KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Data publikacji: ostatnie 7 dni. Starsze wpisy dostępne w pełnym katalogu i widoku KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
Use after free in Windows Quality of Service (QoS) Packet Scheduler allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Windows Fax and Scan Service allows an authorized attacker to elevate privileges locally.
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to elevate privileges locally.
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.
Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.
Use after free in Internet Explorer allows an authorized attacker to elevate privileges locally.
Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.
Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.
NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where an Attacker may cause an RCE by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering.
NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where, an attacker could cause an RCE by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data…
A path traversal vulnerability exists in Bower decompress-zip through version 0.3.3. The vulnerability located in `lib/decompress-zip.js` improperly validates archive entry paths during ZIP extraction. A crafted ZIP archive containing entries that resolve to prefix-sibling directories can cause…
A Path Traversal vulnerability in the template export functionality of Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to read arbitrary files.
ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does not require user interaction. Scope is…
Improper verification of cryptographic signature in Windows Key Distribution Center allows an authorized attacker to elevate privileges locally.
Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Photoshop Desktop is affected by a Double Free vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a…
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
Obserwuj | 7,8 | 0,25 % | ||
| Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
Obserwuj | 7,8 | 0,25 % | ||
| Use after free in Windows Quality of Service (QoS) Packet Scheduler allows an authorized attacker to elevate privileges locally. | Use after free in Windows Quality of Service (QoS) Packet Scheduler allows an authorized attacker to elevate privileges locally. |
Obserwuj | 7,8 | 0,25 % | ||
| Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally. | Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally. |
Obserwuj | 7,8 | 0,25 % | ||
| Heap-based buffer overflow in Windows Fax and Scan Service allows an authorized attacker to elevate privileges locally. | Heap-based buffer overflow in Windows Fax and Scan Service allows an authorized attacker to elevate privileges locally. |
Obserwuj | 7,8 | 0,25 % | ||
| Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
Obserwuj | 7,8 | 0,25 % | ||
| Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally. | Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally. |
Obserwuj | 7,8 | 0,25 % | ||
| Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. | Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. |
Obserwuj | 7,8 | 0,25 % | ||
| Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. | Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. |
Obserwuj | 7,8 | 0,25 % | ||
| Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to elevate privileges locally. | Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to elevate privileges locally. |
Obserwuj | 7,8 | 0,25 % | ||
| Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
Obserwuj | 7,8 | 0,25 % | ||
| Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally. | Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally. |
Obserwuj | 7,8 | 0,24 % | ||
| Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally. | Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally. |
Obserwuj | 7,8 | 0,24 % | ||
| Use after free in Internet Explorer allows an authorized attacker to elevate privileges locally. | Use after free in Internet Explorer allows an authorized attacker to elevate privileges locally. |
Obserwuj | 7,8 | 0,24 % | ||
| Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally. | Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally. |
Obserwuj | 7,8 | 0,24 % | ||
| Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges… | Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally. |
Obserwuj | 7,8 | 0,24 % | ||
| NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where an Attacker may cause an RCE by convincing a user to load a… | NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where an Attacker may cause an RCE by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering. |
Obserwuj | 7,8 | 0,23 % | ||
| NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where, an attacker could cause an RCE by convincing a user to load a… | NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where, an attacker could cause an RCE by convincing a user to load a maliciously crafted file. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data… |
Obserwuj | 7,8 | 0,23 % | ||
| A path traversal vulnerability exists in Bower decompress-zip through version 0.3.3. | A path traversal vulnerability exists in Bower decompress-zip through version 0.3.3. The vulnerability located in `lib/decompress-zip.js` improperly validates archive entry paths during ZIP extraction. A crafted ZIP archive containing entries that resolve to prefix-sibling directories can cause… |
Obserwuj | 7,8 | 0,23 % | ||
| A Path Traversal vulnerability in the template export functionality of Ivanti Xtraction before version 2026.4 allows a remote… | A Path Traversal vulnerability in the template export functionality of Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to read arbitrary files. |
Obserwuj | 7,7 | 0,73 % | ||
| ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. | ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does not require user interaction. Scope is… |
Obserwuj | 7,7 | 0,73 % | ||
| Improper verification of cryptographic signature in Windows Key Distribution Center allows an authorized attacker to elevate privileges… | Improper verification of cryptographic signature in Windows Key Distribution Center allows an authorized attacker to elevate privileges locally. |
Obserwuj | 7,8 | 0,23 % | ||
| Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the… | Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. |
Obserwuj | 7,8 | 0,22 % | ||
| Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the… | Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. |
Obserwuj | 7,8 | 0,22 % | ||
| Photoshop Desktop is affected by a Double Free vulnerability that could result in arbitrary code execution in the context of the current… | Photoshop Desktop is affected by a Double Free vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a… |
Obserwuj | 7,8 | 0,22 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.