CVE-2026-69708: Use After Free

Use after free in Windows Web Platform Storage allows an authorized attacker to elevate privileges locally...

CVE-2026-49800

Integer overflow or wraparound in Windows Web Proxy Auto-Discovery Protocol WPAD allows an authorized attacker to elevate privileges locally...

PT-2026-58172

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description An integer overflow or wraparound in the Web Proxy Auto-Discovery Protocol WPAD allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no...

CVE-2026-50480: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Web Proxy Auto-Discovery Protocol WPAD allows an authorized attacker to elevate privileges locally...

CVE-2026-49800: Integer Overflow or Wraparound

Integer overflow or wraparound in Windows Web Proxy Auto-Discovery Protocol WPAD allows an authorized attacker to elevate privileges locally...

EUVD-2026-35501

Integer overflow or wraparound in Windows HTTP.sys allows an unauthorized attacker to execute code over a network...

HTTP.sys Remote Code Execution Vulnerability

Integer overflow or wraparound in Windows HTTP.sys allows an unauthorized attacker to execute code over a network...

The vulnerability of the Windows operating system’s Web Account Manager allows a hacker to disclose protected information.

The vulnerability of the Windows operating system’s Web Account Manager is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow attackers to disclose confidential information...

CVE-2025-21343 Windows Web Threat Defense User Service Information Disclosure Vulnerability

...

CVE-2025-21343 Windows Web Threat Defense User Service Information Disclosure Vulnerability

...

CVE-2025-21343: Improper Privilege Management

Windows Web Threat Defense User Service Information Disclosure Vulnerability...

PT-2025-4222 · Microsoft · Windows Web Threat Defense +1

Name of the Vulnerable Software and Affected Versions: Windows Web Threat Defense affected versions not specified Description: The issue allows attackers to obtain sensitive information and affect the system. It is related to information disclosure in the user service of Windows Web Threat Defens...

Microsoft Windows 安全漏洞

Microsoft Windows is a set of operating systems for personal devices from Microsoft Corporation USA.Microsoft Windows Web Account Manager is vulnerable to an information disclosure vulnerability that stems from inadequate protection of sensitive information on network systems or products, which...

WordPress Cost Calculator plugin path traversal vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A path traversal vulnerability exists in WordPress Cost Calculator plugin version 1.4 and earlier, which arise...

CVE-2021-24820

The Cost Calculator WordPress plugin through 1.6 allows authenticated users Contributor+ in versions 1.5, and Admin+ in versions = 1.6 to perform path traversal and local PHP file inclusion on Windows Web Servers via the Cost Calculator post's Layout...

Path traversal

The Cost Calculator WordPress plugin through 1.6 allows authenticated users Contributor+ in versions 1.5, and Admin+ in versions = 1.6 to perform path traversal and local PHP file inclusion on Windows Web Servers via the Cost Calculator post's Layout...

CVE-2021-24820 Cost Calculator <= 1.6 - Authenticated Local File Inclusion

The Cost Calculator WordPress plugin through 1.6 allows authenticated users Contributor+ in versions 1.5, and Admin+ in versions = 1.6 to perform path traversal and local PHP file inclusion on Windows Web Servers via the Cost Calculator post's Layout...

CVE-2021-24820: Improper Limitation of a Pathname to a Restricted Directory

The Cost Calculator WordPress plugin through 1.6 allows authenticated users Contributor+ in versions 1.5, and Admin+ in versions = 1.6 to perform path traversal and local PHP file inclusion on Windows Web Servers via the Cost Calculator post's Layout...

Cost Calculator <= 1.8 - Authenticated Local File Inclusion

The plugin allows authenticated users Contributor+ in versions 1.5, and Admin+ in versions = 1.8 to perform path traversal and local PHP file inclusion on Windows Web Servers via the Cost Calculator post's Layout PoC As a contributor, create a Cost Calculator post, set the Layout to...

Cost Calculator <= 1.4 - Contributor+ Local File Inclusion

The plugin allows users with a role as low as Contributor to perform path traversal and local PHP file inclusion on Windows Web Servers via the Cost Calculator post's Layout PoC As a contributor, create a Cost Calculator post, set the Layout to /../../../../../../../../../../file assuming the fil...