Lucene search
+L

5104 matches found

Positive Technologies
Positive Technologies
•added 2026/01/13 12:00 a.m.•16 views

PT-2026-2660

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description A time-of-check time-of-use TOCTOU race condition exists within the Windows Kernel Memory. This condition can be exploited by an authorized attacker to gain elevated privileges on a...

7.8CVSS7.1AI score0.00359EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/13 12:00 a.m.•3 views

CVE-2026-20818: Insertion of Sensitive Information into Log File

Insertion of sensitive information into log file in Windows Kernel allows an unauthorized attacker to disclose information locally...

6.2CVSS6.4AI score0.00718EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/13 12:00 a.m.•7 views

CVE-2026-20809: Time-of-check Time-of-use (TOCTOU) Race Condition

Time-of-check time-of-use toctou race condition in Windows Kernel Memory allows an authorized attacker to elevate privileges locally...

7.8CVSS7.1AI score0.00359EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2026/01/13 12:00 a.m.•22 views

Microsoft Windows Kernel 日志信息泄露漏洞

Microsoft Windows Kernel is the kernel of the Windows operating system from Microsoft Corporation USA. A log information disclosure vulnerability exists in Microsoft Windows Kernel. An attacker exploiting this vulnerability could gain access to sensitive information. The following products and...

6.2CVSS6.5AI score0.00718EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/01/13 12:00 a.m.•18 views

PT-2026-2688

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description The Windows Kernel has a flaw where the generation of error messages can expose sensitive information to a local attacker. This allows an attacker to potentially disclose information a...

5.5CVSS5.9AI score0.00658EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/01/13 12:00 a.m.•7 views

PT-2026-2725

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A flaw exists within the Windows Win32K component, specifically in the ICOMP area. This issue allows a locally authorized attacker to gain elevated privileges. The issue is an instance of a...

7.8CVSS7.3AI score0.00493EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/13 12:00 a.m.•3 views

CVE-2026-20838: Generation of Error Message Containing Sensitive Information

Generation of error message containing sensitive information in Windows Kernel allows an authorized attacker to disclose information locally...

5.5CVSS5.9AI score0.00658EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/01/13 12:00 a.m.•18 views

PT-2026-2668

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description The Windows Kernel has a flaw where sensitive information is being written into log files. This allows a local attacker to potentially disclose information. The issue allows attackers ...

6.2CVSS6.4AI score0.00718EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/01/13 12:00 a.m.•20 views

PT-2026-2662

Name of the Vulnerable Software and Affected Versions Windows versions prior to the patchday containing the fix. Description A type confusion issue exists within the Windows Win32K ICOMP component. This allows a locally authorized attacker to gain elevated privileges. The issue involves accessing...

7.8CVSS7.1AI score0.00487EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/13 12:00 a.m.•9 views

CVE-2026-20859: Use After Free

Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally...

7.8CVSS7.6AI score0.00477EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/01/13 12:00 a.m.•33 views

PT-2026-2704

Name of the Vulnerable Software and Affected Versions Windows Kernel-Mode Drivers affected versions not specified Description A flaw exists in Windows Kernel-Mode Drivers that could allow a local attacker to gain higher privileges on a system. This issue involves a use-after-free condition. An...

7.8CVSS7.3AI score0.00477EPSS
SaveExploits0References10
RedhatCVE
RedhatCVE
•added 2026/01/09 10:12 a.m.•26 views

CVE-2019-11490

An issue was discovered in Npcap 0.992. Sending a malformed .pcap file with the loopback adapter using either pcapsendqueuequeue or pcapsendqueuetransmit results in kernel pool corruption. This could lead to arbitrary code executing inside the Windows kernel and allow escalation of privileges...

7.8CVSS7.5AI score0.00707EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2025/12/09 6:15 p.m.•6 views

CVE-2025-62458

Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...

7.8CVSS6AI score0.00657EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
•added 2025/12/09 8:00 a.m.•14 views

Win32k Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...

7.8CVSS7.7AI score0.00657EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/11/29 3:00 p.m.•24 views

CVE-2025-11156

Netskope was notified about a potential gap in its agent NS Client on Windows systems. If this gap is successfully exploited, a local, authenticated user with Administrator privileges can improperly load the driver as a generic kernel service. This triggers the flaw, causing a system crash...

5.9CVSS6.6AI score0.00126EPSS
SaveExploits0References1
NVD
NVD
•added 2025/11/28 3:15 p.m.•22 views

CVE-2025-11156

Netskope was notified about a potential gap in its agent NS Client on Windows systems. If this gap is successfully exploited, a local, authenticated user with Administrator privileges can improperly load the driver as a generic kernel service. This triggers the flaw, causing a system crash...

5.9CVSS0.00126EPSS
SaveExploits0References1
Packet Storm
Packet Storm
•added 2025/11/28 12:00 a.m.•216 views

📄 Microsoft Windows 10.0.17763.5458 Kernel IOCTL Access Control

Microsoft Windows version 10.0.17763.5458 Kernel IOCTL access control proof of concept Metasploit module. ============================================================================================================================================= | Title : Windows 10.0.17763.5458 Kernel IOCTL...

7.8CVSS9.2AI score0.5981EPSS
SaveExploits13
Packet Storm
Packet Storm
•added 2025/11/27 12:00 a.m.•238 views

📄 Microsoft Windows 10 21H2 / 22H2 Kernel Race Condition / Privilege Escalation

Proof of concept exploit for a kernel race condition in Microsoft Windows 10 versions 21H2 and 22H2. Combined with a double-free memory corrupt issue, it allows for privilege escalation...

7CVSS7.2AI score0.04464EPSS
SaveExploits7
GithubExploit
GithubExploit
•added 2025/11/18 4:12 p.m.•253 views

Exploit for Double Free in Microsoft

CVE-2025-62215 Exploit PoC Original code credit: https://gith...

7CVSS7.4AI score0.04464EPSS
SaveExploits7
GithubExploit
GithubExploit
•added 2025/11/18 12:59 p.m.•233 views

Exploit for Improper Input Validation in Amd Ryzen_Master

CVE-2023-20564 - AMD Ryzen Master Driver Physical Memory Acces...

6.7CVSS7.7AI score0.00304EPSS
SaveExploits1
Rows per page
Query Builder