CVE-2026-0232

A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows allows a local Windows administrator to disable the agent. This issue may be leveraged by malware to perform malicious activity without detection...

CVE-2025-60721

Privilege context switching error in Windows Administrator Protection allows an authorized attacker to elevate privileges locally...

CVE-2025-60718

Untrusted search path in Windows Administrator Protection allows an authorized attacker to elevate privileges locally...

CVE-2025-60721

Privilege context switching error in Windows Administrator Protection allows an authorized attacker to elevate privileges locally...

EUVD-2025-93412

Untrusted search path in Windows Administrator Protection allows an authorized attacker to elevate privileges locally...

Windows Administrator Protection Elevation of Privilege Vulnerability

Untrusted search path in Windows Administrator Protection allows an authorized attacker to elevate privileges locally...

Windows Administrator Protection Elevation of Privilege Vulnerability

Privilege context switching error in Windows Administrator Protection allows an authorized attacker to elevate privileges locally...

PT-2025-46479

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description An issue exists in Windows Administrator Protection related to an untrusted search path. This allows an authorized attacker to elevate privileges locally. Approximately 1 billion devices...

EUVD-2024-49349

Malicious code in bioql PyPI...

CVE-2024-29863

A race condition in the installer executable in Qlik Qlikview before versions May 2022 SR3 12.70.20300 and May 2023 SR2 12,80.20200 may allow an existing lower privileged user to cause code to be executed in the context of a Windows Administrator...

CVE-2024-29863

A race condition in the installer executable in Qlik Qlikview before versions May 2022 SR3 12.70.20300 and May 2023 SR2 12,80.20200 may allow an existing lower privileged user to cause code to be executed in the context of a Windows Administrator...

CVE-2024-29863

A race condition in the installer executable in Qlik Qlikview before versions May 2022 SR3 12.70.20300 and May 2023 SR2 12,80.20200 may allow an existing lower privileged user to cause code to be executed in the context of a Windows Administrator...

CVE-2024-29863

Qlikview contains a local privilege escalation in its MSI installer. The Red Team PoC shows a race condition during MSI repair (msiexec /fa) that causes the installer to load a DLL from C:\Users\AppData\Local\Temp, which an unprivileged user can replace in a narrow window to execute code as NT AU...

CVE-2024-29863

A race condition in the installer executable in Qlik Qlikview before versions May 2022 SR3 12.70.20300 and May 2023 SR2 12,80.20200 may allow an existing lower privileged user to cause code to be executed in the context of a Windows Administrator...

CVE-2022-4326 Trellix xAgent permission bypass vulnerability

Improper preservation of permissions vulnerability in Trellix Endpoint Agent xAgent prior to V35.31.22 on Windows allows a local user with administrator privileges to bypass the product protection to uninstall the agent via incorrectly applied permissions in the removal protection functionality...

TPM 2.0 Sleep-Wake Error in BIOS Firmware - Lenovo Support US

No description provided...

McAfee VirusScan Enterprise Resource Access Bypass Vulnerability

McAfee VirusScan Enterprise is prone to resource access bypass vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

HP-Data-Protector-EXEC_BAR

The omniinet service, which runs by default on port 5555, is susceptible to numerous remotely exploitable vulnerabilities. By sending a malicious EXECBAR packet opcode 11, a remote attacker can force the omniinet service to run an arbitrary command. On Windows, the omniinet service is running as...