CVE-2026-41030

In ONLYOFFICE DesktopEditors before 9.3.0, the update service allows attackers to perform actions on files with SYSTEM privileges...

CVE-2026-41030

In ONLYOFFICE DesktopEditors before 9.3.0, the update service allows attackers to perform actions on files with SYSTEM privileges...

CVE-2026-41030

In ONLYOFFICE DesktopEditors before 9.3.0, the update service allows attackers to perform actions on files with SYSTEM privileges...

DesktopEditors 安全漏洞

DesktopEditors is an open-source offline office suite developed by ONLYOFFICE, supporting editing of documents, spreadsheets, presentations, and PDFs. Versions of DesktopEditors prior to 9.3.0 contained a security vulnerability. This vulnerability stemmed from defects in the update service, which...

PT-2026-33271

In ONLYOFFICE DesktopEditors before 9.3.0, the update service allows attackers to perform actions on files with SYSTEM privileges...

CVE-2026-32224

Use after free in Windows Server Update Service allows an authorized attacker to elevate privileges locally...

The vulnerability of the OpenShift Update Service, a service for updating corporate platform Red Hat OpenShift Container Platform, allows attackers to increase their privileges.

The vulnerability of the OpenShift Update Service, a component of the Red Hat OpenShift Container Platform corporate platform, is related to the improper use of standard permissions. Exploiting this vulnerability could allow an attacker to add a new user with any arbitrary UID and gain...

EUVD-2026-22410

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Server Update Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-22376

Improper input validation in Windows Server Update Service allows an unauthorized attacker to perform tampering over a network...

CVE-2026-32224

Use after free in Windows Server Update Service allows an authorized attacker to elevate privileges locally...

CVE-2026-26154

Improper input validation in Windows Server Update Service allows an unauthorized attacker to perform tampering over a network...

CVE-2026-32224

Use after free in Windows Server Update Service allows an authorized attacker to elevate privileges locally...

Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Server Update Service allows an authorized attacker to elevate privileges locally...

Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability

Use after free in Windows Server Update Service allows an authorized attacker to elevate privileges locally...

Windows Server Update Service (WSUS) Tampering Vulnerability

Improper input validation in Windows Server Update Service allows an unauthorized attacker to perform tampering over a network...

Microsoft Windows 资源管理错误漏洞

Microsoft Windows is an operating system used by personal devices by the American company Microsoft. The Microsoft Windows Server Update Service has a resource management vulnerability. Attackers can exploit this vulnerability to gain higher privileges. The following products and versions are...

PT-2026-32867

Name of the Vulnerable Software and Affected Versions Windows Server Update Service affected versions not specified Description A use after free issue in Windows Server Update Service allows an authorized attacker to elevate privileges locally. Use after free is a condition where a program...

PT-2026-32734

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2012 versions 6.2.9200.0 through 6.2.9200.26025 Description Improper input validation in Windows Server Update Service WSUS allows an unauthorized attacker to perform tampering over a network, which could potentially...

PT-2026-32751

Name of the Vulnerable Software and Affected Versions Windows Server Update Service affected versions not specified Description A race condition occurs due to concurrent execution using a shared resource with improper synchronization. This allows an authorized attacker to elevate privileges...

EUVD-2025-209304

A container privilege escalation flaw was found in certain OpenShift Update Service OSUS images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container, ev...