299 matches found
CVE-2026-27199-werkzeug-safe-join-bypass-PoC
CVE-2026-27199 PoC: Werkzeug safejoin Windows Device-Name Bypass Status: Publicly disclosed. Fixed in werkzeug 3.1.6. Severity: Moderate Reporter: @alimezar Advisory: GHSA-29vq-49wr-vm6x Affected Versions Package| Affected| Patched ---|---|--- werkzeug| Requires: Windows, Python 3.8+, werkzeug No...
CVE-2026-96854
Access of resource using incompatible type 'type confusion' in Windows Device Association Service allows an authorized attacker to disclose information locally...
CVE-2026-85904
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Device Association Service allows an authorized attacker to elevate privileges locally...
CVE-2026-85815
Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally...
CVE-2026-85342
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...
CVE-2026-85352
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...
CVE-2026-85336
Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally...
CVE-2026-85331
Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information over a network...
CVE-2026-85332
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...
CVE-2026-84014
Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally...
CVE-2026-83792
Incorrect authorization in Windows Device Install Service allows an authorized attacker to elevate privileges locally...
CVE-2026-83710
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...
CVE-2026-70227
Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally...
CVE-2026-96854
A type confusion vulnerability exists in the Windows Device Association Service . This flaw allows an authorized attacker to perform an information disclosure locally by accessing a resource using an incompatible type. The vulnerability is associated with CWE-843 and has a CVSS 3.1 base score of ...
EUVD-2026-100234
Access of resource using incompatible type 'type confusion' in Windows Device Association Service allows an authorized attacker to disclose information locally...
EUVD-2026-100130
Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally...
CVE-2026-70227
An out-of-bounds read vulnerability exists in the Windows Device Association Service . This flaw allows an authorized attacker to perform a local information disclosure, potentially revealing sensitive data. No specific exploit code or in-the-wild exploitation details are provided in the document...
CVE-2026-83792
An incorrect authorization flaw exists in the Windows Device Install Service , which allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-863 and has been assigned a high severity score of 7.8. While the specific root cause and affected ver...