Lucene search
+L

231205 matches found

Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.4 views

PT-2026-70662

Name of the Vulnerable Software and Affected Versions Windows Win32K affected versions not specified Description A use-after-free condition in Windows Win32K allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an application...

7CVSS5.3AI score0.00214EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.5 views

PT-2026-70470

Name of the Vulnerable Software and Affected Versions Windows Modern Device Management MDM affected versions not specified Description A use-after-free condition in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally. Use-after-free is a memory...

7.8CVSS5.8AI score0.00311EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.3 views

PT-2026-70729

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description A type confusion issue occurs when a resource is accessed using an incompatible type. This allows an unauthorized attacker to execute arbitrary code locally or remotely,...

7.8CVSS5.7AI score0.00303EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.10 views

PT-2026-70891

Bash-it 3.2.0 contains a terminal escape sequence injection vulnerability in the barbuk theme's Python virtualenv prompt segment that allows local attackers to inject arbitrary terminal control sequences by embedding escape sequences in the requires-python field of a pyproject.toml file. When a...

4.6CVSS5.4AI score0.00134EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.5 views

PT-2026-70506

Name of the Vulnerable Software and Affected Versions Windows Win32K affected versions not specified Description A buffer over-read in Windows Win32K allows an authorized attacker to disclose sensitive information locally, which can affect the system. Recommendations At the moment, there is no...

5.5CVSS5.2AI score0.00387EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.3 views

PT-2026-70422

Name of the Vulnerable Software and Affected Versions Windows Work Folder Service affected versions not specified Description A use-after-free condition in the Windows Work Folder Service allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that...

7.8CVSS7.4AI score0.00238EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.5 views

PT-2026-70507

Name of the Vulnerable Software and Affected Versions Windows Device Association Service affected versions not specified Description A heap-based buffer overflow occurs in the Windows Device Association Service. This issue allows an authorized attacker to elevate privileges locally on the system....

7.8CVSS7.9AI score0.00311EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.4 views

PT-2026-70709

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory buffer than it can hold, potentially leading to memory corruption. This issue allows an...

5.5CVSS5.3AI score0.00277EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.6 views

PT-2026-70636

Name of the Vulnerable Software and Affected Versions Microsoft Office Access affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an unauthorized...

7.8CVSS6AI score0.00303EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.7 views

PT-2026-70406

Name of the Vulnerable Software and Affected Versions Windows Event Logging Service affected versions not specified Description A race condition exists in the Windows Event Logging Service. This occurs when concurrent execution using a shared resource lacks proper synchronization, allowing an...

7CVSS5.4AI score0.00189EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.5 views

PT-2026-70360

Name of the Vulnerable Software and Affected Versions Vitis Embedded Single File Download SFD affected versions not specified Description Uncontrolled search paths in the local Windows installation of the Vitis Embedded Single File Download SFD may allow a low-privileged user to achieve arbitrary...

4.6CVSS5.6AI score0.00138EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.8 views

PT-2026-70654

Name of the Vulnerable Software and Affected Versions Windows GDI affected versions not specified Description An out-of-bounds read in Windows GDI allows an authorized attacker to disclose sensitive information locally, which may affect the system. Recommendations At the moment, there is no...

5.5CVSS5AI score0.00312EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.4 views

PT-2026-70774

Name of the Vulnerable Software and Affected Versions Windows Installer affected versions not specified Description A heap-based buffer overflow occurs in Windows Installer, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory corruption issu...

7.8CVSS7.8AI score0.0024EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.5 views

PT-2026-70753

Name of the Vulnerable Software and Affected Versions Microsoft Office PowerPoint affected versions not specified Description Improper input validation allows an unauthorized attacker to disclose information locally. Recommendations At the moment, there is no information about a newer version tha...

5.5CVSS5.1AI score0.00375EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.5 views

PT-2026-70632

Access of resource using incompatible type 'type confusion' in Microsoft Office allows an unauthorized attacker to execute code locally...

7.8CVSS5.3AI score0.00303EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.4 views

PT-2026-70682

Name of the Vulnerable Software and Affected Versions Desktop Window Manager affected versions not specified Description A heap-based buffer overflow occurs in the Desktop Window Manager, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory...

7.8CVSS5.6AI score0.00311EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.4 views

PT-2026-70334

Protection mechanism failure for some LLM-on-Ray before version 1.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially...

5.4CVSS5.2AI score0.0012EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.6 views

PT-2026-70455

Name of the Vulnerable Software and Affected Versions Windows Installer affected versions not specified Description A use-after-free condition occurs in Windows Installer, which allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue where an...

7CVSS6AI score0.00246EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.7 views

PT-2026-70490

Name of the Vulnerable Software and Affected Versions Windows Common Log File System Driver affected versions not specified Description A time-of-check time-of-use toctou race condition exists in the Windows Common Log File System Driver. This occurs when a system checks a condition such as a...

7CVSS5.2AI score0.00189EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.4 views

PT-2026-70679

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description An out-of-bounds read in Windows NTFS allows an authorized attacker to disclose sensitive information locally, which can affect the system. Recommendations At the moment, there is no...

5.5CVSS5AI score0.00299EPSS
SaveExploits0References4
Rows per page
Query Builder