4902 matches found
EUVD-2026-48427
Cwe-269 vulnerability in Johnson Controls victor Web on Windows allows capec-233. This issue affects victor Web: before 7.1...
Command Injection
Overview @n8n/computer-use is a Local AI gateway for n8n AI Assistant — filesystem, shell, screenshots, mouse/keyboard, and browser automation Affected versions of this package are vulnerable to Command Injection via the Shell tool activation path in...
The vulnerability of the GDI+ component in Windows operating systems allows attackers to execute arbitrary code.
The vulnerability of the GDI+ component in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
RabbitMQ 4.1.x < 4.1.11 / 4.2.x < 4.2.6 UNC Path Injection (Windows)
The version of RabbitMQ installed on the remote Windows host is affected by a vulnerability: - On Windows, the RabbitMQ management plugin static file handler rabbitmgmtwmstatic can pass URL-encoded backslashes to erlprimloader:readfileinfo before path validation when multiple management extension...
Exploit for Improper Privilege Management in Microsoft
CVE-2026-49176 SYSTEM Shell PoC Local privilege-escalation pr...
CVE-2026-45313 Sandboxie-Plus: Sandboxie APC Injection Sandbox Escape
Sandboxie-Plus is an open source sandbox-based isolation software for Windows. Prior to 1.17.6, GuiServer::WndHookRegisterSlave in Sandboxie/core/svc/GuiServer.cpp stores attacker-supplied hthread and hproc fields from a GUIWNDHOOKREGISTER request without validating that the thread belongs to the...
CVE-2026-58637
Use after free in Windows Client-Side Caching CSC Service allows an authorized attacker to elevate privileges locally...
CVE-2026-50476
Use after free in Microsoft Windows allows an authorized attacker to elevate privileges locally...
CVE-2026-49790
Windows Universal Disk Format File System Driver UDFS Elevation of Privilege Vulnerability...
CVE-2026-58637 Windows Client-Side Caching Elevation of Privilege Vulnerability
...
CVE-2026-58531
CVE-2026-58531 is a Windows SMB elevation-of-privilege vulnerability caused by a race condition in a shared resource. It affects Windows SMB components and enables an authorized attacker to elevate privileges over the network. CVSS v3.1 base score 7.5 (NETWORK, HIGH impact), per Microsoft’s advis...
CVE-2026-57096 Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability
...
CVE-2026-57096 Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability
...
CVE-2026-57089 Windows SMB Server Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability
...
CVE-2026-56649 Windows Network File System Remote Code Execution Vulnerability
...
CVE-2026-56183 Windows MIDI Service Module Elevation of Privileges Vulnerability
...
CVE-2026-56182
CVE-2026-56182 is a Windows NTFS elevation-of-privilege vulnerability caused by an integer overflow/wraparound in NTFS operations that can be exploited by an authorized local attacker. Public sources in the connected data corroborate the root cause and the affected component is NTFS on Windows. T...
CVE-2026-50686 Windows OLE Remote Code Execution Vulnerability
...
CVE-2026-50686
CVE-2026-50686 is a Windows OLE remote code execution vulnerability caused by a type confusion in resource access. It enables network-exposed code execution without authentication and is documented with CVSS v3.1 base score 8.1 (High). Public references identify the affected area as Windows OLE, ...