Lucene search
+L

296547 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•5 views

Microsoft Windows: CVE-2026-88179: Windows DWM Core Library Elevation of Privilege Vulnerability

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.00311EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•5 views

CVE-2026-69949: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Client for NFS allows an authorized attacker to elevate privileges locally...

7.8CVSS6.1AI score0.00333EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•6 views

CVE-2026-70185: Authorization Bypass Through User-Controlled Key

Protection mechanism failure in Windows PowerShell allows an authorized attacker to bypass a security feature locally...

8.8CVSS5.7AI score0.00273EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•6 views

CVE-2026-69950: Buffer Over-read

Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.00333EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•6 views

CVE-2026-83854: Missing Authentication for Critical Function

Improper access control in Windows Notification allows an authorized attacker to disclose information locally...

5.5CVSS5.6AI score0.00264EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•4 views

CVE-2026-83872: Incorrect Conversion between Numeric Types

Incorrect conversion between numeric types in Windows TCP/IP allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.00318EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•4 views

CVE-2026-83893: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of sensitive system information to an unauthorized control sphere in Windows Clipboard User Service allows an authorized attacker to disclose information locally...

5.5CVSS5.6AI score0.0049EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•7 views

CVE-2026-69882: Untrusted Search Path

Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.00514EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•9 views

Microsoft Windows: CVE-2026-83828: Windows MIDI Service Module Elevation of Privileges Vulnerability

Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

7.8CVSS6.1AI score0.00318EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•5 views

CVE-2026-69935: Use After Free

Use after free in Windows Storage allows an authorized attacker to elevate privileges locally...

7CVSS6.2AI score0.00202EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•3 views

CVE-2026-83750: Time-of-check Time-of-use (TOCTOU) Race Condition

Time-of-check time-of-use toctou race condition in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

7CVSS5.6AI score0.00205EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•3 views

CVE-2026-96322: Use After Free

Use after free in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally...

7CVSS6.2AI score0.00199EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•8 views

Microsoft Windows: CVE-2026-85810: Windows Telephony Server Elevation of Privilege Vulnerability

Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally...

7CVSS6.2AI score0.00246EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•4 views

PT-2026-112741

Name of the Vulnerable Software and Affected Versions Windows Installer affected versions not specified Description A use after free issue exists in Windows Installer. This allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs when an...

7CVSS6.9AI score0.00252EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•6 views

PT-2026-113146

Name of the Vulnerable Software and Affected Versions Windows Storage affected versions not specified Description An authorized attacker can locally disclose sensitive information due to the insertion of sensitive data into a file or directory that is accessible from the outside. Recommendations ...

5.5CVSS5.7AI score0.00458EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•10 views

PT-2026-113155

Name of the Vulnerable Software and Affected Versions Windows Universal Disk Format File System Driver UDFS affected versions not specified Description A null pointer dereference in the Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to execute arbitrary code...

7.8CVSS6.5AI score0.0024EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•8 views

PT-2026-113230

Name of the Vulnerable Software and Affected Versions Windows Mobile Broadband affected versions not specified Description Incorrect permission assignment for a critical resource in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally. Recommendations At the moment...

7.8CVSS5.8AI score0.00241EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•10 views

PT-2026-113224

Name of the Vulnerable Software and Affected Versions Windows Container Isolation FS Filter Driver unionfs.sys affected versions not specified Description Improper link resolution before file access, known as link following, occurs in the unionfs.sys driver. This allows an authorized attacker to...

5.5CVSS5.8AI score0.00364EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•6 views

PT-2026-113149

Name of the Vulnerable Software and Affected Versions Windows Universal Disk Format File System Driver UDFS affected versions not specified Description A use-after-free condition in the Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges...

7.8CVSS6.2AI score0.00311EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•6 views

PT-2026-113141

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description An issue in Windows NTFS allows an authorized attacker to locally disclose sensitive system information to an unauthorized control sphere. Recommendations At the moment, there is no...

5.5CVSS5.8AI score0.00353EPSS
SaveExploits0References5
Rows per page
Query Builder