the Windows Device Association Service . This flaw allows an authorized attacker to perform a local information disclosure, potentially revealing sensitive data. No specific exploit code or in-the-wild exploitation details are provided in the document...
CVE-2026-83664
The Windows Portable Device File System Driver is vulnerable to a type confusion issue (CWE-843). This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive data. No specific exploit details or in-the-wild exploitation instances are provided...
CVE-2026-96849
A use of uninitialized resource vulnerability in Windows Kernel-Mode Drivers allows an authorized attacker to perform a local information disclosure . The vulnerability is associated with CWE-904 . No specific software versions, root cause details, or exploit links are provided in the documentati...
CVE-2026-85938
The Windows Broadcast DVR User Service is impacted by an improper access control vulnerability (CWE-862). This flaw allows an authorized attacker to perform a local information disclosure attack. The vulnerability has been assigned a CVSS 3.1 base score of 5.5 (Medium) , with a high impact on con...
CVE-2026-83713
An out-of-bounds read vulnerability exists in the Windows Universal Disk Format File System Driver (UDFS) . This flaw allows an authorized attacker to disclose information locally. The vulnerability is categorized under CWE-497 (Exposure of Sensitive System Information to an Unauthorized Control ...
CVE-2026-70017
A type confusion vulnerability exists in Windows Secure Kernel Mode , where accessing a resource using an incompatible type allows an authorized attacker to perform a local information disclosure . The vulnerability is assigned CWE-843 . No specific patch versions, exploit links, or additional te...
CVE-2026-69969
The Windows AppX Deployment Service is vulnerable to an information disclosure vulnerability (CVE-2026-69969) due to improper link resolution before file access (link following). An authorized attacker can exploit this flaw to disclose information locally. Exploitation details and specific remedi...
CVE-2026-105726
A vulnerability exists in Microsoft Defender involving an out-of-bounds read (CWE-125). This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive data. The impact is categorized as high confidentiality with a Medium base severity score. Off...