34791 matches found
PT-2026-2742
CVE-2026-20940 Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. https://t.co/Adw7dGq8xp...
Check Point Response to CVE-2025-9142 - Harmony SASE Windows Client Vulnerability
Cause The authentication and file-handling logic does not enforce strict trust boundaries. Under specific conditions, the system fails to validate data during certificate processing before using it in a privileged service component. Symptoms - A local attacker can trigger Harmony SASE Windows...
PT-2026-2353
Name of the Vulnerable Software and Affected Versions TeleControl Server Basic versions prior to 3.1.2.4 Description The application contains a local privilege escalation issue that could allow an attacker to execute arbitrary code with elevated privileges. Recommendations Update TeleControl Serv...
PT-2026-2705
Name of the Vulnerable Software and Affected Versions Windows Ancillary Function Driver for WinSock affected versions not specified Description A type confusion issue exists in the Windows Ancillary Function Driver for WinSock. This allows a locally authorized attacker to gain elevated privileges...
PT-2026-2716
Name of the Vulnerable Software and Affected Versions Microsoft Windows versions affected versions not specified Description A use-after-free condition exists in the Desktop Windows Manager that could allow an authorized attacker to gain elevated privileges on a local system. Recommendations At t...
MiracleLinux 8 : sudo-1.9.5p2-1.el8_10.1 (AXSA:2025-10408:01)
The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2025-10408:01 advisory. sudo: LPE via host option CVE-2025-32462 Tenable has extracted the preceding description block directly from the MiracleLinux security advisory. Note that...
MiracleLinux 9 : libblockdev-2.28-14.el9_6 (AXSA:2025-10552:03)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-10552:03 advisory. libblockdev: LPE from allowactive to root in libblockdev via udisks CVE-2025-6019 Tenable has extracted the preceding description block directly from the...
PT-2026-2681
Name of the Vulnerable Software and Affected Versions Windows Ancillary Function Driver for WinSock affected versions not specified Description A time-of-check time-of-use TOCTOU race condition exists in the Windows Ancillary Function Driver for WinSock. This condition allows a locally authorized...
PT-2026-2378
Name of the Vulnerable Software and Affected Versions Wondershare FamiSafe version 1.0 Description The software contains an unquoted service path issue within the FSService component. This could allow local users to potentially execute code with elevated privileges. The issue stems from an unquot...
PT-2026-2405
Name of the Vulnerable Software and Affected Versions Connectify Hotspot 2018 Description Connectify Hotspot 2018 contains a flaw due to an unquoted service path in the ConnectifyService executable. This allows local attackers to potentially execute arbitrary code. The issue stems from the unquot...
PT-2026-2403
Name of the Vulnerable Software and Affected Versions Cyclades Serial Console Server version 3.3.0 Description The Cyclades Serial Console Server has a local privilege escalation issue. The problem stems from overly permissive sudo privileges granted to the admin user and admin group. An attacker...
PT-2026-2365
CoolerMaster MasterPlus 1.8.5 contains an unquoted service path vulnerability in the MPService that allows local attackers to execute code with elevated system privileges. Attackers can drop a malicious executable in the service path and trigger code execution during service startup or system...
Cobian Backup 代码问题漏洞
Cobian Backup is a file backup software by Luis Cobian Personal Developer. A code issue vulnerability exists in Cobian Backup version 0.9, which stems from the presence of an unquoted service path to the CobianReflectorService, which could lead to the execution of arbitrary code by a local user...
Wondershare Dr.Fone 代码问题漏洞
Wondershare Dr. Fone is a one-stop solution for cell phones from China's Wanxing Wondershare. A code issue vulnerability exists in Wondershare Dr. Fone, which stems from an unquoted service path that can be exploited by an attacker to cause a local user to execute arbitrary code and elevate syste...
PT-2026-2715
CVE-2026-20870 Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally. https://t.co/fvnvcYOwh7...
PT-2026-2723
Name of the Vulnerable Software and Affected Versions Windows Management Services affected versions not specified Description A flaw exists in Windows Management Services that could allow an authorized attacker to elevate privileges locally due to a race condition during concurrent execution usin...
PT-2026-2693
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A flaw exists in the Windows Clipboard Server that could allow an attacker to gain higher-level access to a system. This issue involves a use-after-free condition. An attacker could exploit...
PT-2026-2708
CVE-2026-20863 Double free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally. https://t.co/OJll1df465...
PT-2026-2721
Name of the Vulnerable Software and Affected Versions Windows Virtualization-Based Security VBS Enclave affected versions not specified Description A heap-based buffer overflow exists within the Windows Virtualization-Based Security VBS Enclave component. This condition allows a locally authorize...