649 matches found
PT-2026-87421
Name of the Vulnerable Software and Affected Versions Windows Shell affected versions not specified Description External control of a file name or path in Windows Shell allows an authorized attacker to elevate privileges locally, which can lead to unauthorized system impact. Recommendations At th...
CVE-2026-70335
creationtimestamp| type| source ---|---|--- 2026-08-11 19:00:57+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 20:47:57+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0285 2026-08-12 01:00:53+00:00| seen|...
CVE-2026-62770
Heap-based buffer overflow in Windows Shell allows an authorized attacker to elevate privileges locally...
EUVD-2026-56658
Heap-based buffer overflow in Windows Shell allows an authorized attacker to elevate privileges locally...
CVE-2026-62770 Windows Shell Elevation of Privilege Vulnerability
...
CVE-2026-62770
CVE-2026-62770: Heap-based buffer overflow in Windows Shell is disclosed as a local privilege escalation vulnerability. Affects Windows Shell components; attacker must be authorized and can escalate privileges locally without user interaction (low privileges required, local access). CVSS 3.1 base...
Windows Shell Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Shell allows an authorized attacker to elevate privileges locally...
CVE-2026-62770: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Shell allows an authorized attacker to elevate privileges locally...
PT-2026-70522
Name of the Vulnerable Software and Affected Versions Windows Shell affected versions not specified Description A heap-based buffer overflow occurs in Windows Shell, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory corruption issue that...
FTP Fetch, Windows Command Shell, Bind TCP Inline
Fetch and execute an x86 payload from an FTP server. Listen for a connection and spawn a command shell Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule include...
FTP Fetch, Windows Command Shell, Reverse TCP Stager (RC4 Stage Encryption, Metasm)
Fetch and execute an x86 payload from an FTP server. Spawn a piped command shell staged. Connect back to the attacker Module Options...
FTP Fetch, Windows Command Shell, Reverse All-Port TCP Stager
Fetch and execute an x86 payload from an FTP server. Spawn a piped command shell staged. Try to connect back to the attacker, on all possible ports 1-65535, slowly Module Options This module requires Metasploit: https://metasploit.com/download Current source:...
FTP Fetch, Windows Command Shell, Hidden Bind TCP Stager
Fetch and execute an x86 payload from an FTP server. Spawn a piped command shell staged. Listen for a connection from a hidden port and spawn a command shell to the allowed host. Module Options...
Shell command Disclosure
The vulnerability of the Shell command shell in Windows operating systems is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to disclose protected information...
CVE-2026-42907
Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to disclose information locally...
CVE-2026-42906
Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to disclose information locally...
CVE-2026-42906
Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to disclose information locally...
CVE-2026-42907
Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to disclose information over a network...
