Lucene search
+L

27330 matches found

Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•5 views

PT-2026-112951

Name of the Vulnerable Software and Affected Versions Windows Key Storage Provider affected versions not specified Description An out-of-bounds read occurs in the Windows Key Storage Provider, which allows an authorized attacker to disclose sensitive information locally. Recommendations At the...

5.5CVSS5.7AI score0.00396EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•4 views

PT-2026-113137

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description An untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendations At the moment, the...

7.8CVSS5.7AI score0.00311EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•5 views

CVE-2026-96313: Missing Authentication for Critical Function

Missing authentication for critical function in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

7CVSS5.7AI score0.0022EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•4 views

CVE-2026-85935: Buffer Over-read

Buffer over-read in Windows USB Driver allows an authorized attacker to disclose information locally...

5.5CVSS5.6AI score0.00396EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•6 views

Microsoft Windows: CVE-2026-85374: Windows Installer Information Disclosure Vulnerability

Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally...

5.5CVSS5.6AI score0.00387EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•5 views

CVE-2026-85837: Out-of-bounds Read

Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.00311EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•5 views

CVE-2026-96918: Incorrect Authorization

Improper access control in Windows NTFS allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.00278EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•5 views

CVE-2026-83792: Incorrect Authorization

Incorrect authorization in Windows Device Install Service allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.00284EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•8 views

PT-2026-112181

Name of the Vulnerable Software and Affected Versions Windows SmartScreen affected versions not specified Description A type confusion issue occurs when a resource is accessed using an incompatible type. This allows an authorized attacker to elevate privileges locally on the system. Recommendatio...

7.8CVSS5.8AI score0.00341EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•7 views

PT-2026-112396

Name of the Vulnerable Software and Affected Versions Windows Setup Files Cleanup affected versions not specified Description External control of system or configuration settings allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no information...

7.8CVSS5.8AI score0.00364EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•8 views

PT-2026-112102

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description A use-after-free condition in Windows NTFS enables an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an application...

7CVSS6.2AI score0.00264EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•7 views

PT-2026-112411

Name of the Vulnerable Software and Affected Versions Windows Setup Files Cleanup affected versions not specified Description An untrusted search path in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no information...

7CVSS5.8AI score0.00295EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•4 views

CVE-2026-88070: Out-of-bounds Read

Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.00321EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•7 views

CVE-2026-83790: Use After Free

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...

7CVSS6.2AI score0.00252EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•4 views

CVE-2026-88080: Use After Free

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

7.8CVSS6.2AI score0.0024EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•4 views

CVE-2026-83676: Integer Underflow (Wrap or Wraparound)

Integer underflow wrap or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally...

7CVSS5.7AI score0.00252EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•6 views

CVE-2026-85835: Buffer Over-read

Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally...

5.5CVSS5.6AI score0.00396EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•6 views

Microsoft Windows: CVE-2026-97790: Windows Container Isolation FS Filter Driver (unionfs.sys) Tampering Vulnerability

Improper link resolution before file access 'link following' in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to perform tampering locally...

5.5CVSS5.7AI score0.00364EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•7 views

Microsoft Windows: CVE-2026-70216: Windows Mobile Device Management Tampering Vulnerability

Insufficient granularity of access control in Windows Mobile Device Management allows an authorized attacker to perform tampering locally...

5.5CVSS5.7AI score0.00309EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•4 views

CVE-2026-83755: Use of Uninitialized Resource

Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally...

5.5CVSS5.7AI score0.00414EPSS
SaveExploits0References2
Rows per page
Query Builder