98 matches found
CVE-2017-0213
CVE-2017-0213: Windows COM Elevation of Privilege Vulnerability Description Author: Google Security Research CVE: 2017-0213 EDB-ID: 42020 References: Project-Zero Microsoft Exploit-Database Video: Youtube Affected Products Product| Version| Update| Build| Tested ---|---|---|---|--- Windows 10|...
CVE-2017-0213
CVE-2017-0213: Windows COM Elevation of Privilege Vulnerability Description Author: Google Security Research CVE: 2017-0213 EDB-ID: 42020 References: Project-Zero Microsoft Exploit-Database Video: Youtube Affected Products Product| Version| Update| Build| Tested ---|---|---|---|--- Windows 10|...
CVE-2026-94531
Stack-based buffer overflow in Windows COM allows an authorized attacker to elevate privileges locally...
CVE-2026-119855
Buffer over-read in Windows COM+ Event System Service allows an authorized attacker to disclose information locally...
CVE-2026-113767
Inclusion of functionality from untrusted control sphere in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...
CVE-2026-113769
Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...
CVE-2026-105533
Release of invalid pointer or reference in Windows COM allows an authorized attacker to elevate privileges locally...
CVE-2026-119855
A buffer over-read vulnerability exists in the Windows COM+ Event System Service , which could allow an authorized attacker to disclose information locally. This vulnerability is tracked as CVE-2026-119855 and is associated with CWE-126 . Remediation for this issue is provided via official Micros...
EUVD-2026-122368
Buffer over-read in Windows COM+ Event System Service allows an authorized attacker to disclose information locally...
CVE-2026-105533
The Windows COM component is vulnerable to a Release of invalid pointer or reference (CWE-763) and a Heap-based Buffer Overflow (CWE-122). This security flaw allows an authorized attacker to achieve local privilege escalation . Exploitation details and specific attack vectors are not provided in ...
CVE-2026-113769
A Use after free vulnerability exists in the Windows COM+ Event System Service . This flaw could allow an authorized attacker to achieve local privilege escalation . No specific versions, root causes, or exploit details are provided in the documents. Remediation is available via official security...
EUVD-2026-121934
Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...
CVE-2026-113767
CVE-2026-113767 is a privilege escalation vulnerability in the Windows COM+ Event System Service . The root cause involves the inclusion of functionality from an untrusted control sphere (CWE-829) and untrusted pointer dereference (CWE-822). This flaw allows an authorized attacker to achieve loca...
CVE-2026-94531
A stack-based buffer overflow vulnerability exists in Windows COM , which could allow an authorized attacker to perform local privilege elevation . While the provided documents confirm the existence of this vulnerability and its impact on privilege levels, specific technical details regarding the...
EUVD-2026-121739
Stack-based buffer overflow in Windows COM allows an authorized attacker to elevate privileges locally...
Windows COM+ Event System Service Elevation of Privilege Vulnerability
Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...
Windows COM+ Event System Service Elevation of Privilege Vulnerability
Inclusion of functionality from untrusted control sphere in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...
PT-2026-143600
Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...