Lucene search
K

12 matches found

NVD
NVD
added 2026/04/07 10:16 p.m.2 views

CVE-2026-34765

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.5, 40.8.5, 41.1.0, and 42.0.0-alpha.5, when a renderer calls window.open with a target name, Electron did not correctly scope the named-window lookup to the opener's browsing...

8.8CVSS0.00025EPSS
Exploits0References1
Snyk
Snyk
added 2026/04/07 3:52 p.m.2 views

Exposure of Resource to Wrong Sphere

Overview electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Exposure of Resource to Wrong Sphere via the window.open function. An attacker can gain access to or manipulate the browsin...

8.8CVSS5.9AI score0.00025EPSS
Exploits0References2
Snyk
Snyk
added 2026/04/07 3:52 p.m.2 views

Exposure of Resource to Wrong Sphere

Overview org.webjars.npm:electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Exposure of Resource to Wrong Sphere via the window.open function. An attacker can gain access to or...

8.8CVSS5.9AI score0.00025EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2019-9629

Malware in sbrugna...

7.8CVSS8AI score0.00376EPSS
Exploits0References4
OSV
OSV
added 2019/06/12 2:29 p.m.1 views

CVE-2019-1044

A security feature bypass vulnerability exists when Windows Secure Kernel Mode fails to properly handle objects in memory. To exploit the vulnerability, a locally-authenticated attacker could attempt to run a specially crafted application on a targeted system. An attacker who successfully exploit...

5.3CVSS7.1AI score0.00376EPSS
Exploits0References2
Microsoft CVE
Microsoft CVE
added 2019/06/11 7:0 a.m.25 views

Windows Secure Kernel Mode Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists when Windows Secure Kernel Mode fails to properly handle objects in memory. To exploit the vulnerability, a locally-authenticated attacker could attempt to run a specially crafted application on a targeted system. An attacker who successfully exploit...

7.8CVSS2AI score0.00376EPSS
Exploits0
Microsoft CVE
Microsoft CVE
added 2017/06/13 7:0 a.m.34 views

Windows Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Windows Secure Kernel Mode fails to properly handle objects in memory. To exploit the vulnerability, a locally-authenticated attacker could attempt to run a specially crafted application on a targeted system. An attacker who successfully exploit...

7.3CVSS3.2AI score0.25242EPSS
Exploits0
OpenVAS
OpenVAS
added 2016/12/14 12:0 a.m.21 views

Microsoft Windows Secure Kernel Mode Privilege Elevation Vulnerability (3205642)

This host is missing an important security update according to Microsoft Bulletin MS16-150. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

7.8CVSS7.4AI score0.0012EPSS
Exploits0References4
Microsoft CVE
Microsoft CVE
added 2016/12/13 8:0 a.m.21 views

Windows Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Windows Secure Kernel Mode fails to properly handle objects in memory. To exploit the vulnerability, a locally-authenticated attacker could attempt to run a specially crafted application on a targeted system. An attacker who successfully exploit...

7.8CVSS3.2AI score0.0012EPSS
Exploits0
NVD
NVD
added 2012/11/14 12:55 a.m.16 views

CVE-2012-1896

Microsoft .NET Framework 2.0 SP2 and 3.5.1 does not properly consider trust levels during construction of output data, which allows remote attackers to obtain sensitive information via 1 a crafted XAML browser application aka XBAP or 2 a crafted .NET Framework application, aka "Code Access Securi...

5CVSS6AI score0.48687EPSS
Exploits0References6
Prion
Prion
added 2012/11/14 12:55 a.m.19 views

Information disclosure

Microsoft .NET Framework 2.0 SP2 and 3.5.1 does not properly consider trust levels during construction of output data, which allows remote attackers to obtain sensitive information via 1 a crafted XAML browser application aka XBAP or 2 a crafted .NET Framework application, aka "Code Access Securi...

5CVSS6.5AI score0.48687EPSS
Exploits0References6Affected Software1
Tenable Nessus
Tenable Nessus
added 2005/04/20 12:0 a.m.20 views

Mac OS X Security Update 2005-004

The remote host is missing Security Update 2005-004. This security update contains security fixes for the following application : - iSync local privilege escalation TRUSTED...

7.2CVSS5.5AI score0.00196EPSS
Exploits1References1
Rows per page
Query Builder