2965 matches found
CVE-2025-48799
Description This is PoC for CVE-2025-48799, an elevation of privilege vulnerability in Windows Update service. This vulnability affects windows clients win11/win10 with at least 2 hard drives. When machine have multiple hard drives it is possible to change location where new content is saved usin...
nuc-winring0-fix
Controlador Vulnerable WinRing0 de Intel NUC - Guía de Eliminación Permanente Windows Defender marca OpenHardwareMonitorLib.sys controlador WinRing0 como VulnerableDriver:WinNT/Winring0 debido a CVE-2020-14979. Este controlador se incluye con el servicio NUC Software Studio de Intel y se reinstal...
CVE-2020-1313
CVE-2020-1313 Resumen El servicio Windows Update Orchestrator Service es un servicio DCOM utilizado por otros componentes para instalar actualizaciones de Windows que ya se han descargado. USO era vulnerable a una elevación de privilegios de cualquier usuario a sistema local debido a una...
CVE-2023-23397-Patch
CVE-2023-23397 Windows Update Patch CVE-2023-23397 powershell patch script for Windows 10 and 11 This version of the script allows you to check if your device has the most reach sent patches for the latest Microsoft exploit. if the security updates are not found using the Powershell Command...
CVE-2025-48799
描述 这是针对CVE-2025-48799的概念验证（PoC），该漏洞是Windows更新服务中的一个权限提升漏洞。 该漏洞影响至少拥有两块硬盘的Windows客户端（Win11/Win10）。当机器有多块硬盘时，可以使用存储感知更改新内容的保存位置。如果新应用的保存位置更改为辅助驱动器，那么在安装新应用期间，wuauserv服务会执行任意文件夹删除操作，且不检查符号链接（如果遇到文件，服务会使用GetFinalPathByHandle检查最终路径），从而导致本地权限提升（LPE）。...
PPLmedic
PPLmedic This tool implements a Userland exploit chain for injecting arbitrary code into a PPL with the signer type Windows and elevating to the signer type WinTcb. These techniques were originally discussed by James Forshaw a.k.a. @tiraniddo in his blog post Injecting Code into Windows Protected...
dazzleUP
dazzleUP A tool that detects the privilege escalation vulnerabilities caused by misconfigurations and missing updates in the Windows operating systems. dazzleUP detects the following vulnerabilities. Exploit Checks The first feature of dazzleUP is that it uses Windows Update Agent API instead of...
Microsoft Patch Tuesday for September 2026 — Snort rules and prominent vulnerabilities
Microsoft has released its monthly security update for September 2026, which includes 973 vulnerabilities affecting a range of products, including 113 that Microsoft marked as "critical." Microsoft notes that 2 of the vulnerabilities disclosed this month have been exploited in the wild:...
CVE-2026-81963
Improper link resolution before file access 'link following' in Windows Update Stack allows an authorized attacker to elevate privileges locally...
EUVD-2026-73889
Improper link resolution before file access 'link following' in Windows Update Stack allows an authorized attacker to elevate privileges locally...
CVE-2026-81963
Windows Update Stack is affected by an improper link resolution before file access ('link following') flaw that allows an authorized attacker with low privileges to elevate privileges locally , rated CVSS 7.8 HIGH with high impact to confidentiality, integrity, and availability. The vulnerability...
Windows Update Stack Elevation of Privilege Vulnerability
Improper link resolution before file access 'link following' in Windows Update Stack allows an authorized attacker to elevate privileges locally...
Microsoft Windows Link Following Vulnerability
Microsoft Windows Update Stack contains a link following vulnerability that allows a local attacker to escalate privileges locally up to SYSTEM...
PT-2026-88102
🚨HIGH - Windows Update Stack EoP via Link Following CVE-2026-81963 Windows Update Stack performs improper link resolution before file access, allowing an authenticated local attacker to abuse junctions/symlinks to redirect privileged file operations to unintended paths. This link-following flaw c...
August 11, 2026—KB5121000 (OS Build 28000.2704)
None None...
Important: Red Hat Security Advisory: OpenJDK 8u502 Windows Security Update
An update is now available for OpenJDK. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References...
KLA91174 ACE vulnerability in Microsoft Apps
Arbitrary code execution vulnerability was found in Microsoft Apps. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2026-50517 Exploitation CVE list CVE-2026-50517 critical KB list Solution Install necessary updates from the KB section, that are...
KLA91178 SUI vulnerability in Microsoft Server Software
User interface spoofing vulnerability was found in Microsoft Server Software. Malicious users can exploit this vulnerability to spoof user interface. Original advisories CVE-2026-56191 Exploitation CVE list CVE-2026-56191 critical KB list Solution Install necessary updates from the KB section, th...
