308 matches found
CVE-2026-21514_CVE-2026-21510
CVE-2026-21514 & CVE-2026-21510 Builders 1; CVE-2026-21514 SBX bypass or Protected View Bypass Rebuild document package with obfuscated path to WindowsUpdateDiagnostic.xml inside word/rels/webSettings.xml.rels Pending Check other xml configs in path C:\Windows\diagnostics\index if they support th...
CVE-2024-29988-exploit
CVE-2024-29988-exploit Exploit for Microsoft SmartScreen malicious execution april 2024 Description A critical vulnerability, CVE-2024-29988, has been discovered in Microsoft's April 2024 Patch Tuesday release. This vulnerability allows threat actors to bypass Microsoft's Mark of the Web MotW...
-EXPLOIT-CVE-2023-36025
EXPLOIT CVE-2023-36025 - Description Windows SmartScreen Security Feature Bypass Vulnerability Usage NOTE handler waiting for tcp request for target P.S configure CVE-2023-36025.vbs file to change the ip and port to machine ip and port that is being used for the TCP handler configure reverse TCP...
CVE-2026-85851
Use after free in Windows SmartScreen allows an authorized attacker to elevate privileges locally...
CVE-2026-83504
Time-of-check time-of-use toctou race condition in Windows SmartScreen allows an authorized attacker to disclose information locally...
CVE-2026-70051
Access of resource using incompatible type 'type confusion' in Windows SmartScreen allows an authorized attacker to elevate privileges locally...
CVE-2026-62879
Missing authentication for critical function in Windows SmartScreen allows an authorized attacker to perform tampering locally...
CVE-2026-108463
Improper resolution of path equivalence in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-108463
A vulnerability in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network due to the improper resolution of path equivalence (CWE-41). The impact is rated as HIGH for confidentiality, integrity, and availability. No specific exploitative code or remediatio...
CVE-2026-70051
A type confusion vulnerability in Windows SmartScreen allows an authorized attacker to achieve local privilege escalation . The root cause involves the access of resources using incompatible types, which can lead to high impact on confidentiality, integrity, and availability. The CVSS 3.1 score i...
CVE-2026-62879
A missing authentication vulnerability in Windows SmartScreen (CWE-306) allows an authorized attacker to perform tampering locally . The vulnerability impacts the integrity of the system by enabling unauthorized modifications to critical functions. No specific exploit details or in-the-wild explo...
CVE-2026-85851
A Use after free vulnerability in Windows SmartScreen allows an authorized attacker to achieve local privilege elevation . The vulnerability is classified with a CVSS v3.1 base score of 7.8 (High) . While specific component details or exploit links are not provided in the documents, an official f...
CVE-2026-83504
A Time-of-check time-of-use (TOCTOU) race condition exists in Windows SmartScreen . This vulnerability allows an authorized attacker to perform a local information disclosure . Exploitation details are not provided in the documentation, but the vulnerability is confirmed to have a MEDIUM base sev...
Windows SmartScreen Security Feature Bypass Vulnerability
Improper resolution of path equivalence in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network...
Windows SmartScreen Elevation of Privilege Vulnerability
Access of resource using incompatible type 'type confusion' in Windows SmartScreen allows an authorized attacker to elevate privileges locally...
Windows SmartScreen Elevation of Privilege Vulnerability
Use after free in Windows SmartScreen allows an authorized attacker to elevate privileges locally...
Windows SmartScreen Tampering Vulnerability
Missing authentication for critical function in Windows SmartScreen allows an authorized attacker to perform tampering locally...
PT-2026-112812
Name of the Vulnerable Software and Affected Versions Windows SmartScreen affected versions not specified Description A use-after-free condition in Windows SmartScreen allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an...
PT-2026-112181
Name of the Vulnerable Software and Affected Versions Windows SmartScreen affected versions not specified Description A type confusion issue occurs when a resource is accessed using an incompatible type. This allows an authorized attacker to elevate privileges locally on the system. Recommendatio...
PT-2026-112025
Name of the Vulnerable Software and Affected Versions Windows SmartScreen affected versions not specified Description Improper resolution of path equivalence allows an unauthorized attacker to bypass a security feature over a network. Recommendations At the moment, there is no information about a...