26 matches found
CVE-2026-102216
A type confusion vulnerability exists in the Windows StateRepository API , where an access of resource using an incompatible type allows an authorized attacker to achieve local privilege escalation . The vulnerability has a HIGH base severity score of 7.8. No specific exploitative details or patc...
CVE-2026-85911
A use after free vulnerability exists in the Windows StateRepository API . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is assigned a CVSS 3.1 base score of 7.8 (High Severity). No specific exploit links or remediation details are provided in t...
CVE-2026-85910
A buffer over-read vulnerability exists in the Windows StateRepository API . This flaw allows an authorized attacker to perform a local information disclosure, potentially exposing sensitive data. The vulnerability is associated with CWE-126 . No specific exploit details or active in-the-wild exp...
CVE-2026-70218
The Windows StateRepository API is affected by an insufficient granularity of access control vulnerability. This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-1220 and CWE-285 . No specific exploitation details or patch version...
Windows StateRepository API Elevation of Privilege Vulnerability
Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate privileges locally...
CVE-2026-49170
CVE-2026-49170 affects the Windows StateRepository API server file due to insufficient granularity in access control, enabling an authorized local attacker to elevate privileges. Base metrics show CVSS v3.1: 7.8 (HIGH) with local access, low attack complexity, low privileges required, and no user...
CVE-2026-49170: Insufficient Granularity of Access Control
Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate privileges locally...
CVE-2025-59203
Insertion of sensitive information into log file in Windows StateRepository API allows an authorized attacker to disclose information locally...
CVE-2025-59203: Insertion of Sensitive Information into Log File
Insertion of sensitive information into log file in Windows StateRepository API allows an authorized attacker to disclose information locally...
PT-2025-42095
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description An issue exists in the Windows StateRepository API where sensitive information is inserted into log files. This allows an authorized attacker to disclose information locally. Recommendations ...
EUVD-2025-20623
Malicious code in bioql PyPI...
CVE-2025-53789
Missing authentication for critical function in Windows StateRepository API allows an authorized attacker to elevate privileges locally...
Microsoft Windows 访问控制错误漏洞
Microsoft Windows is a suite of operating systems used by Microsoft Corporation USA for personal devices. An access control error vulnerability exists in the Microsoft Windows StateRepository API. An attacker could exploit the vulnerability to elevate privileges. The following products and editio...
CVE-2025-53789: Missing Authentication for Critical Function
Missing authentication for critical function in Windows StateRepository API allows an authorized attacker to elevate privileges locally...
CVE-2025-49723
Missing authorization in Windows StateRepository API allows an authorized attacker to perform tampering locally...
CVE-2025-49723
Missing authorization in Windows StateRepository API allows an authorized attacker to perform tampering locally...
CVE-2025-49723
Missing authorization in Windows StateRepository API allows an authorized attacker to perform tampering locally...
CVE-2025-49723 Windows StateRepository API Server file Tampering Vulnerability
...
