Lucene search
+L

756 matches found

NVD
NVD
added 2026/03/20 1:16 p.m.13 views

CVE-2026-4434

Improper certificate validation in the PAM propagation WinRM connections allows a network attacker to perform a man-in-the-middle attack via disabled TLS certificate verification...

8.1CVSS0.00144EPSS
SaveExploits0References1
attackerkb
attackerkb
added 2026/03/20 12:52 p.m.5 views

CVE-2026-4434

Improper certificate validation in the PAM propagation WinRM connections allows a network attacker to perform a man-in-the-middle attack via disabled TLS certificate verification...

5.8AI score0.00144EPSS
SaveExploits0References2
CVE
CVE
added 2026/03/20 12:52 p.m.38 views

CVE-2026-4434

CVE-2026-4434: Improper certificate validation in PAM propagation WinRM connections enables a network attacker to perform a man-in-the-middle attack when TLS certificate verification is disabled. Documented across multiple feeds (Red Hat, EUVD, NVD, etc.) with a high impact concern (CVSS 8.1). Af...

8.1CVSS5.8AI score0.00144EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2026/03/20 12:52 p.m.34 views

CVE-2026-4434

Improper certificate validation in the PAM propagation WinRM connections allows a network attacker to perform a man-in-the-middle attack via disabled TLS certificate verification...

0.00144EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/03/20 12:52 p.m.4 views

CVE-2026-4434

Improper certificate validation in the PAM propagation WinRM connections allows a network attacker to perform a man-in-the-middle attack via disabled TLS certificate verification...

5.8AI score0.00144EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/03/20 12:00 a.m.26 views

PT-2026-26608

Name of the Vulnerable Software and Affected Versions versions prior to 2026-4434 Description A flaw exists in the validation of certificates during PAM propagation WinRM connections. This allows a network attacker to conduct a man-in-the-middle attack by disabling TLS certificate verification. T...

8.1CVSS5.8AI score0.00144EPSS
SaveExploits0References5
Information Security Automation
Information Security Automation
added 2026/03/12 9:06 a.m.20 views

About Elevation of Privilege - Windows RDS (CVE-2026-21533) vulnerability

About Elevation of Privilege - Windows RDS CVE-2026-21533 vulnerability. The vulnerability is from the February Microsoft Patch Tuesday. Remote Desktop Services RDS is a component of Microsoft Windows that allows a user to initiate and control an interactive session on a remote computer or virtua...

7.8CVSS6AI score0.03913EPSS
SaveExploits5
CVE
CVE
added 2026/03/10 5:04 p.m.60 views

CVE-2026-25172

CVE-2026-25172 concerns Windows Routing and Remote Access Service (RRAS). The RRAS integer overflow/wraparound vulnerability allows an authenticated attacker to execute code over a network. Connected advisories confirm this affects RRAS and note that Microsoft released updates to fix the vulnerab...

8CVSS6AI score0.00904EPSS
SaveExploits0References1Affected Software6
GithubExploit
GithubExploit
added 2026/03/09 9:07 p.m.189 views

Exploit for Improper Privilege Management in Microsoft

CVE-2026-21533 Scanner: Windows RDP Local Privilege Escalation...

7.8CVSS5.8AI score0.03913EPSS
SaveExploits5
GithubExploit
GithubExploit
added 2026/02/20 10:00 p.m.285 views

Exploit for Improper Privilege Management in Microsoft

Security Vulnerability CVE-2026-21533 Overview A HIGH v...

7.8CVSS5.5AI score0.03913EPSS
SaveExploits5
GithubExploit
GithubExploit
added 2026/02/20 4:17 p.m.193 views

Exploit for Improper Privilege Management in Microsoft

Security Vulnerability CVE-2026-21533 Overview A HIGH v...

7.8CVSS5.5AI score0.03913EPSS
SaveExploits5
Debian CVE
Debian CVE
added 2026/02/20 1:44 a.m.36 views

CVE-2026-26064

calibre is a cross-platform e-book manager for viewing, converting, editing, and cataloging e-books. Versions 9.2.1 and below contain a Path Traversal vulnerability that allows arbitrary file writes anywhere the user has write permissions. On Windows, this leads to Remote Code Execution by writin...

9.3CVSS5.9AI score0.00895EPSS
SaveExploits1
GithubExploit
GithubExploit
added 2026/02/11 9:03 p.m.232 views

Exploit for Improper Privilege Management in Microsoft

Privilege Escalation Vulnerability in Windows Remote Desktop...

7.8CVSS5.7AI score0.03913EPSS
SaveExploits5
RedhatCVE
RedhatCVE
added 2026/02/11 7:44 p.m.9 views

CVE-2026-21533

Improper privilege management in Windows Remote Desktop allows an authorized attacker to elevate privileges locally...

7.8CVSS5.5AI score0.03913EPSS
SaveExploits5References1
NCSC
NCSC
added 2026/02/10 7:01 p.m.29 views

Vulnerabilities fixed in Microsoft Windows

Microsoft has fixed vulnerabilities in Windows. A malicious party can exploit the vulnerabilities to carry out attacks that can lead to the following categories of damage: - Denial-of-Service DoS - Manipulation of data - Accessing sensitive data - Execution of arbitrary code user privileges -...

8.8CVSS5.9AI score0.26244EPSS
SaveExploits22
OSV
OSV
added 2026/02/10 6:16 p.m.22 views

CVE-2026-21533

Improper privilege management in Windows Remote Desktop allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.03913EPSS
SaveExploits5References2
Vulnrichment
Vulnrichment
added 2026/02/10 5:51 p.m.5 views

CVE-2026-21533 Windows Remote Desktop Services Elevation of Privilege Vulnerability

...

7.8CVSS5.4AI score0.03913EPSS
SaveExploits5References1
CVE
CVE
added 2026/02/10 5:51 p.m.398 views

CVE-2026-21533

CVE-2026-21533 affects Windows Remote Desktop Services (RDS) and is caused by improper privilege management (CWE-269), allowing a local authenticated attacker with low privileges to elevate to SYSTEM. Multiple connected sources corroborate that the issue is a local EoP in RDS with CVSSv3 7.8 (HIG...

7.8CVSS5.5AI score0.03913EPSS
SaveIn wildExploits5References4Affected Software13
attackerkb
attackerkb
added 2026/02/10 5:51 p.m.15 views

CVE-2026-21533

Improper privilege management in Windows Remote Desktop allows an authorized attacker to elevate privileges locally...

7.8CVSS5.5AI score0.03913EPSS
SaveIn wildExploits5References2Affected Software21
Microsoft CVE
Microsoft CVE
added 2026/02/10 4:00 p.m.13 views

Windows Remote Access Connection Manager Denial of Service Vulnerability

Null pointer dereference in Windows Remote Access Connection Manager allows an unauthorized attacker to deny service locally...

6.2CVSS5.5AI score0.05042EPSS
SaveExploits0
Rows per page
Query Builder