Lucene search
+L

263243 matches found

Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.16 views

PT-2026-58351

Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Services affected versions not specified Description A use after free condition in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network. Use after free is a memory corruption...

8.8CVSS6.3AI score0.00682EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.16 views

PT-2026-58604

Name of the Vulnerable Software and Affected Versions Windows MIDI Service Module affected versions not specified Description A use-after-free condition in the Windows MIDI Service Module allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that...

7.8CVSS5.8AI score0.0026EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2026/07/14 12:0 a.m.10 views

Microsoft Windows Subsystem for Linux (WSL2) < 2.7.8 EoP (CVE-2026-57968) (July 2026)

The version of Microsoft Windows Subsystem for Linux WSL2 on the remote Windows host is prior to 2.7.8. It is, therefore, affected by an elevation of privilege vulnerability: - Buffer over-read in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally...

7.8CVSS6.1AI score0.00311EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/07/14 12:0 a.m.9 views

Zoom Workplace VDI Client < 6.5.17 Vulnerability (ZSB-26012)

The version of Zoom Workplace VDI Client installed on the remote host is prior to 6.5.17. It is, therefore, affected by a vulnerability as referenced in the ZSB-26012 advisory. - A time-of-check to time-of-use TOCTOU race condition in the installation and uninstallation process of certain Zoom...

7CVSS5.7AI score0.00094EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/07/14 12:0 a.m.11 views

KB5099539: Windows 10 version 21H2 / Windows 10 Version 22H2 Security Update (July 2026)

The remote Windows host is missing security update 5099539. It is, therefore, affected by multiple vulnerabilities - Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to execute code over a network. CVE-2026-58594 - Heap-based buffer overflow in Windows FTP Service...

9.9CVSS7.3AI score0.035EPSS
SaveExploits8References313
Tenable Nessus
Tenable Nessus
added 2026/07/14 12:0 a.m.9 views

EulerOS 2.0 SP10 : httpd (EulerOS-SA-2026-2693)

According to the versions of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Allocation of Resources Without Limits or Throttling vulnerability in Apache HTTP Server's modmd via OCSP response data. This issue affects Apache...

9.8CVSS6.2AI score0.01376EPSS
SaveExploits1References6
Kaspersky
Kaspersky
added 2026/07/14 12:0 a.m.7 views

KLA91142 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, gain privileges. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Azure Monitor Agent Metri...

8.8CVSS5.8AI score0.01149EPSS
SaveExploits1References7
Kaspersky
Kaspersky
added 2026/07/14 12:0 a.m.6 views

KLA91148 Multiple vulnerabilities in Microsoft Open Source Software

Multiple vulnerabilities were found in Microsoft Open Source Software. Malicious users can exploit these vulnerabilities to gain privileges, spoof user interface. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Windows Subsystem for Linux WSL2 Kernel can...

7.8CVSS5.4AI score0.00311EPSS
SaveExploits0References3
Kaspersky
Kaspersky
added 2026/07/14 12:0 a.m.12 views

KLA91141 Multiple vulnerabilities in Microsoft Apps

Multiple vulnerabilities were found in Microsoft Apps. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, spoof user interface. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Microsoft PC Manager can be exploit...

9.8CVSS7.8AI score0.00736EPSS
SaveExploits0References6
Kaspersky
Kaspersky
added 2026/07/14 12:0 a.m.10 views

KLA91144 Multiple vulnerability in Microsoft Device

Multiple vulnerability was found in Microsoft Device. Malicious users can exploit this vulnerability to bypass security restrictions, gain privileges. Original advisories CVE-2026-48581 Exploitation CVE list CVE-2026-48581 critical KB list Solution Install necessary updates from the KB section,...

7.8CVSS7.3AI score0.00214EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.21 views

PT-2026-58137

Name of the Vulnerable Software and Affected Versions Microsoft Surface affected versions not specified Description Insufficient granularity of access control allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no information about a newer version...

7.8CVSS7.1AI score0.00214EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.16 views

PT-2026-58327

Name of the Vulnerable Software and Affected Versions Windows affected versions prior to July 2026 patchday Description An incorrect type conversion or cast in Windows Notification allows an authorized attacker to elevate privileges locally. This issue occurs due to a bad type cast, which is a...

7.8CVSS6AI score0.00311EPSS
SaveExploits0References3
OSV
OSV
added 2026/07/14 12:0 a.m.8 views

UBUNTU-CVE-2026-47300

Incorrect implementation of authentication algorithm in ASP.NET Core allows an authorized attacker to elevate privileges over a network...

8.8CVSS6.1AI score0.00527EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.8 views

PT-2026-58647

Name of the Vulnerable Software and Affected Versions Microsoft Input Method Editor IME affected versions not specified Description A heap-based buffer overflow occurs in the Microsoft Input Method Editor IME, which is a system component that allows users to input characters for languages that do...

8.8CVSS6.1AI score0.00317EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.7 views

PT-2026-58270

Name of the Vulnerable Software and Affected Versions Azure CycleCloud versions prior to 8.9.1-3806 Description Missing authorization allows an authorized attacker to elevate privileges over a network. Recommendations Upgrade to build 8.9.1-3806...

6.5CVSS6.1AI score0.00362EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.10 views

PT-2026-57980

Name of the Vulnerable Software and Affected Versions Bitdefender Total Security versions prior to 27.0.58.315 Bitdefender Internet Security versions prior to 27.0.58.315 Description An improper link resolution before file access, also known as link following, exists in the File Shredder module...

7CVSS5.2AI score0.00121EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.15 views

PT-2026-58353

Name of the Vulnerable Software and Affected Versions Windows LUAFV affected versions not specified Description A race condition occurs in Windows LUAFV due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate privileges locally on the system...

7CVSS7AI score0.00188EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.7 views

PT-2026-58201

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description A use after free issue in the Windows Kernel allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs when an application...

7.1CVSS6.3AI score0.0024EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.17 views

PT-2026-58184

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A use-after-free issue in the Graphics Kernel allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption flaw that occur...

7CVSS5.8AI score0.00199EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.13 views

PT-2026-58167

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description A use after free flaw in the Windows Kernel allows an authorized attacker to bypass security boundaries and elevate privileges locally. Use after free is a memory corruption issue that...

8.8CVSS6AI score0.01897EPSS
SaveExploits0References6
Rows per page
Query Builder