Lucene search
+L

170112 matches found

Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•3 views

PT-2026-113481

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.79 Description A use after free issue in the Browser component allows a remote attacker to execute arbitrary code outside the sandbox by inducing the user to visit a crafted HTML page. Use after free ...

9.6CVSS7.2AI score0.00338EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•2 views

PT-2026-113480

Use after free in SVG in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Critical...

7.4AI score0.00303EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•4 views

PT-2026-113490

Use after free in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

7.4AI score0.00323EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•5 views

PT-2026-111431

Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, and Firefox ESR 153.5...

5.4CVSS6AI score0.00228EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•3 views

PT-2026-111438

Use-after-free in the DOM: Bindings WebIDL component. This vulnerability was fixed in Firefox 158 and Firefox ESR 153.5...

5.4CVSS6AI score0.00217EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2026/10/13 12:00 a.m.•2 views

The vulnerability of the DevTools suite for web development in Google Chrome and Microsoft Edge browsers allows a hacker to trigger a service failure.

The vulnerability of the DevTools suite for web development in Google Chrome and Microsoft Edge relates to the use of memory after it is released. Exploiting this vulnerability could allow a malicious actor to cause a service failure through a specially created HTML page...

10CVSS8.5AI score0.00462EPSS
SaveExploits0References8Affected Software4
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•6 views

PT-2026-113470

Use after free in ShapeDetection in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

7.4AI score0.00296EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•2 views

Microsoft Windows: CVE-2026-70102: Windows Spaceport.sys Elevation of Privilege Vulnerability

Use after free in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally...

7.8CVSS6.2AI score0.00341EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•2 views

Microsoft Windows: CVE-2026-96308: Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

7.8CVSS6.2AI score0.00318EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•3 views

Microsoft Windows: CVE-2026-83722: Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability

Use after free in Microsoft Local Security Authority Server lsasrv allows an authorized attacker to elevate privileges locally...

7CVSS6.2AI score0.00199EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•3 views

Microsoft Windows: CVE-2026-83790: Windows Hello Elevation of Privilege Vulnerability

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...

7CVSS6.1AI score0.00252EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•1 views

Microsoft Windows: CVE-2026-70004: Remote Desktop Client Remote Code Execution Vulnerability

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

7.5CVSS6.7AI score0.00569EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•2 views

Microsoft Windows: CVE-2026-85833: Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability

Use after free in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...

7.8CVSS6.2AI score0.00318EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•1 views

Microsoft Windows: CVE-2026-97809: Windows Broadcast DVR User Service Elevation of Privilege Vulnerability

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...

7.8CVSS6.2AI score0.00263EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•3 views

Microsoft Windows: CVE-2026-72969: Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability

Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...

7CVSS6.2AI score0.0027EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•3 views

Microsoft Windows: CVE-2026-88152: Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability

Use after free in Windows Background Intelligent Transfer Service BITS allows an authorized attacker to elevate privileges locally...

7.8CVSS6.2AI score0.00355EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•3 views

Microsoft Office: CVE-2026-96997: Microsoft Office OneNote Elevation of Privilege Vulnerability

Use after free in Microsoft Office OneNote allows an authorized attacker to elevate privileges locally...

7.8CVSS6.2AI score0.00306EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•1 views

Microsoft Windows: CVE-2026-83917: Windows ALPC Elevation of Privilege Vulnerability

Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally...

7CVSS6.2AI score0.00223EPSS
SaveExploits0References2
osv-ubuntu
osv-ubuntu
•added 2026/10/13 12:00 a.m.•6 views

UBUNTU-CVE-2026-98385

In the Linux kernel, the following vulnerability has been resolved: sched/cache: Decouple schedcachegroup from mm to fix UAF Currently the sched cache grouping is by mm and the scheduling statistics schedcachestat lives in the mm structure. This ties the life cycle of scheduling stats with mm. In...

6.8AI score0.00145EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•5 views

PT-2026-111446

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, and Firefox ESR 153.5...

5.4CVSS6AI score0.00228EPSS
SaveExploits0References5
Rows per page
Query Builder