Lucene search
+L

5887 matches found

Microsoft CVE
Microsoft CVE
added 3 days ago7 views

Windows DHCP Client Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges locally...

7.8CVSS5.5AI score0.00246EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 3 days ago47 views

Windows User Profile Service Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Windows User Profile Service allows an authorized attacker to elevate privileges locally...

7.8CVSS5.3AI score0.02392EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 3 days ago6 views

Application Information Services Elevation of Privilege Vulnerability

Use after free in Application Information Services allows an authorized attacker to elevate privileges locally...

7.8CVSS5.3AI score0.00318EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 3 days ago6 views

Microsoft Office Information Disclosure Vulnerability

Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally...

5.5CVSS5.2AI score0.00477EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 3 days ago8 views

Windows Autopilot Elevation of Privilege Vulnerability

Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally...

7CVSS5.3AI score0.00204EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 3 days ago42 views

Windows Package Manager Elevation of Privilege Vulnerability

Improper privilege management in Windows Package Manager allows an authorized attacker to elevate privileges locally...

7.3CVSS5.3AI score0.00328EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 3 days ago9 views

Microsoft OneDrive for MacOS Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Microsoft OneDrive allows an authorized attacker to elevate privileges locally...

6.7CVSS5.3AI score0.0029EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 3 days ago8 views

CVE-2026-68298

A flaw was found in the Linux kernel's drm/xe/vm module. During the creation of a virtual machine VM, an error in resource allocation could lead to a Shared Virtual Memory SVM resource leak. This occurs because the kernel's resource deallocation functions are not consistently called when an error...

7.8CVSS5.4AI score0.00166EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 3 days ago7 views

CVE-2026-68427

A flaw was found in the gpu: host1x component of the Linux kernel. The host1xbounpin function incorrectly dereferences a memory mapping after it has been freed, leading to a use-after-free vulnerability. This issue could allow a local attacker to cause memory corruption, potentially leading to a...

7.8CVSS5.7AI score0.00163EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 3 days ago6 views

CVE-2026-68225

A flaw was found in the Linux kernel's media I2C Alvium driver. The alviumctrlinit function, responsible for initializing controls, does not properly check if pointers are valid before using them. This can lead to the system attempting to write data to an invalid memory location, which could allo...

5.3AI score0.00209EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 3 days ago6 views

CVE-2026-68085

A flaw was found in the Linux kernel's Bluetooth Host Controller Interface HCI Universal Asynchronous Receiver/Transmitter UART driver. This vulnerability occurs when a Bluetooth device is reopened after a pending write operation was canceled, but an internal flag indicating a pending write is no...

8CVSS5.4AI score0.00168EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 3 days ago5 views

kernel: mm/slab: do not limit zeroing to orig_size when only red zoning is enabled

A flaw was found in the Linux kernel's memory management subsystem. This issue occurs when the kernel's memory allocator attempts to zero out newly allocated memory, but an incorrect check prevents the full memory region from being cleared under specific configurations. This can lead to memory no...

8.1CVSS5.4AI score0.00417EPSS
SaveExploits0References5
OSV
OSV
added 3 days ago3 views

DEBIAN-CVE-2026-72694

A flaw was found in MRTG. When the MRTG daemon is started as a root user and subsequently drops privileges, a local, low-privileged attacker can exploit a symbolic link symlink following vulnerability. By influencing or pre-placing a symlink in the process ID PID file path, the attacker can trick...

7.1CVSS5.5AI score0.00127EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 3 days ago6 views

CVE-2026-68151

A flaw was found in the Linux kernel's binfmtelffdpic component. This component, which handles FDPIC ELF binaries, does not correctly process multiple PTINTERP program headers. An unprivileged local attacker can exploit this by crafting a malicious binary with more than one PTINTERP header...

5.4AI score0.00175EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 3 days ago9 views

CVE-2026-72694

A flaw was found in MRTG. When the MRTG daemon is started as a root user and subsequently drops privileges, a local, low-privileged attacker can exploit a symbolic link symlink following vulnerability. By influencing or pre-placing a symlink in the process ID PID file path, the attacker can trick...

7.1CVSS5.5AI score0.00127EPSS
SaveExploits0References3
Cvelist
Cvelist
added 3 days ago33 views

CVE-2026-72694 Mrtg: mrtg daemon symlink-following chown allows local privilege escalation via pid file path manipulation

A flaw was found in MRTG. When the MRTG daemon is started as a root user and subsequently drops privileges, a local, low-privileged attacker can exploit a symbolic link symlink following vulnerability. By influencing or pre-placing a symlink in the process ID PID file path, the attacker can trick...

7.1CVSS0.00127EPSS
SaveExploits0References2
EUVD
EUVD
added 3 days ago8 views

EUVD-2026-55977

A flaw was found in MRTG. When the MRTG daemon is started as a root user and subsequently drops privileges, a local, low-privileged attacker can exploit a symbolic link symlink following vulnerability. By influencing or pre-placing a symlink in the process ID PID file path, the attacker can trick...

7.1CVSS5.5AI score0.00127EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 3 days ago7 views

CVE-2026-72694

A flaw was found in MRTG. When the MRTG daemon is started as a root user and subsequently drops privileges, a local, low-privileged attacker can exploit a symbolic link symlink following vulnerability. By influencing or pre-placing a symlink in the process ID PID file path, the attacker can trick...

7.1CVSS5.5AI score0.00127EPSS
SaveExploits0References3
CVE
CVE
added 3 days ago84 views

CVE-2026-8917

CVE-2026-8917 — An untrusted pointer dereference via an IOCTL affects ASUS GPU Tweak III, GPUTweakII, AI Suite3, and VGAdll . The vulnerability allows a local attacker to write a specific value to an arbitrary memory address, potentially leading to privilege escalation. According to the provided ...

8.4CVSS5.5AI score0.00114EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 3 days ago7 views

CVE-2026-8917

Untrusted Pointer Dereference in ASUS GPU Tweak III, GPUTweakII, AI Suite3, and VGAdll: An IOCTL vulnerability allows a local attacker to write a specific value to an arbitrary memory address, potentially leading to privilege escalation. Refer to the ' Security Update for ASUS GPU Tweak III, GPU...

8.4CVSS5.5AI score0.00114EPSS
SaveExploits0References2
Rows per page
Query Builder