482 matches found
CVE-2026-70335
creationtimestamp| type| source ---|---|--- 2026-08-11 19:00:57+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 20:47:57+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0285 2026-08-12 01:00:53+00:00| seen|...
CVE-2026-62770
Heap-based buffer overflow in Windows Shell allows an authorized attacker to elevate privileges locally...
EUVD-2026-56658
Heap-based buffer overflow in Windows Shell allows an authorized attacker to elevate privileges locally...
CVE-2026-62770 Windows Shell Elevation of Privilege Vulnerability
...
CVE-2026-62770
CVE-2026-62770: Heap-based buffer overflow in Windows Shell is disclosed as a local privilege escalation vulnerability. Affects Windows Shell components; attacker must be authorized and can escalate privileges locally without user interaction (low privileges required, local access). CVSS 3.1 base...
Windows Shell Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Shell allows an authorized attacker to elevate privileges locally...
PT-2026-70522
Name of the Vulnerable Software and Affected Versions Windows Shell affected versions not specified Description A heap-based buffer overflow occurs in Windows Shell, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory corruption issue that...
FTP Fetch, Windows Command Shell, Reverse All-Port TCP Stager
Fetch and execute an x86 payload from an FTP server. Spawn a piped command shell staged. Try to connect back to the attacker, on all possible ports 1-65535, slowly Module Options This module requires Metasploit: https://metasploit.com/download Current source:...
FTP Fetch, Windows Command Shell, Bind TCP Inline
Fetch and execute an x86 payload from an FTP server. Listen for a connection and spawn a command shell Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule include...
FTP Fetch, Windows Command Shell, Hidden Bind TCP Stager
Fetch and execute an x86 payload from an FTP server. Spawn a piped command shell staged. Listen for a connection from a hidden port and spawn a command shell to the allowed host. Module Options...
FTP Fetch, Windows Command Shell, Reverse TCP Stager (RC4 Stage Encryption, Metasm)
Fetch and execute an x86 payload from an FTP server. Spawn a piped command shell staged. Connect back to the attacker Module Options...
CVE-2026-42907
Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to disclose information locally...
CVE-2026-42906
Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to disclose information locally...
CVE-2026-42907
Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to disclose information over a network...
CVE-2026-42906
Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to disclose information locally...
CVE-2026-42907 Windows Shell Information Disclosure Vulnerability
...
CVE-2026-42907
Technical details (affected software, component, root cause, impact and remediation) are not publicly available in the provided documents. Monitor for updates.
CVE-2026-42907
Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to disclose information over a network...
EUVD-2026-35596
Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to disclose information locally...
CVE-2026-42906
CVE-2026-42906 is a Windows Shell information-disclosure vulnerability. The Windows Shell component exposes sensitive information to an unauthorized actor via a local attack with low privileges required and no user interaction. The impact is confidentiality loss (C:H) while integrity/availability...