262 matches found
CVE-2023-21752
CVE-2023-21752 PoC for arbitrary file delete vulnerability in Windows Backup service. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21752 This repo contains two exploits: v1 - Just perform file delete of user choice v2 - Tries to abuse arb delete to spawn elevated cmd shell not...
CVE-2026-19820 Backblaze Client for Windows Improper Link Resolution Vulnerability
A vulnerability in the Backblaze Client allows a local user to make the system not bootable by creating a link from Backblaze's folder to Windows OS system files during a backup. Successful exploitation requires an administrator-level system change that results in the absence of specific Windows ...
The vulnerability of the Windows Backup Service allows attackers to exploit their privileges.
The vulnerability of the Windows Backup Service in operating systems involves the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
CVE-2026-62908
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Backup Engine allows an authorized attacker to elevate privileges locally...
CVE-2026-62908
CVE-2026-62908: A race condition in the Windows Backup Engine allows local privilege escalation by an authorized attacker. Documented impact: high across confidentiality, integrity, and availability (CVSS 3.1 base score 7.0; LOCAL access; HIGH likelihood of impact). Affected component is the Wind...
CVE-2026-62908 Windows Backup Engine Elevation of Privilege Vulnerability
...
CVE-2026-62908 Windows Backup Engine Elevation of Privilege Vulnerability
...
EUVD-2026-56411
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Backup Engine allows an authorized attacker to elevate privileges locally...
Windows Backup Engine Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Backup Engine allows an authorized attacker to elevate privileges locally...
PT-2026-70595
Name of the Vulnerable Software and Affected Versions Windows Backup Engine affected versions not specified Description A race condition occurs in the Windows Backup Engine due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate privileges local...
The vulnerability of the Windows Backup Service allows attackers to exploit their privileges.
The vulnerability of the Windows Backup Service in operating systems relates to competitive access to resources a state of competition. Exploiting this vulnerability can allow an attacker to enhance their privileges...
The vulnerability of Windows operating system backup services allows attackers to increase their privileges.
The vulnerability of Windows operating system backup services is related to errors in handling symbolic links. Exploiting this vulnerability can allow an attacker to increase their privileges...
EUVD-2026-45061
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Backup Engine allows an authorized attacker to elevate privileges locally...
CVE-2026-58598
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Backup Engine allows an authorized attacker to elevate privileges locally...
CVE-2026-58598 Windows Backup Service Elevation of Privilege Vulnerability
...
CVE-2026-58598 Windows Backup Service Elevation of Privilege Vulnerability
...
CVE-2026-58598
Technical details are not publicly available in the provided documents. Monitor for updates from vendors and advisories for CVE-2026-58598.
CVE-2026-58598
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Backup Engine allows an authorized attacker to elevate privileges locally...
Windows Backup Service Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Backup Engine allows an authorized attacker to elevate privileges locally...