Lucene search
+L

317 matches found

NVD
NVD
•added 2026/10/13 7:20 p.m.•10 views

CVE-2026-85359

Improper control of generation of code 'code injection' in Windows Performance Monitor allows an authorized attacker to elevate privileges locally...

7.8CVSS0.00745EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/13 7:20 p.m.•9 views

CVE-2026-85333

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Performance Monitor allows an authorized attacker to elevate privileges locally...

7CVSS0.00203EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/13 7:00 p.m.•24 views

CVE-2026-85359

A code injection vulnerability (CWE-94) exists in Windows Performance Monitor , where improper control of code generation allows an authorized attacker to achieve local privilege elevation . The vulnerability has a CVSS 3.1 base score of 7.8 and is categorized as high severity. Official remediati...

7.8CVSS5.8AI score0.00745EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/13 7:00 p.m.•21 views

CVE-2026-85333

A race condition exists in the Windows Performance Monitor due to concurrent execution using a shared resource with improper synchronization. This vulnerability allows an authorized attacker to achieve local privilege elevation . No specific exploit details or remediation versions are provided in...

7CVSS5.8AI score0.00203EPSS
SaveExploits0References1Affected Software14
Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•11 views

Windows Performance Monitor Elevation of Privilege Vulnerability

Improper control of generation of code 'code injection' in Windows Performance Monitor allows an authorized attacker to elevate privileges locally...

7.8CVSS5.9AI score0.00745EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•12 views

Windows Performance Monitor Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Performance Monitor allows an authorized attacker to elevate privileges locally...

7CVSS5.9AI score0.00203EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•8 views

CVE-2026-85333: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Performance Monitor allows an authorized attacker to elevate privileges locally...

7CVSS5.8AI score0.00203EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•7 views

CVE-2026-85359: Improper Control of Generation of Code

Improper control of generation of code 'code injection' in Windows Performance Monitor allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00745EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•6 views

PT-2026-112723

Name of the Vulnerable Software and Affected Versions Windows Performance Monitor affected versions not specified Description A race condition occurs in Windows Performance Monitor due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate privileg...

7CVSS5.6AI score0.00203EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•10 views

Microsoft Windows: CVE-2026-85359: Windows Performance Monitor Elevation of Privilege Vulnerability

Improper control of generation of code 'code injection' in Windows Performance Monitor allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00745EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•9 views

Microsoft Windows: CVE-2026-85333: Windows Performance Monitor Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Performance Monitor allows an authorized attacker to elevate privileges locally...

6.7CVSS5.8AI score0.00203EPSS
SaveExploits0References2
AstraLinux
AstraLinux
•added 2026/09/14 12:41 p.m.•13 views

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm/vc4: The active performance monitor must be stopped before it is destroyed. When the file descriptor is closed, the active performance monitor is not stopped. Although all performance monitors are destroyed in...

7.8CVSS6.2AI score0.0023EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/08 6:18 p.m.•16 views

CVE-2026-69324

Access of resource using incompatible type 'type confusion' in Windows Performance Monitor allows an authorized attacker to elevate privileges locally...

7.8CVSS0.00333EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/08 5:15 p.m.•19 views

EUVD-2026-73455

Access of resource using incompatible type 'type confusion' in Windows Performance Monitor allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.00333EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/08 5:15 p.m.•44 views

CVE-2026-69324

CVE-2026-69324 is a local privilege elevation vulnerability in Windows Performance Monitor caused by type confusion (access of resource using incompatible type). An authorized attacker with low privileges can exploit this locally without user interaction to gain high impact on confidentiality, in...

7.8CVSS5.7AI score0.00333EPSS
SaveExploits0References1Affected Software13
Microsoft CVE
Microsoft CVE
•added 2026/09/08 2:00 p.m.•22 views

Windows Performance Monitor Elevation of Privilege Vulnerability

Access of resource using incompatible type 'type confusion' in Windows Performance Monitor allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00333EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•9 views

CVE-2026-69324: Access of Resource Using Incompatible Type

Access of resource using incompatible type 'type confusion' in Windows Performance Monitor allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.00333EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•24 views

PT-2026-87368

Name of the Vulnerable Software and Affected Versions Windows Performance Monitor affected versions not specified Description A type confusion issue occurs when a resource is accessed using an incompatible type. This allows an authorized attacker to elevate privileges locally on the system...

7.8CVSS5.8AI score0.00333EPSS
SaveExploits0References5
osv_ubuntu
osv_ubuntu
•added 2026/07/29 9:16 a.m.•23 views

UBUNTU-CVE-2026-64556

In the Linux kernel, the following vulnerability has been resolved: perf/core: Detach event groups during removeonexec perfeventremoveonexec removes events by calling perfeventexitevent. For top-level events, this removes the event from the context with DETACHEXIT only. This can leave inconsisten...

7.8CVSS6.7AI score0.00124EPSS
SaveExploits0References22
Ubuntu
Ubuntu
•added 2026/07/10 9:38 a.m.•36 views

USN-8492-5: Linux kernel (FIPS) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - PowerPC architecture; - x86 architecture; - Block layer subsystem; -...

9.8CVSS6.3AI score0.01338EPSS
SaveExploits5
Rows per page
Query Builder