PULSEUnderground Intel

EN VIVO18señales / 24h

FEED

ransomemperador reclama a MPI LTDA · BR · Otherransomspacebears reclama a Alma Center Servizi Medicali S.r.l. · IT · Healthcareransomspacebears reclama a Holistic Health Group, Inc. (d/b/a Suncrafted) · US · Healthcareransomn0n reclama a Company #69 · Not Foundransomiah6477 reclama a alera · Professional Servicesransomn0n reclama a Company #68 · US · Not Foundransomn0n reclama a Company #67 · NL · Not Foundransomn0n reclama a Company #66 · Not Foundransomn0n reclama a Interior Technologies · Technologyransomeclipse reclama a Taiwan Otsuka Pharmaceutical · TW · Healthcareransomeclipse reclama a japantimes.co.jp · JP · Otherransomakira reclama a FOODMatch · Agriculture and Food Productionransomakira reclama a Shediac Lobster Shop · CA · Retail & E-Commerceransomakira reclama a Torns Enterprises · Not Foundransomemperador reclama a MPI LTDA · BR · Otherransomspacebears reclama a Alma Center Servizi Medicali S.r.l. · IT · Healthcareransomspacebears reclama a Holistic Health Group, Inc. (d/b/a Suncrafted) · US · Healthcareransomn0n reclama a Company #69 · Not Foundransomiah6477 reclama a alera · Professional Servicesransomn0n reclama a Company #68 · US · Not Foundransomn0n reclama a Company #67 · NL · Not Foundransomn0n reclama a Company #66 · Not Foundransomn0n reclama a Interior Technologies · Technologyransomeclipse reclama a Taiwan Otsuka Pharmaceutical · TW · Healthcareransomeclipse reclama a japantimes.co.jp · JP · Otherransomakira reclama a FOODMatch · Agriculture and Food Productionransomakira reclama a Shediac Lobster Shop · CA · Retail & E-Commerceransomakira reclama a Torns Enterprises · Not Found

← Todos los CVEs

CVE Watch13 oct 2026

CVE-2026-97812

Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.

CVSS

7.0

Alto

EPSS

0.3%

p18

KEV

—

Exploit Today

5

0-100

Publicado: 13 oct 2026 · Última mod.: 13 oct 2026 · CWE-415

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.

Referencias oficiales

msrc.microsoft.comhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97812

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-1105997.1 ALT

——0L-SMASH through 2.14.5 contains a double free vulnerability in hevc_setup_first_summary() and h264_setup_first_summary() in importer/nalu_imp.c that frees borrowed codec-specific objects on error paths. Attackers can supply a crafted Annex-B elementary stream lacking a parseable SPS to lsmash_read_file() or the boxdumper, remuxer, or muxer tools, causing use-after-free, heap corruption, and crashes.21h CVE-2026-94370—

——7A defect in the Qt for MCUs core string handling causes heap memory corruption. When an application passes text into Qt Quick Ultralite using the public Qul::String interface type, and that text is held in a std::string, the conversion to the internal string type copies the pointer without taking ownership of it. Two objects then release the same memory, producing a double free, an invalid free, or a use-after-free.23h CVE-2026-956357.8 ALT

——4Photoshop Desktop is affected by a Double Free vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file.23h CVE-2026-978307.5 ALT

——18Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network.18h CVE-2026-978117.8 ALT

——4Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.2d CVE-2026-977728.8 ALT

——16Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.19h