5233 matches found
Microsoft Windows Cloud Files Mini Filter Driver elevation of privilege vulnerability (CNVD-2026-17154)
Microsoft Windows Cloud Files Mini Filter Driver is a cloud file filter driver from Microsoft USA. An elevation of privilege vulnerability exists in Microsoft Windows Cloud Files Mini Filter Driver due to an untrusted pointer dereference flaw in the Cloud Files Mini-Filter Driver component. An...
Microsoft Windows SMB Server Elevation of Privilege Vulnerability (CNVD-2026-10677)
Microsoft Windows SMB Server is a network file-sharing protocol from Microsoft. It allows applications on a computer to read and write files and request services from server programs on a computer network. An elevation of privilege vulnerability exists in Microsoft Windows SMB Server due to...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001050)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001050 advisory. An elevation of privilege vulnerability in the Upstream kernel bluez. Product: Android. Versions: Android kernel. Android ID: A-63527053. Tenable has extracted the...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000610)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000610 advisory. An elevation of privilege vulnerability in the kernel sound timer. Product: Android. Versions: Android kernel. Android ID A-37240993. Tenable has extracted the...
PT-2026-3326
Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The Microsoft Edge Elevation Service has a design flaw where a privileged COM interface does not properly check the permissions of the process making the request. A standard local user...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000910)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000910 advisory. A elevation of privilege vulnerability in the Broadcom wi-fi driver. Product: Android. Versions: Android kernel. Android ID: A-37351060. References: B-V2017060101...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002686)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002686 advisory. An elevation of privilege vulnerability in the Upstream kernel bluez. Product: Android. Versions: Android kernel. Android ID: A-63527053. Tenable has extracted the...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003352)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003352 advisory. An elevation of privilege vulnerability in the kernel networking subsystem could enable a local malicious application to execute arbitrary code within the context of...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002791)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002791 advisory. An elevation of privilege vulnerability in the kernel v4l2 video driver. Product: Android. Versions: Android kernel. Android ID A-34624167. Tenable has extracted the...
CVE-2026-20920
Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally...
CVE-2026-20803
Missing authentication for critical function in SQL Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-20926
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows SMB Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-20923
Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally...
CVE-2026-20849
Reliance on untrusted inputs in a security decision in Windows Kerberos allows an authorized attacker to elevate privileges over a network...
CVE-2026-20817
Improper handling of insufficient permissions or privileges in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
CVE-2026-20848
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows SMB Server allows an authorized attacker to elevate privileges over a network...
WordPress plugin Modular DS 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...
CVE-2022-50914 EaseUS Data Recovery - 'ensserver.exe' Unquoted Service Path
EaseUS Data Recovery 15.1.0.0 contains an unquoted service path vulnerability in the EaseUS UPDATE SERVICE executable. Attackers can exploit the unquoted path to inject and execute malicious code with elevated LocalSystem privileges...
