The vulnerability of the Collaborative Translation Framework (CTFMON) subsystem in Windows operating systems, which allows a hacker to increase their privileges

The vulnerability of the Collaborative Translation Framework CTFMON in Windows operating systems is related to the improper handling of symbolic links before accessing a file. Exploiting this vulnerability can allow an attacker to increase their privileges...

CVE-2026-45586 Windows Collaborative Translation Framework (CTFMON) Elevation of Privilege Vulnerability

...

CVE-2026-45586 Windows Collaborative Translation Framework (CTFMON) Elevation of Privilege Vulnerability

...

EUVD-2026-35548

Improper link resolution before file access 'link following' in Windows Collaborative Translation Framework allows an authorized attacker to elevate privileges locally...

Windows Collaborative Translation Framework (CTFMON) Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Windows Collaborative Translation Framework allows an authorized attacker to elevate privileges locally...

CVE-2026-45586: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows Collaborative Translation Framework allows an authorized attacker to elevate privileges locally...

Windows Zero-Days Expose BitLocker Bypasses And CTFMON Privilege Escalation

An anonymous cybersecurity researcher who disclosed three Microsoft Defender vulnerabilities has returned with two more zero-days involving a BitLocker bypass and a privilege escalation impacting Windows Collaborative Translation Framework CTFMON. The security defects have been codenamed YellowKe...

Microsoft Windows Collaborative Translation Framework Security Vulnerability

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation. A security vulnerability exists in Microsoft Windows Collaborative Translation Framework. An attacker could exploit this vulnerability to obtain sensitive information. The...

CVE-2023-32009

Windows Collaborative Translation Framework Elevation of Privilege Vulnerability...

CVE-2023-32009

Windows Collaborative Translation Framework Elevation of Privilege Vulnerability...

CVE-2023-32009 Windows Collaborative Translation Framework Elevation of Privilege Vulnerability

...

PT-2023-3169 · Microsoft · Windows Collaborative Translation Framework +1

Name of the Vulnerable Software and Affected Versions: Windows Collaborative Translation Framework affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Collaborative Translation Framework component of Windows operating systems. This...

CVE-2023-32009: Improper Access Control

Windows Collaborative Translation Framework Elevation of Privilege Vulnerability...

KB5027215: Windows 10 Version 21H2 / Windows 10 Version 22H2 Security Update (June 2023)

The remote Windows host is missing security update 5027215. It is, therefore, affected by multiple vulnerabilities - Windows Pragmatic General Multicast PGM Remote Code Execution Vulnerability CVE-2023-29363, CVE-2023-32014, CVE-2023-32015 - Windows Collaborative Translation Framework Elevation o...

KB5027225: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (June 2023)

The remote Windows host is missing security update 5027225. It is, therefore, affected by multiple vulnerabilities - Windows Pragmatic General Multicast PGM Remote Code Execution Vulnerability CVE-2023-29363, CVE-2023-32014, CVE-2023-32015 - Windows Collaborative Translation Framework Elevation o...

CVE-2017-16008: Improper Neutralization of Input During Web Page Generation

i18next is a language translation framework. Because of how the interpolation is implemented, making replacements from the dictionary one at a time, untrusted user input can use the name of one of the dictionary keys to inject script into the browser. This affects i18next =1.10.2...

i18next Cross-Site Scripting Vulnerability

i18next is a translation loading framework written in JavaScript. A cross-site scripting vulnerability exists in i18next 2.0.0 and later versions, which stems from the program failing to encode user input. A remote attacker can exploit the vulnerability to inject arbitrary web script or HTML...

CVE-2017-16010: Improper Neutralization of Input During Web Page Generation

i18next is a language translation framework. When using the .init method, passing interpolation options without passing an escapeValue will default to undefined rather than the assumed true. This can result in a cross-site scripting vulnerability because user input is assumed to be escaped, but i...