644 matches found
Microsoft DWM Core Library 缓冲区错误漏洞
The Microsoft DWM Core Library is a core library of Microsoft Windows from the company Microsoft. There are security vulnerabilities in the Microsoft DWM Core Library. Attackers can exploit these vulnerabilities to obtain sensitive information. The following products and versions are affected:...
CVE-2026-28577
In addWindow of WindowManagerService.java, there is a possible tapjacking issue due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
The vulnerability of the `addWindow` method in the `WindowManagerService.java` class of the Android operating system’s Framework component allows a hacker to escalate their privileges.
The vulnerability of the addWindow method in the WindowManagerService.java class of the Android operating system’s framework component is related to an improper limitation on the number of displayed user interface layers or frames. Exploiting this vulnerability could allow a malicious individual ...
CVE-2026-28577
In addWindow of WindowManagerService.java, there is a possible tapjacking issue due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-28577
The WindowManagerService.java class in the Android Framework component contains a vulnerability in its addWindow method. This issue stems from an improper limitation on the number of displayed user interface layers or frames, creating a tapjacking/overlay attack vector. A malicious actor could ex...
CVE-2026-28577
In addWindow of WindowManagerService.java, there is a possible tapjacking issue due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-28577
In addWindow of WindowManagerService.java, there is a possible tapjacking issue due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-28577
In addWindow of WindowManagerService.java, there is a possible tapjacking issue due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-389950114
In addWindow of WindowManagerService.java, there is a possible tapjacking issue due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-45610
Name of the Vulnerable Software and Affected Versions WindowManagerService affected versions not specified Description A tapjacking issue exists in the addWindow function of WindowManagerService.java, where a tapjacking or overlay attack—a technique where a malicious application overlays a...
The vulnerability of the DWM Core Library in Windows operating systems allows attackers to enhance their privileges.
The vulnerability of the DWM Core Library in Windows operating systems is related to overflowing buffers in dynamic memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
CVE-2026-35419
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally...
EUVD-2026-29717
Integer overflow or wraparound in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
EUVD-2026-29595
Buffer over-read in Windows DWM Core Library allows an authorized attacker to disclose information locally...
CVE-2026-42896
Integer overflow or wraparound in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
CVE-2026-34336 Windows DWM Core Library Elevation of Privilege Vulnerability
...
CVE-2026-34336 Windows DWM Core Library Elevation of Privilege Vulnerability
...
CVE-2026-35419 Windows DWM Core Library Information Disclosure Vulnerability
...
CVE-2026-35419
CVE-2026-35419 describes an out-of-bounds read in Windows DWM Core Library that can disclose information locally by an authorized user. The available sources identify the vulnerability as a local-attack vector with low privileges required and no user interaction, resulting in a high confidentiali...