Lucene search
+L

43 matches found

NVD
NVD
•added 2026/10/13 7:20 p.m.•12 views

CVE-2026-85359

Improper control of generation of code 'code injection' in Windows Performance Monitor allows an authorized attacker to elevate privileges locally...

7.8CVSS0.00747EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/13 7:20 p.m.•10 views

CVE-2026-85333

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Performance Monitor allows an authorized attacker to elevate privileges locally...

7CVSS0.00203EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/13 7:00 p.m.•25 views

CVE-2026-85359

A code injection vulnerability (CWE-94) exists in Windows Performance Monitor , where improper control of code generation allows an authorized attacker to achieve local privilege elevation . The vulnerability has a CVSS 3.1 base score of 7.8 and is categorized as high severity. Official remediati...

7.8CVSS5.8AI score0.00747EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/13 7:00 p.m.•25 views

CVE-2026-85333

A race condition exists in the Windows Performance Monitor due to concurrent execution using a shared resource with improper synchronization. This vulnerability allows an authorized attacker to achieve local privilege elevation . No specific exploit details or remediation versions are provided in...

7CVSS5.8AI score0.00203EPSS
SaveExploits0References1Affected Software14
Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•13 views

Windows Performance Monitor Elevation of Privilege Vulnerability

Improper control of generation of code 'code injection' in Windows Performance Monitor allows an authorized attacker to elevate privileges locally...

7.8CVSS5.9AI score0.00747EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•13 views

Windows Performance Monitor Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Performance Monitor allows an authorized attacker to elevate privileges locally...

7CVSS5.9AI score0.00203EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•8 views

CVE-2026-85333: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Performance Monitor allows an authorized attacker to elevate privileges locally...

7CVSS5.8AI score0.00203EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•9 views

PT-2026-112723

Name of the Vulnerable Software and Affected Versions Windows Performance Monitor affected versions not specified Description A race condition occurs in Windows Performance Monitor due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate privileg...

7CVSS5.6AI score0.00203EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•7 views

CVE-2026-85359: Improper Control of Generation of Code

Improper control of generation of code 'code injection' in Windows Performance Monitor allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00747EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•10 views

Microsoft Windows: CVE-2026-85359: Windows Performance Monitor Elevation of Privilege Vulnerability

Improper control of generation of code 'code injection' in Windows Performance Monitor allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00747EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•9 views

Microsoft Windows: CVE-2026-85333: Windows Performance Monitor Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Performance Monitor allows an authorized attacker to elevate privileges locally...

6.7CVSS5.8AI score0.00203EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/08 6:18 p.m.•16 views

CVE-2026-69324

Access of resource using incompatible type 'type confusion' in Windows Performance Monitor allows an authorized attacker to elevate privileges locally...

7.8CVSS0.00333EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/08 5:15 p.m.•20 views

EUVD-2026-73455

Access of resource using incompatible type 'type confusion' in Windows Performance Monitor allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.00333EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/08 5:15 p.m.•44 views

CVE-2026-69324

CVE-2026-69324 is a local privilege elevation vulnerability in Windows Performance Monitor caused by type confusion (access of resource using incompatible type). An authorized attacker with low privileges can exploit this locally without user interaction to gain high impact on confidentiality, in...

7.8CVSS5.7AI score0.00333EPSS
SaveExploits0References1Affected Software13
Microsoft CVE
Microsoft CVE
•added 2026/09/08 2:00 p.m.•22 views

Windows Performance Monitor Elevation of Privilege Vulnerability

Access of resource using incompatible type 'type confusion' in Windows Performance Monitor allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00333EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•9 views

CVE-2026-69324: Access of Resource Using Incompatible Type

Access of resource using incompatible type 'type confusion' in Windows Performance Monitor allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.00333EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•25 views

PT-2026-87368

Name of the Vulnerable Software and Affected Versions Windows Performance Monitor affected versions not specified Description A type confusion issue occurs when a resource is accessed using an incompatible type. This allows an authorized attacker to elevate privileges locally on the system...

7.8CVSS5.8AI score0.00333EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2026/06/15 12:00 a.m.•40 views

Windows Performance Monitor Code Execution

The vulnerability of the Windows Performance Monitor component of the Windows operating system relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

8.1CVSS7.6AI score0.0064EPSS
SaveExploits0References2Affected Software8
BDU FSTEC
BDU FSTEC
•added 2026/06/15 12:00 a.m.•19 views

Windows Performance Monitor Code Execution

The vulnerability of the Windows Performance Monitor component of the Windows operating system is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

8.1CVSS7.5AI score0.0064EPSS
SaveExploits0References2Affected Software8
RedhatCVE
RedhatCVE
•added 2026/06/10 9:00 p.m.•24 views

CVE-2026-42981

Integer underflow wrap or wraparound in Windows Performance Monitor allows an unauthorized attacker to execute code over a network...

8.1CVSS5.7AI score0.0064EPSS
SaveExploits0References1
Rows per page
Query Builder