🔥 Trending CVEs - Last 90 Days

This vulnerability involves a use-after-free flaw in the Windows Mailslot File System that allows an authenticated attacker to execute arbitrary code ...

This vulnerability is a use-after-free flaw in Windows Ancillary Function Driver for WinSock that allows an authenticated attacker to execute arbitrar...

A race condition vulnerability in Windows Subsystem for Linux allows authenticated local attackers to escalate privileges by exploiting improper synch...

This vulnerability in Artifex MuPDF on Windows allows local attackers to exploit an uncontrolled search path issue in the get_system_dpi function. Att...

OpenTelemetry-Go SDK versions v1.20.0 through v1.39.0 on macOS/Darwin systems are vulnerable to path hijacking attacks. An attacker with local access ...

This CVE describes a local privilege escalation vulnerability in mlflow versions before 3.4.0 where temporary directories for Python virtual environme...

This vulnerability allows attackers to execute arbitrary code or write arbitrary files when downloading and building Go modules with malicious version...

Dell CloudBoost Virtual Appliance versions before 19.14.0.0 store passwords in plaintext, allowing attackers with remote access and high privileges to...

This CVE describes a local privilege escalation vulnerability in npm CLI where incorrect permission assignment allows loading modules from unsecured l...

This CVE describes a use-after-free vulnerability in Inbox COM Objects that allows an unauthorized attacker to execute arbitrary code locally on affec...

A race condition vulnerability in the Capability Access Management Service (camsvc) allows authorized attackers to escalate privileges on local system...

This vulnerability allows an unauthorized attacker to execute arbitrary code on a local system by exploiting an untrusted search path in Microsoft Off...

A race condition vulnerability in Windows Local Session Manager allows authenticated attackers to escalate privileges on affected systems. This affect...

This vulnerability involves a double-free memory corruption flaw in the Windows Win32K ICOMP component. An authenticated attacker could exploit this t...

This vulnerability involves a use-after-free flaw in Windows Desktop Window Manager (DWM) that allows an authenticated attacker to execute arbitrary c...

This CVE describes a race condition vulnerability in the Graphics Kernel that allows local attackers with existing system access to elevate privileges...

A race condition vulnerability in the Capability Access Management Service (camsvc) allows authorized attackers to gain elevated privileges on affecte...

This vulnerability is a race condition in the Graphics Kernel that allows an authorized local attacker to execute code concurrently with improper sync...

A race condition vulnerability in the Capability Access Management Service (camsvc) allows authorized attackers to execute concurrent operations on sh...

A race condition vulnerability in the Printer Association Object allows authorized attackers to escalate privileges locally. This affects systems wher...

This CVE describes a memory corruption vulnerability in the seninf component due to a race condition. It allows local privilege escalation from System...

CVE-2025-20779 is a use-after-free vulnerability in display drivers caused by a race condition. This allows local attackers with System privilege to e...

This CVE describes a local privilege escalation vulnerability in SevenCs ORCA G2 software where a TOCTOU race condition allows standard users to gain ...

A race condition in FluidSynth versions 2.5.0 to 2.5.1 allows heap-based use-after-free when unloading DLS files concurrently with synthesizer destruc...

This vulnerability in pdfforge PDF Architect allows remote attackers to execute arbitrary code by tricking users into opening malicious DOC files. The...

This vulnerability allows remote attackers to execute arbitrary code on systems running vulnerable versions of pdfforge PDF Architect. Attackers can e...

This vulnerability in PDFsam Enhanced allows remote attackers to execute arbitrary code by tricking users into opening malicious DOC files. The softwa...

PDFsam Enhanced has a remote code execution vulnerability in its XLS file processing. Attackers can execute arbitrary code by tricking users into open...

This vulnerability in MariaDB's mariadb-dump utility allows remote attackers to execute arbitrary code via directory traversal in view names. Attacker...