Lucene search
+L

223574 matches found

OSV
OSV
added 2026/07/14 12:45 a.m.7 views

CVE-2026-15621 mosaxiv clawlet File Tools fs_ops.go edit_file link following

A vulnerability was detected in mosaxiv clawlet up to 0.2.10. This impacts the function readfile/writefile/editfile of the file tools/fsops.go of the component File Tools. Performing a manipulation results in link following. The attack needs to be approached locally. The reported GitHub issue was...

4.8CVSS5.9AI score0.0014EPSS
SaveExploits0References8
EUVD
EUVD
added 2026/07/14 12:31 a.m.9 views

EUVD-2026-43541

Glarysoft Glary Utilities Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Glarysoft Glary Utilities. An attacker must first obtain the ability to execute low-privileged code on the target system...

7.3CVSS7.2AI score0.00142EPSS
SaveExploits0References2
GithubExploit
GithubExploit
added 2026/07/14 12:15 a.m.129 views

Exploit for Use After Free in Linux Linux_Kernel

CVE-2026-43499 for OnePlus 15 Android 16 local privilege esca...

7.8CVSS6.8AI score0.00725EPSS
SaveExploits47
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.8 views

PT-2026-58169

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description A heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute arbitrary code locally and remotely, potentially affecting the entire system. A heap-based buffer...

7.8CVSS6.5AI score0.0036EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.11 views

PT-2026-58637

Name of the Vulnerable Software and Affected Versions Windows Subsystem for Linux versions prior to 2.7.10 Description A time-of-check time-of-use TOCTOU race condition exists in the Windows Subsystem for Linux. This flaw allows an authorized local attacker to perform data tampering. A TOCTOU rac...

6.3CVSS6.1AI score0.00164EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.15 views

PT-2026-58601

Name of the Vulnerable Software and Affected Versions Windows 11 affected versions not specified Description A use after free issue in the Windows MIDI Service Module allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs when an...

7CVSS6.2AI score0.00246EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.17 views

PT-2026-58121

Name of the Vulnerable Software and Affected Versions Windows File Explorer affected versions not specified Description An issue in Windows File Explorer allows an authorized attacker to locally disclose sensitive information to an unauthorized actor. Recommendations At the moment, there is no...

5.5CVSS6.1AI score0.00353EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.13 views

PT-2026-58380

Name of the Vulnerable Software and Affected Versions Windows Cloud Files Mini Filter Driver affected versions not specified Description An out-of-bounds read in the Windows Cloud Files Mini Filter Driver allows an authorized attacker to disclose information locally. An out-of-bounds read occurs...

5.5CVSS6AI score0.00298EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.9 views

PT-2026-58203

Name of the Vulnerable Software and Affected Versions Windows Server Backup affected versions not specified Description An improper link resolution issue before file access, known as link following, allows an authorized attacker to elevate privileges locally. This flaw enables a low-privilege...

7.3CVSS6AI score0.00343EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.14 views

PT-2026-58672

Name of the Vulnerable Software and Affected Versions Windows Client-Side Caching CSC Service affected versions not specified Description A use-after-free condition in the Windows Client-Side Caching CSC Service allows an authorized attacker to elevate privileges locally. Use-after-free is a memo...

7CVSS6AI score0.00229EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.11 views

PT-2026-58183

Name of the Vulnerable Software and Affected Versions Microsoft Windows DNS affected versions not specified Description Improper privilege management in Microsoft Windows DNS allows an authorized attacker to locally bypass a security feature. Recommendations At the moment, there is no information...

5.5CVSS5.8AI score0.00217EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.13 views

PT-2026-58116

Name of the Vulnerable Software and Affected Versions Windows Ancillary Function Driver for WinSock affected versions not specified Description Cleartext transmission of sensitive information in the Windows Ancillary Function Driver for WinSock allows an authorized attacker to disclose informatio...

5.5CVSS5.8AI score0.00202EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.16 views

PT-2026-58186

Name of the Vulnerable Software and Affected Versions Windows Spaceport.sys affected versions not specified Description An integer overflow or wraparound exists in the Spaceport.sys driver. This issue allows an unauthorized attacker with physical access to the system to elevate their privileges t...

6.8CVSS6.1AI score0.00327EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.12 views

PT-2026-58515

Name of the Vulnerable Software and Affected Versions Windows Terminal affected versions not specified Description An integer overflow or wraparound occurs in Windows Terminal, which could allow an unauthorized attacker to execute code locally. An integer overflow happens when an arithmetic...

7.8CVSS6.2AI score0.00435EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.19 views

PT-2026-58150

Name of the Vulnerable Software and Affected Versions Windows DNS affected versions not specified Description A heap-based buffer overflow exists in the Windows DNS Client. This flaw allows an authorized attacker with local access to elevate their privileges to administrative levels. A heap-based...

7.8CVSS6AI score0.0024EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.14 views

PT-2026-58325

Name of the Vulnerable Software and Affected Versions Windows Operating Systems affected versions not specified Description Improper access control allows an authorized attacker to elevate privileges locally, potentially enabling a full system takeover. Recommendations At the moment, there is no...

7.8CVSS6.1AI score0.00278EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.17 views

PT-2026-58668

Name of the Vulnerable Software and Affected Versions Windows DirectX affected versions not specified Description A use-after-free and double-free condition exists in the DirectX Graphics Kernel dxgkrnl. The issue occurs during the rollback process of a failed D3DKMTCreateAllocation function call...

7CVSS7AI score0.00229EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.9 views

PT-2026-58202

Name of the Vulnerable Software and Affected Versions Microsoft Windows App Store affected versions not specified Description A race condition occurs when multiple processes access a shared resource concurrently without proper synchronization. In the Microsoft Windows App Store, this flaw allows ...

7CVSS7AI score0.00153EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.15 views

PT-2026-58606

Name of the Vulnerable Software and Affected Versions Microsoft Windows Media Foundation affected versions not specified Description A heap-based buffer overflow occurs in Microsoft Windows Media Foundation, which is a set of APIs for multimedia processing. This flaw allows an unauthorized attack...

8.4CVSS7.7AI score0.00396EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.14 views

PT-2026-58357

Name of the Vulnerable Software and Affected Versions Windows DirectX affected versions not specified Description A heap-based buffer overflow exists in Windows DirectX. This issue allows an authorized attacker to elevate privileges locally, potentially granting full control over the system. A...

6.3CVSS6.2AI score0.01813EPSS
SaveExploits0References3
Rows per page
Query Builder