CVE-2017-0213

CVE-2017-0213: Уязвимость повышения привилегий COM в Windows Описание Автор: Google Security Research CVE: 2017-0213 EDB-ID: 42020 Ссылки: Project-Zero Microsoft Exploit-Database Видео: Youtube Затронутые продукты Продукт| Версия| Обновление| Сборка| Протестировано ---|---|---|---|--- Windows 10|...

CVE-2017-0213

CVE-2017-0213 : Vulnérabilité d'élévation de privilèges COM Windows Description Auteur : Google Security Research CVE: 2017-0213 EDB-ID: 42020 Références : Project-Zero Microsoft Exploit-Database Vidéo : Youtube Produits concernés Produit| Version| Mise à jour| Build| Testé ---|---|---|---|---...

CVE-2026-57105

creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:11+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 22:01:22+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286 2026-08-12 01:01:07+00:00| seen|...

Agentic Vulnerability Reasoning on Windows COM Binaries

Windows Component Object Model COM services run with elevated privileges and are widely accessible to authenticated users, making race conditions in these binaries a critical surface for local privilege escalation. We present SLYP, an end-to-end agentic pipeline that discovers race condition...

CVE-2026-20806

Access of resource using incompatible type 'type confusion' in Windows COM allows an authorized attacker to disclose information locally...

CVE-2026-32162

Acceptance of extraneous untrusted data with trusted data in Windows COM allows an unauthorized attacker to elevate privileges locally...

Microsoft Windows COM 安全漏洞

Microsoft Windows COM is a technology developed by Microsoft Corporation in the United States, aimed at software reuse. COM is described as a platform-independent, distributed, object-oriented system used for creating interactive binary software components. There are security vulnerabilities in...

CVE-2026-20806: Access of Resource Using Incompatible Type

Access of resource using incompatible type 'type confusion' in Windows COM allows an authorized attacker to disclose information locally...

CVE-2026-32162: Acceptance of Extraneous Untrusted Data With Trusted Data

Acceptance of extraneous untrusted data with trusted data in Windows COM allows an unauthorized attacker to elevate privileges locally...

CVE-2025-58725

Heap-based buffer overflow in Windows COM allows an authorized attacker to elevate privileges locally...

CVE-2025-58725

Heap-based buffer overflow in Windows COM allows an authorized attacker to elevate privileges locally...

CVE-2025-58725

Heap-based buffer overflow in Windows COM allows an authorized attacker to elevate privileges locally...

CVE-2025-58725: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows COM allows an authorized attacker to elevate privileges locally...

EUVD-2017-0580

Malware in sbrugna...

EUVD-2019-1322

Malware in sbrugna...

EUVD-2025-2337

Malicious code in bioql PyPI...

EUVD-2025-2353

Malicious code in bioql PyPI...

EUVD-2022-44278

Malicious code in bioql PyPI...

CVE-2020-0685

An elevation of privilege vulnerability exists when Windows improperly handles COM object creation, aka 'Windows COM Server Elevation of Privilege Vulnerability'...

CVE-2025-21288

Windows COM Server Information Disclosure Vulnerability...