44 matches found
CVE-2026-83700
Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-83701
Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-83701
A Use after free vulnerability exists in the Windows Now Playing Session Manager . This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit details or in-the-wild exploitation information are provided in the documents. Remediation is indicated as an OFFI...
EUVD-2026-99957
Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-83700
A Use after free vulnerability exists in the Windows Now Playing Session Manager . This flaw allows an authorized attacker to perform a local elevation of privilege . No specific exploit details or remediation steps are provided in the documents.
EUVD-2026-99335
Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally...
Windows Now Playing Session Manager Elevation of Privilege Vulnerability
Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally...
Windows Now Playing Session Manager Elevation of Privilege Vulnerability
Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally...
PT-2026-112504
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A use-after-free issue in the Now Playing Session Manager allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption flaw that occurs when an applicati...
Microsoft Windows: CVE-2026-83700: Windows Now Playing Session Manager Elevation of Privilege Vulnerability
Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-83701: Use After Free
Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally...
PT-2026-112505
Name of the Vulnerable Software and Affected Versions Windows Now Playing Session Manager affected versions not specified Description A use-after-free condition exists in the Windows Now Playing Session Manager. This allows an authorized attacker to elevate privileges locally on the system...
Microsoft Windows: CVE-2026-83701: Windows Now Playing Session Manager Elevation of Privilege Vulnerability
Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-83700: Use After Free
Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally...
EUVD-2026-87840
AzuraCast Composer package azuracast/azuracast before 0.23.8 validates a station's "Remote Relay" URL only for URL syntax and an http/https scheme Utilities\Urls::parseUserUrl, used by StationRemote::getUrlAsUri and performs no host or IP address restriction. A user holding only the station-scope...
CVE-2026-100849 AzuraCast before 0.23.8 SSRF Filter Bypass via Hostname and Private IPs
AzuraCast is a self-hosted web radio management suite. In AzuraCast before 0.23.8, the station webhook URL validation in AbstractConnector::getValidUrl backend/src/Webhook/Connector/AbstractConnector.php, used by the Generic and Discord webhook connectors, rejects only URLs whose host is a litera...
CVE-2026-100848 AzuraCast before 0.23.8 Server-Side Request Forgery via Remote Relay URL
AzuraCast Composer package azuracast/azuracast before 0.23.8 validates a station's "Remote Relay" URL only for URL syntax and an http/https scheme Utilities\Urls::parseUserUrl, used by StationRemote::getUrlAsUri and performs no host or IP address restriction. A user holding only the station-scope...
CVE-2026-100848
AzuraCast versions before 0.23.8 (specifically the azuracast/azuracast Composer package) are vulnerable to Server-Side Request Forgery (SSRF) . The root cause is that the software validates the "Remote Relay" URL only for syntax and scheme (http/https) via Utilitiesase\Urls::parseUserUrl, but fa...