Lucene search
+L

228749 matches found

Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.9 views

PT-2026-70678

Name of the Vulnerable Software and Affected Versions Windows Autopilot affected versions not specified Description A use-after-free condition in Windows Autopilot enables an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an...

7CVSS5.8AI score0.00199EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.3 views

PT-2026-70621

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description An out-of-bounds read exists in Microsoft Office Word, which allows an unauthorized attacker to disclose sensitive information locally and affect the system. An out-of-bounds re...

5.5CVSS5AI score0.00459EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.5 views

PT-2026-70588

Name of the Vulnerable Software and Affected Versions Windows DWM Core Library affected versions not specified Description A heap-based buffer overflow in the Windows DWM Core Library allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program...

7.8CVSS7.5AI score0.0024EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.4 views

PT-2026-70586

Name of the Vulnerable Software and Affected Versions Capability Access Management Service camsvc affected versions not specified Description A use-after-free condition in the Capability Access Management Service camsvc allows an authorized attacker to elevate privileges locally. Use-after-free i...

7CVSS5.3AI score0.00199EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.3 views

PT-2026-70535

Name of the Vulnerable Software and Affected Versions Windows Remote Access Connection Manager affected versions not specified Description A heap-based buffer overflow occurs in the Windows Remote Access Connection Manager. This issue allows an authorized attacker to elevate privileges locally on...

7.8CVSS7.9AI score0.01829EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.3 views

PT-2026-70616

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description A numeric truncation error allows an unauthorized attacker to execute arbitrary code locally or remotely, potentially affecting the system. Recommendations At the moment, there ...

7.8CVSS5.6AI score0.00377EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.2 views

PT-2026-70526

Name of the Vulnerable Software and Affected Versions Windows Graphics Kernel affected versions not specified Description A use-after-free condition in the Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs...

7CVSS5.9AI score0.00199EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.3 views

PT-2026-70548

Name of the Vulnerable Software and Affected Versions Windows SMB Client affected versions not specified Description A heap-based buffer overflow occurs in the Windows SMB Client, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory corruptio...

7.8CVSS5.6AI score0.00257EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.3 views

PT-2026-70776

Name of the Vulnerable Software and Affected Versions Windows Installer affected versions not specified Description A heap-based buffer overflow occurs in Windows Installer, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory corruption issu...

7.8CVSS5.6AI score0.00311EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.5 views

PT-2026-70273

Name of the Vulnerable Software and Affected Versions IntelR XeonR 6 Scalable processors with IntelR TDX affected versions not specified Description Insufficient granularity of access control in a subsystem may allow an information disclosure. An authorized adversary with an authenticated user ca...

4.3CVSS5.1AI score0.00087EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.3 views

PT-2026-70243

Name of the Vulnerable Software and Affected Versions TCG TPM 2.0 reference code affected versions not specified Description An information leakage issue exists that allows a local attacker with elevated privileges to obtain a credential from a TPM-aware CA for a falsified TPM key, such as an...

7.9CVSS5.3AI score0.00162EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.12 views

PT-2026-70518

Name of the Vulnerable Software and Affected Versions Windows DHCP Server affected versions not specified Description Improper link resolution before file access, also known as link following, allows an authorized attacker to elevate privileges locally on the system. Recommendations At the moment...

7.8CVSS5.2AI score0.00355EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.4 views

PT-2026-70635

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold. This issue allows an unauthorized...

7.8CVSS6.3AI score0.0034EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.5 views

PT-2026-70402

Incorrect default permissions in Microsoft PowerShell allows an authorized attacker to elevate privileges locally...

7.3CVSS5.1AI score0.00356EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.3 views

PT-2026-70582

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description An out-of-bounds read in Windows NTFS allows an authorized attacker to disclose sensitive information locally, which can affect the system. Recommendations At the moment, there is no...

5.5CVSS5AI score0.00298EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.2 views

PT-2026-70491

Name of the Vulnerable Software and Affected Versions Windows Telephony Service affected versions not specified Description A race condition occurs in the Windows Telephony Service due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate privileg...

7CVSS7.1AI score0.00189EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.5 views

PT-2026-70547

Name of the Vulnerable Software and Affected Versions Windows Win32K affected versions not specified Description An untrusted pointer dereference in Windows Win32K allows an authorized attacker to locally disclose sensitive information, which may impact the system. Recommendations At the moment,...

5.5CVSS5AI score0.00312EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.4 views

PT-2026-70494

Name of the Vulnerable Software and Affected Versions Windows Win32K affected versions not specified Description An out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally. An out-of-bounds read occurs when the software reads data past the end of the...

7.8CVSS5.1AI score0.0024EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.3 views

PT-2026-70909

Name of the Vulnerable Software and Affected Versions SonicWall Email Security affected versions not specified Description An improper control of code generation allows an authenticated attacker with access to the restricted CLI to perform a local privilege escalation. By injecting arbitrary OS...

7.8CVSS7.7AI score0.00199EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/08/11 12:00 a.m.12 views

Security Updates for Microsoft Word Products (August 2026)

The Microsoft Word Products are missing a security update. They are, therefore, affected by multiple vulnerabilities: - Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. CVE-2026-63527, CVE-2026-64907 - Use after free in Microsoft Office...

7.8CVSS6.2AI score0.00459EPSS
SaveExploits0References17
Rows per page
Query Builder