CVE-2025-48799

Описание Это PoC для CVE-2025-48799, уязвимости повышения привилегий в службе Windows Update. Эта уязвимость затрагивает клиенты Windows win11/win10 как минимум с двумя жёсткими дисками. Если на машине несколько жёстких дисков, можно изменить место сохранения нового контента с помощью Storage...

CVE-2020-1313

CVE-2020-1313 Abstract Windows Update Orchestrator Service è un servizio DCOM utilizzato da altri componenti per installare gli aggiornamenti di Windows già scaricati. USO era vulnerabile a un elevazione dei privilegi da qualsiasi utente a sistema locale a causa di un'autorizzazione impropria dei...

CVE-2025-48799

Descrizione Questa è una PoC per CVE-2025-48799, una vulnerabilità di elevazione dei privilegi nel servizio Windows Update. Questa vulnerabilità colpisce i client Windows win11/win10 con almeno 2 dischi rigidi. Quando la macchina ha più dischi rigidi, è possibile modificare la posizione in cui...

PPLmedic

PPLmedic Questo strumento implementa una catena di exploit in Userland per iniettare codice arbitrario in un PPL con tipo di firmatario Windows ed elevare al tipo di firmatario WinTcb. Queste tecniche sono state originariamente discusse da James Forshaw noto anche come @tiraniddo nel suo articolo...

dazzleUP

dazzleUP Ein Werkzeug, das die durch Fehlkonfigurationen und fehlende Updates in Windows-Betriebssystemen verursachten Privilegienausweitungs-Schwachstellen erkennt. dazzleUP erkennt die folgenden Schwachstellen. Exploit-Prüfungen Die erste Funktion von dazzleUP ist, dass es beim Auffinden...

nuc-winring0-fix

دليل إزالة برنامج تشغيل WinRing0 الضعيف في Intel NUC - بشكل دائم يقوم Windows Defender بوضع علامة على OpenHardwareMonitorLib.sys برنامج تشغيل WinRing0 كـ VulnerableDriver:WinNT/Winring0 بسبب CVE-2020-14979. يتم تضمين هذا البرنامج مع خدمة Intel NUC Software Studio ويتم إعادة تثبيته عبر Windows...

CVE-2023-23397-Patch

Patch di Aggiornamento di Windows CVE-2023-23397 Script di patch PowerShell per CVE-2023-23397 per Windows 10 e 11 Questa versione dello script ti consente di verificare se il tuo dispositivo ha ricevuto le patch più recenti per l'ultimo exploit Microsoft. Se gli aggiornamenti di sicurezza non...

August 11, 2026—KB5121000 (OS Build 28000.2704)

None None...

Important: Red Hat Security Advisory: OpenJDK 8u502 Windows Security Update

An update is now available for OpenJDK. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References...

KLA91174 ACE vulnerability in Microsoft Apps

Arbitrary code execution vulnerability was found in Microsoft Apps. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2026-50517 Exploitation CVE list CVE-2026-50517 critical KB list Solution Install necessary updates from the KB section, that are...

KLA91178 SUI vulnerability in Microsoft Server Software

User interface spoofing vulnerability was found in Microsoft Server Software. Malicious users can exploit this vulnerability to spoof user interface. Original advisories CVE-2026-56191 Exploitation CVE list CVE-2026-56191 critical KB list Solution Install necessary updates from the KB section, th...

July 14, 2026—KB5099539 (OS Builds 19045.7548 and 19044.7548)

None None...

KLA91159 PE vulnerability in Microsoft Products (ESU)

Privilege escalation vulnerability was found in Microsoft Products ESU. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2026-58598 Exploitation CVE list CVE-2026-58598 high KB list 5099539 Solution Install necessary updates from the KB section, that are...

July 14, 2026—KB5099536 (OS Build 26100.33158)

None None...

PT-2026-58422

Name of the Vulnerable Software and Affected Versions Windows Server Update Service affected versions not specified Description A missing authentication check for a critical function in the Windows Server Update Service allows an authorized attacker to elevate privileges over a network...

KLA91144 Multiple vulnerability in Microsoft Device

Multiple vulnerability was found in Microsoft Device. Malicious users can exploit this vulnerability to bypass security restrictions, gain privileges. Original advisories CVE-2026-48581 Exploitation CVE list CVE-2026-48581 critical KB list Solution Install necessary updates from the KB section,...

Stable Channel Update for Desktop

The Stable channel has been updated to 150.0.7871.124/.125 for Windows and Mac and 150.0.7871.124 for Linux, which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log Security Fixes and Rewards Note: Access to bug details and links may be kept...

CVE-2026-58583

CVE-2026-58583 affects FluxInk Color Management Driver (TcnPeripheral64.sys) 1.0.7.2, enabling local privilege escalation for a standard user via arbitrary physical memory mapping at \Device\PhysicalMemory. Root cause: memory mapping vulnerability in the driver. Impact: potential elevation of pri...

EUVD-2026-42094

FluxInk formerly Sunia SPB Peripheral Color Management Driver TcnPeripheral64.sys 1.0.7.2 allows local privilege escalation for a standard user account via arbitrary physical memory mapping at \Device\PhysicalMemory. Fixed in version 1.0.7.6. The fixed driver is currently available in the Windows...

CVE-2026-58583

FluxInk formerly Sunia SPB Peripheral Color Management Driver TcnPeripheral64.sys 1.0.7.2 allows local privilege escalation for a standard user account via arbitrary physical memory mapping at \Device\PhysicalMemory. Fixed in version 1.0.7.6. The fixed driver is currently available in the Windows...