664 matches found
CVE-2023-36884-MS-Office-HTML-RCE
CVE-2023-36884: MS Office HTML RCE with crafted documents On July 11, 2023, Microsoft released a patch aimed at addressing multiple actively exploited Remote Code Execution RCE vulnerabilities. This action also shed light on a phishing campaign orchestrated by a threat actor known as Storm-0978,...
mitigate-folina
mitigate-folina Mitigates the "Folina"-ZeroDay CVE-2022-30190 and "Search"-Nightmare no CVE given at the moment This script will backup and then remove the affected registry key as suggested by Microsoft to mitigate CVE-2022-30190. If parameterized with "-revert" the script will reimport the key...
CVE-2026-70145
Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally...
CVE-2026-69911
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
CVE-2026-69608
Integer overflow or wraparound in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
CVE-2026-69600
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
CVE-2026-69585
Incorrect type conversion or cast in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
CVE-2026-69554
Missing authentication for critical function in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally...
CVE-2026-69507
Insertion of sensitive information into externally-accessible file or directory in Microsoft Windows Search Component allows an authorized attacker to disclose information over a network...
CVE-2026-69453
Missing authorization in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally...
CVE-2026-69322
Double free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network...
CVE-2026-69305
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network...
CVE-2026-68896
Absolute path traversal in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
EUVD-2026-73902
Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally...
CVE-2026-70145
CVE-2026-70145 is an out-of-bounds read in the Microsoft Windows Search Component that allows an authorized attacker to disclose information locally. The vulnerability is rated CVSS 5.5 (MEDIUM) with a local attack vector, low complexity, low privileges required, and no user interaction. The prim...
EUVD-2026-73680
Absolute path traversal in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
CVE-2026-68896
CVE-2026-68896 is an absolute path traversal vulnerability in the Microsoft Windows Search Component that allows an authorized local attacker to achieve privilege escalation . The vulnerability requires low privileges, no user interaction, and has low attack complexity, with a CVSS 3.1 base score...
CVE-2026-69911
CVE-2026-69911 is a use-after-free vulnerability in the Microsoft Windows Search Component that allows a locally authenticated attacker to achieve local privilege escalation . The flaw requires low privileges , high attack complexity , and no user interaction , with unchanged scope and high impac...