1424 matches found
CVE-2025-50165-x64-Exploit
CVE-2025-50165 Windows グラフィックスコンポーネント RCE x64 悪意あるJPEGによる重大なリモートコード実行 – Windows 11 24H2（未パッチ） CVSS 9.8 – 特権不要、操作不要 root@kitploit: CVE-2025-50165 - windowscodecs.dll 信頼できないポインタの逆参照 発見者: Zscaler ThreatLabz パッチ適用: 2025年11月 KB5040442 機能 完全なx64ヌルフリーシェルコード（calc.exe起動 – 169バイト）...
CVE-2026-21250
CVE-2026-21250: Windows HTTP.sys 本地权限提升 Windows 11 24H2 - 本地权限提升 🚨 CVE-2026-21250 漏洞的技术分析与资源 Windows 11 24H2 / 25H2 - Windows Server 2022/2025 本仓库包含 CVE-2026-21250 漏洞的技术文档与资源，该漏洞是 Windows HTTP.sys 驱动程序中不可信指针解引用（Untrusted Pointer Dereference）缺陷，可导致本地权限提升（LPE）。 📝 描述 该漏洞允许具有低权限且可本地访问系统的攻击者，利用 HTTP.s...
Security Updates for Microsoft PowerPoint Products C2R (September 2026)
The Microsoft PowerPoint Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. CVE-2026-69678, CVE-2026-69767, CVE-2026-69797, CVE-2026-80081 -...
CVE-2024-35250
CVE-2024-35250 ks.sys 驱动程序中未受信任指针解引用的 PoC https://github.com/user-attachments/assets/79e8f3e6-91d5-4145-9a78-1d36248c7284 致谢 感谢 Devcore 团队及其研究...
CVE-2026-83498
Untrusted pointer dereference in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...
CVE-2026-83939
Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...
CVE-2026-80083
Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to execute code locally...
CVE-2026-78451
Untrusted pointer dereference in Microsoft Windows SCSI Class System File allows an unauthorized attacker to elevate privileges with a physical attack...
CVE-2026-78444
Untrusted pointer dereference in Windows Failover Cluster allows an unauthorized attacker to execute code over a network...
CVE-2026-72956
Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network...
CVE-2026-69900
Untrusted pointer dereference in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-69874
Untrusted pointer dereference in Windows ALPC allows an authorized attacker to elevate privileges locally...
CVE-2026-69717
Untrusted pointer dereference in Windows Group Policy allows an authorized attacker to elevate privileges over a network...
CVE-2026-69569
Untrusted pointer dereference in Windows Print Spooler Components allows an authorized attacker to deny service over a network...
CVE-2026-69501
Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...
CVE-2026-69475
Untrusted pointer dereference in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...
CVE-2026-67378
Untrusted pointer dereference in SQL Server allows an authorized attacker to execute code over a network...
EUVD-2026-73921
Untrusted pointer dereference in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...
CVE-2026-83498
CVE-2026-83498 affects the Windows Virtualization-Based Security (VBS) Enclave and is caused by an untrusted pointer dereference , allowing an authorized local attacker with low privileges to escalate privileges without user interaction. The vulnerability carries a CVSS 3.1 score of 7.8 (HIGH) wi...