PULSE
FEED
ransompanzer reclama a SUNNIER HOMES · Retail & E-Commerceransomn0n reclama a LiveRamp · US · Technologyransomn0n reclama a DraftKings · US · Retail & E-Commerceransominterlock reclama a Garden Valley School Division · CA · Educationransommedusalocker reclama a Capetownransombravox reclama a AWO Bundesverband · DE · Otherransomdark project reclama a MTM&O Gold Refinery DMCC · AE · Manufacturingransomdark project reclama a Bear Valley Community Hospital · US · Healthcareransomplay reclama a NY Snacks · US · Retail & E-Commerceransomplay reclama a BROTHERS EXPRESS LLC · US · Transportationransomplay reclama a Signworx · GB · Otherransomsilentransomgroup reclama a A&O Shearman · GB · Professional Servicesransomsilentransomgroup reclama a J...ransomhyflock reclama a tcadarwin · AU · Otherransompanzer reclama a SUNNIER HOMES · Retail & E-Commerceransomn0n reclama a LiveRamp · US · Technologyransomn0n reclama a DraftKings · US · Retail & E-Commerceransominterlock reclama a Garden Valley School Division · CA · Educationransommedusalocker reclama a Capetownransombravox reclama a AWO Bundesverband · DE · Otherransomdark project reclama a MTM&O Gold Refinery DMCC · AE · Manufacturingransomdark project reclama a Bear Valley Community Hospital · US · Healthcareransomplay reclama a NY Snacks · US · Retail & E-Commerceransomplay reclama a BROTHERS EXPRESS LLC · US · Transportationransomplay reclama a Signworx · GB · Otherransomsilentransomgroup reclama a A&O Shearman · GB · Professional Servicesransomsilentransomgroup reclama a J...ransomhyflock reclama a tcadarwin · AU · Other
← Todos os CVEs
CVE Watch10 de nov. de 2026

CVE-2026-118280

Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.

CVSS

7.8

Alta

EPSS

—

KEV

—

Exploit Today

0

0-100

Publicado: 10 de nov. de 2026 · Última mod.: 10 de nov. de 2026 · CWE-122 · CWE-190

EPSS · 30d

Ainda não há histórico EPSS suficiente.

Descrição técnica

Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.

Referências oficiais
CVEs relacionados
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-1232637.8 ALT
—
———After Effects is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.9h
CVE-2026-1164807.8 ALT
—
———Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.9h
CVE-2026-1135757.8 ALT
—
———Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.9h
CVE-2026-595827.5 ALT
—
——0In StartTimer of UcePublishManager.cpp, there is a possible way to trigger a process abort during timer calculation due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.5h
CVE-2026-586966.7 MÉD
—
——0In multiple locations, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.4h
CVE-2026-970156.8 MÉD
—
——0Heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.4h