258068 matches found
CVE-2026-69432
CVE-2026-69432 is a heap-based buffer overflow in the Volume Manager Driver (Microsoft) that allows an authorized attacker to elevate privileges locally . The vulnerability is rated CVSS 3.1 7.8 (High) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating local attack vector, low compl...
CVE-2026-69418
Volume Manager Driver contains a heap-based buffer overflow that allows an authorized attacker to elevate privileges over a network. The vulnerability is rated CVSS 3.1: 8.0 (HIGH) with low attack complexity, low privileges required, and user interaction needed, yielding high impact to confidenti...
EUVD-2026-72964
Heap-based buffer overflow in Volume Manager Driver allows an authorized attacker to elevate privileges over a network...
CVE-2026-69281
CVE-2026-69281 is a use-after-free vulnerability in the Windows License Manager component that allows an authorized local attacker to elevate privileges. The vulnerability is rated CVSS 7.0 (High) with a vector of local attack, high complexity, low privileges required, no user interaction, unchan...
EUVD-2026-73211
Use after free in Windows License Manager allows an authorized attacker to elevate privileges locally...
ROOT-APP-NPM-CVE-2026-59875 CVE-2026-59875 in tar - Patched by Root
Root has patched CVE-2026-59875 in the tar package for Root:npm. Multiple fixed versions available...
CVE-2026-18851
Missing authorization in Ivanti Endpoint Manager Mobile before version 12.10.0.0, 12.9.0.2, and 12.8.0.4 allows a remote authenticated attacker to escalate their privileges to admin...
WordPress WP Crowdfunding plugin <= 2.2.1 - Authenticated (Shop Manager+) SQL Injection vulnerability
Authenticated Shop Manager+ SQL Injection vulnerability discovered by Wordfence PRISM in WordPress Plugin WP Crowdfunding versions = 2.2.1...
CVE-2026-33388
An access control vulnerability was discovered in the Credentials Manager functionality due to insufficient validation of user privileges. A remote authenticated user with limited privileges can view a limited subset of the available entries in the Credentials Manager. The actual credential value...
CVE-2026-18851
Missing authorization in Ivanti Endpoint Manager Mobile before version 12.10.0.0, 12.9.0.2, and 12.8.0.4 allows a remote authenticated attacker to escalate their privileges to admin...
CVE-2026-18851
CVE-2026-18851 is a missing authorization vulnerability in Ivanti Endpoint Manager Mobile affecting versions before 12.10.0.0 , 12.9.0.2 , and 12.8.0.4 . The flaw allows a remote authenticated attacker to escalate privileges to admin , resulting in high impact on confidentiality, integrity, and a...
CVE-2026-18851
Missing authorization in Ivanti Endpoint Manager Mobile before version 12.10.0.0, 12.9.0.2, and 12.8.0.4 allows a remote authenticated attacker to escalate their privileges to admin...
EUVD-2026-72792
Missing authorization in Ivanti Endpoint Manager Mobile before version 12.10.0.0, 12.9.0.2, and 12.8.0.4 allows a remote authenticated attacker to escalate their privileges to admin...
Security Advisory - Ivanti Endpoint Manager Mobile (CVE-2026-18851)
Summary Ivanti has released updates for Ivanti Endpoint Manager Mobile EPMM which addresses one high severity vulnerability. Successful exploitation could lead to privilege escalation. We are not aware of any customers being exploited by this vulnerability at the time of disclosure. Vulnerability...
Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally...
Windows Message Queuing Queue Manager Denial of Service Vulnerability
Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to deny service over a network...
Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability
Buffer over-read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally...
Windows License Manager Elevation of Privilege Vulnerability
Use after free in Windows License Manager allows an authorized attacker to elevate privileges locally...
Windows Container Manager Service Security Feature Bypass Vulnerability
Improper link resolution before file access 'link following' in Windows Container Manager Service allows an authorized attacker to bypass a security feature locally...