25 matches found
CVE-2026-83897
Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...
CVE-2026-70293
A use of uninitialized resource vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to perform a local information disclosure . No specific software versions or remediation steps are provided in the documents, though the CVE is confirmed by Microso...
CVE-2026-83909
The Windows Win32 Kernel Subsystem is affected by an information disclosure vulnerability. An authorized attacker can exploit this flaw to disclose sensitive system information locally. This vulnerability is associated with CWE-497 (Exposure of Sensitive System Information to an Unauthorized Cont...
Windows Win32 Kernel Subsystem Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an unauthorized attacker to elevate privileges with a physical attack...
CVE-2026-70289
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...
CVE-2026-70290
Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...
CVE-2026-70290
CVE-2026-70290 is an information disclosure vulnerability in the Windows Win32 Kernel Subsystem (Win32k) caused by the use of an uninitialized resource . An authorized local attacker with low privileges can leverage this to read sensitive kernel information, with no user interaction required. The...
PT-2026-87795
Name of the Vulnerable Software and Affected Versions Windows Win32 Kernel Subsystem affected versions not specified Description Use of an uninitialized resource in the Windows Win32 Kernel Subsystem allows an authorized attacker to disclose sensitive information locally. Recommendations At the...
EUVD-2024-37217
Malicious code in bioql PyPI...
MAL-2025-26820 Malicious code in mplayer-binary-win32 (npm)
The package mplayer-binary-win32 was found to contain malicious code...
CVE-2025-49733
Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally...
CVE-2025-24044
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...
PT-2025-10799
Name of the Vulnerable Software and Affected Versions: Windows Win32 Kernel Subsystem affected versions not specified Description: The issue is related to a use after free condition in the Windows Win32 Kernel Subsystem, which allows an authorized attacker to elevate privileges locally...
CVE-2025-24983
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...
CVE-2025-24983: Use After Free
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...
CVE-2025-24044: Use After Free
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...
CVE-2024-49046
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability...
CVE-2024-49046
CVE-2024-49046 affects the Windows Win32 Kernel Subsystem and is categorized as an Elevation of Privilege vulnerability. The CVSS 3.1 vector indicates LOCAL exploitability with LOW attack complexity and LOW privileges required, but HIGH impact to confidentiality, integrity, and availability under...