117 matches found
CVE-2026-49176_BOF
CVE-2026-49176 Cobalt Strike BOF Windows WalletServiceCVE-2026-49176 , 2026년 7월 패치를 통한 로컬 권한 상승용 Cobalt Strike Beacon Object FileBOF 입니다. 중간 무결성일반 사용자 Beacon에서 이 도구는 악성 Wallet ESE 데이터베이스를 준비하고, Documents를 리디렉션하며, WalletService를 트리거하여 호출자가 지정한 명령줄 을 대화형 데스크톱 에서 NT AUTHORITY\SYSTEM 권한으로 실행합니다. BOF ...
CVE-2026-49176
Improper privilege management in Windows WalletService allows an authorized attacker to elevate privileges locally...
CVE-2026-49176 Windows WalletService Elevation of Privilege Vulnerability
...
CVE-2026-49176 Windows WalletService Elevation of Privilege Vulnerability
...
CVE-2026-49176
Summary: CVE-2026-49176 is a Windows WalletService elevation of privilege vulnerability described as improper privilege management that could allow an authorized local attacker to escalate privileges. The available sources (NVD/CVE records) confirm the issue but do not provide concrete details on...
Windows WalletService Elevation of Privilege Vulnerability
Improper privilege management in Windows WalletService allows an authorized attacker to elevate privileges locally...
CVE-2026-49176: Improper Privilege Management
Improper privilege management in Windows WalletService allows an authorized attacker to elevate privileges locally...
CVE-2026-32080
Use after free in Windows WalletService allows an authorized attacker to elevate privileges locally...
EUVD-2026-22512
Use after free in Windows WalletService allows an authorized attacker to elevate privileges locally...
CVE-2026-32080
Use after free in Windows WalletService allows an authorized attacker to elevate privileges locally...
CVE-2026-32080
CVE-2026-32080 affects Windows WalletService and is a use-after-free that enables local privilege escalation for an authenticated user. The initial sources and connected advisories confirm impact on Windows WalletService with local execution and privilege elevation. Microsoft has published securi...
Windows WalletService Elevation of Privilege Vulnerability
Use after free in Windows WalletService allows an authorized attacker to elevate privileges locally...
CVE-2026-32080: Use After Free
Use after free in Windows WalletService allows an authorized attacker to elevate privileges locally...
PT-2026-32806
CVE-2026-32080 Use after free in Windows WalletService allows an authorized attacker to elevate privileges locally. https://t.co/ot43xvauta...
CVE-2026-20853
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows WalletService allows an unauthorized attacker to elevate privileges locally...
CVE-2026-20853
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows WalletService allows an unauthorized attacker to elevate privileges locally...
CVE-2026-20853
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows WalletService allows an unauthorized attacker to elevate privileges locally...
CVE-2026-20853 Windows WalletService Elevation of Privilege Vulnerability
...
CVE-2026-20853
CVE-2026-20853 is a local privilege-escalation in Windows WalletService caused by a race condition when a shared resource is concurrently accessed. Reported as a Windows WalletService privilege-vulnerability, the affected product is Windows, with the issue exploitable locally and potentially elev...