Lucene search
+L

6533 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/14 12:00 a.m.•1 views

CVE-2026-32223: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows USB Print Driver allows an unauthorized attacker to elevate privileges with a physical attack...

6.8CVSS6.1AI score0.00555EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/14 12:00 a.m.•0 views

CVE-2026-26163: Double Free

Double free in Windows Kernel allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00333EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/04/14 12:00 a.m.•13 views

PT-2026-32774

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description Improper authorization in the Windows Kerberos implementation, specifically a validation flaw in the Kerberos Change Password protocol, allows an authorized attacker to elevate privileges ove...

8CVSS7.3AI score0.00427EPSS
SaveExploits2References12
Positive Technologies
Positive Technologies
•added 2026/04/14 12:00 a.m.•13 views

PT-2026-32808

Name of the Vulnerable Software and Affected Versions Windows SSDP Service affected versions not specified Description A race condition occurs in the Windows SSDP Service due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate privileges locally...

7CVSS6.2AI score0.00202EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/04/14 12:00 a.m.•12 views

PT-2026-32828

Name of the Vulnerable Software and Affected Versions Windows Push Notifications affected versions not specified Description An improper synchronization of shared resources during concurrent execution, known as a race condition, allows an authorized attacker to elevate privileges locally...

7.8CVSS6.2AI score0.00202EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/14 12:00 a.m.•1 views

CVE-2026-32069: Double Free

Double free in Windows Projected File System allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00333EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/04/14 12:00 a.m.•10 views

PT-2026-32865

Name of the Vulnerable Software and Affected Versions Windows Win32K affected versions not specified Description An untrusted pointer dereference in ICOMP allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no information about a newer version that...

7.8CVSS6.2AI score0.00333EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/14 12:00 a.m.•1 views

CVE-2026-26161: Untrusted Pointer Dereference

Untrusted pointer dereference in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally...

7.8CVSS5.5AI score0.00333EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/14 12:00 a.m.•1 views

CVE-2026-32152: Use After Free

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally...

7.8CVSS6.1AI score0.00333EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/04/14 12:00 a.m.•30 views

PT-2026-32753

Name of the Vulnerable Software and Affected Versions Windows Client Side Caching driver csc.sys affected versions not specified Description A heap-based buffer overflow in the Windows Client Side Caching driver csc.sys allows an authorized attacker to elevate privileges locally. A heap-based...

7.8CVSS7AI score0.00333EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/14 12:00 a.m.•0 views

CVE-2026-26167: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

8.8CVSS5.7AI score0.00214EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/14 12:00 a.m.•1 views

CVE-2026-32165: Use After Free

Use after free in Windows User Interface Core allows an authorized attacker to elevate privileges locally...

7.8CVSS6.1AI score0.00202EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/14 12:00 a.m.•1 views

CVE-2026-32192: Deserialization of Untrusted Data

Deserialization of untrusted data in Azure Monitor Agent allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.02513EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/04/14 12:00 a.m.•13 views

PT-2026-32732

🪟 MSRC “confidence signal” for CVE-2026-26152: Microsoft says “we’re pretty sure” crypto can EoP… aka update before you guess wrong. Windows admins: as usual, trust the patch, not the vibes. https://t.co/hiLCcbJJJU WindowsSecurity LocalPrivilegeEscalation Cve202626152 https://t.co/cgNnN74y09...

7CVSS6.2AI score0.00264EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/14 12:00 a.m.•2 views

CVE-2026-32077: Untrusted Pointer Dereference

Untrusted pointer dereference in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...

7.8CVSS5.5AI score0.00414EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/14 12:00 a.m.•2 views

CVE-2026-32078: Use After Free

Use after free in Windows Projected File System allows an authorized attacker to elevate privileges locally...

7.8CVSS6.1AI score0.00333EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/14 12:00 a.m.•2 views

CVE-2026-27920: Untrusted Pointer Dereference

Untrusted pointer dereference in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...

7.8CVSS5.5AI score0.00333EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/14 12:00 a.m.•2 views

CVE-2026-27912: Improper Authorization

Improper authorization in Windows Kerberos allows an authorized attacker to elevate privileges over an adjacent network...

8CVSS5.8AI score0.00427EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/14 12:00 a.m.•1 views

CVE-2026-26182: Use After Free

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

7CVSS6.1AI score0.00264EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/14 12:00 a.m.•3 views

CVE-2026-33098: Use After Free

Use after free in Windows Container Isolation FS Filter Driver allows an authorized attacker to elevate privileges locally...

7.8CVSS6.1AI score0.00333EPSS
SaveExploits0References3
Rows per page
Query Builder