23 matches found
CVE-2026-105009
A local privilege escalation vulnerability exists in the Windows Server Update Service due to incorrect default permissions (CWE-276). An authorized attacker can exploit this flaw to elevate privileges locally. While the CVSS 3.1 score reflects a High severity (7.5), the attack requires low privi...
CVE-2026-83499
The Windows Server Update Service is impacted by an insufficient granularity of access control vulnerability (CWE-1220). This flaw allows an authorized attacker to achieve local privilege escalation . While the technical root cause is not further detailed in the provided documents, the vulnerabil...
CVE-2026-81969
The Windows Server Update Service is affected by a vulnerability involving insufficient granularity of access control . This flaw allows an authorized attacker to perform a local privilege escalation . The vulnerability is characterized by a HIGH base severity score of 7.8 and is associated with ...
The vulnerability of the Windows Server Update Service (WSUS) for Windows operating systems allows a hacker to make changes to the system via the network.
The vulnerability of the Windows Server Update Service WSUS for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to make changes to the system remotely...
PT-2026-58319
Name of the Vulnerable Software and Affected Versions Windows Server Update Service affected versions not specified Description An uncaught exception in the Windows Server Update Service allows an unauthorized attacker to perform tampering over a network. Recommendations Deploy the July 14 update...
CVE-2026-50444: Missing Authentication for Critical Function
Missing authentication for critical function in Windows Server Update Service allows an authorized attacker to elevate privileges over a network...
CVE-2026-50328: Uncaught Exception
Uncaught exception in Windows Server Update Service allows an unauthorized attacker to perform tampering over a network...
EUVD-2026-22376
Improper input validation in Windows Server Update Service allows an unauthorized attacker to perform tampering over a network...
CVE-2026-32224
Use after free in Windows Server Update Service allows an authorized attacker to elevate privileges locally...
CVE-2026-26174: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Server Update Service allows an authorized attacker to elevate privileges locally...
CVE-2026-32224: Use After Free
Use after free in Windows Server Update Service allows an authorized attacker to elevate privileges locally...
CVE-2026-26154: Improper Input Validation
Improper input validation in Windows Server Update Service allows an unauthorized attacker to perform tampering over a network...
CVE-2026-20856: Improper Input Validation
Improper input validation in Windows Server Update Service allows an unauthorized attacker to execute code over a network...
The Bug Report - October 2025 Edition
The Bug Report – October 2025 Edition By Jonathan Omakun · October 31, 2025 Why am I here? Welcome to October's cybersecurity horror show, where the tricks are malicious and the treats are... Well, there aren't any treats. Just vulnerabilities that would make even the most seasoned security...
CVE-2025-59287: Deserialization of Untrusted Data
Deserialization of untrusted data in Windows Server Update Service allows an unauthorized attacker to execute code over a network...
EUVD-2023-36343
Malicious code in bioql PyPI...
EUVD-2023-39320
Malicious code in bioql PyPI...
CVE-2023-32056
Windows Server Update Service WSUS Elevation of Privilege Vulnerability...
CVE-2023-35317
Technical details (affected component/version/root cause/exploit status) for CVE-2023-35317 are not provided in the supplied documents. Monitor for updates from official sources.