May 2026 (30)
CVE-2026-34643: Adobe After Effects Out-of-Bounds Write Vulnerability
2 rules 1 TTP 1 CVEAdobe After Effects versions 26.0, 25.6.4, and earlier are susceptible to an out-of-bounds write vulnerability, potentially leading to arbitrary code execution when a user opens a malicious file.
CVE-2026-34642: Adobe After Effects Heap-based Buffer Overflow Vulnerability
2 rules 1 TTP 1 CVEAdobe After Effects versions 26.0, 25.6.4 and earlier are vulnerable to a heap-based buffer overflow (CVE-2026-34642) that could lead to arbitrary code execution when a user opens a malicious file.
Adobe Media Encoder Integer Overflow Vulnerability (CVE-2026-34640)
2 rules 1 TTP 1 CVEAdobe Media Encoder versions 26.0.2, 25.6.4 and earlier are susceptible to an integer overflow or wraparound vulnerability (CVE-2026-34640) that could lead to arbitrary code execution when a user opens a malicious file.
CVE-2026-34639: Adobe Media Encoder Out-of-Bounds Write Vulnerability
2 rules 1 TTP 1 CVEAdobe Media Encoder versions 26.0.2, 25.6.4 and earlier are affected by an out-of-bounds write vulnerability (CVE-2026-34639) that could lead to arbitrary code execution if a user opens a malicious file.
CVE-2026-34638: Adobe Premiere Pro Use-After-Free Vulnerability Leading to Arbitrary Code Execution
2 rules 1 TTP 1 CVEAdobe Premiere Pro versions 26.0.2, 25.6.4 and earlier are affected by a Use After Free vulnerability (CVE-2026-34638) that could lead to arbitrary code execution in the context of the current user if a malicious file is opened.
CVE-2026-34637: Adobe Premiere Pro Out-of-Bounds Write Vulnerability
2 rules 1 TTP 1 CVEAdobe Premiere Pro versions 26.0.2, 25.6.4 and earlier are affected by an out-of-bounds write vulnerability (CVE-2026-34637) that could lead to arbitrary code execution if a user opens a malicious file.
Adobe Premiere Pro Out-of-Bounds Write Vulnerability (CVE-2026-34636)
2 rules 1 TTP 1 CVEAdobe Premiere Pro versions 26.0.2, 25.6.4 and earlier are affected by an out-of-bounds write vulnerability (CVE-2026-34636) that could lead to arbitrary code execution when a user opens a malicious file.
CVE-2026-34351: Windows TCP/IP Race Condition Privilege Escalation
2 rules 1 TTP 1 CVECVE-2026-34351 is a race condition vulnerability in Windows TCP/IP that allows an authorized attacker to elevate privileges locally.
CVE-2026-34347 Use-After-Free Vulnerability in Windows Win32K - GRFX
2 rules 1 TTP 1 CVECVE-2026-34347 is a use-after-free vulnerability in Windows Win32K - GRFX that allows an authorized local attacker to elevate privileges.
CVE-2026-34345 - Windows Ancillary Function Driver for WinSock Race Condition Privilege Escalation
2 rules 1 TTP 1 CVECVE-2026-34345 describes a race condition vulnerability in Windows Ancillary Function Driver for WinSock, allowing an authorized attacker to elevate privileges locally.
CVE-2026-34344 - Windows Ancillary Function Driver for WinSock Type Confusion Vulnerability
2 rules 1 TTP 1 CVECVE-2026-34344 is a type confusion vulnerability in the Windows Ancillary Function Driver for WinSock, allowing an authorized local attacker to elevate privileges.
CVE-2026-34343 - Windows AppID Subsystem Heap Overflow Privilege Escalation
2 rules 2 TTPs 1 CVECVE-2026-34343 is a heap-based buffer overflow vulnerability in the Windows Application Identity (AppID) Subsystem that allows an authorized attacker to elevate privileges locally.
CVE-2026-34342 - Windows Print Spooler Components Privilege Escalation via Race Condition
2 rules 1 TTP 1 CVECVE-2026-34342 is a race condition vulnerability in Windows Print Spooler Components that allows an authorized attacker to elevate privileges locally.
CVE-2026-34341: Windows LLDP Double Free Privilege Escalation
2 rules 1 TTP 1 CVECVE-2026-34341 is a double free vulnerability in the Windows Link-Layer Discovery Protocol (LLDP) that allows an authorized attacker to elevate privileges locally with a CVSS v3.1 score of 7.0.
CVE-2026-34340 - Windows Projected File System Use-After-Free Elevation of Privilege Vulnerability
2 rules 1 TTP 1 CVECVE-2026-34340 is a use-after-free vulnerability in the Windows Projected File System that allows an authorized attacker to elevate privileges locally.
CVE-2026-34337 - Windows Cloud Files Mini Filter Driver Use-After-Free Vulnerability
2 rules 1 TTP 1 CVECVE-2026-34337 is a use-after-free vulnerability in the Windows Cloud Files Mini Filter Driver, allowing a locally authorized attacker to escalate privileges.
CVE-2026-34336 - Windows DWM Core Library Buffer Over-Read Information Disclosure
2 rules 2 TTPs 1 CVECVE-2026-34336 is a buffer over-read vulnerability in the Windows DWM Core Library, allowing a local, authenticated attacker to disclose sensitive information.
CVE-2026-34334 Windows TCP/IP Race Condition Privilege Escalation
2 rules 1 TTP 1 CVECVE-2026-34334 describes a race condition vulnerability within Windows TCP/IP, enabling a locally authorized attacker to escalate privileges.
CVE-2026-34333 - Use-After-Free in Windows Win32K GRFX Allows Local Privilege Escalation
2 rules 1 TTP 1 CVECVE-2026-34333 is a use-after-free vulnerability in the Windows Win32K - GRFX component that allows a locally authorized attacker to elevate privileges.
CVE-2026-34332: Use-After-Free Vulnerability in Windows Kernel-Mode Drivers
2 rules 1 TTP 1 CVECVE-2026-34332 is a use-after-free vulnerability in Windows Kernel-Mode Drivers that allows an authorized attacker to execute code over a network.
CVE-2026-34331: Windows Win32K - GRFX Race Condition Privilege Escalation
2 rules 1 TTP 1 CVECVE-2026-34331 describes a race condition vulnerability in Windows Win32K - GRFX that allows an authorized attacker to elevate privileges locally due to improper synchronization when accessing shared resources.
CVE-2026-34330 - Windows Win32K GRFX Integer Overflow Local Privilege Escalation
2 rules 1 TTP 1 CVECVE-2026-34330 is an integer overflow vulnerability in Windows Win32K - GRFX that allows a locally authenticated attacker to escalate privileges.
CVE-2026-34329 Heap-Based Buffer Overflow in Windows Message Queuing
2 rules 1 TTP 1 CVECVE-2026-34329 is a heap-based buffer overflow in Windows Message Queuing, enabling an unauthenticated attacker on an adjacent network to achieve remote code execution.
CVE-2026-33841 Heap-Based Buffer Overflow in Windows Kernel Allows Privilege Escalation
2 rules 1 TTP 1 CVECVE-2026-33841 is a heap-based buffer overflow vulnerability in the Windows Kernel that allows a locally authorized attacker to elevate privileges.
CVE-2026-33840 Use-After-Free in Windows Win32K ICOMP for Local Privilege Escalation
2 rules 1 TTP 1 CVECVE-2026-33840 is a use-after-free vulnerability in the Windows Win32K ICOMP component, allowing a locally authenticated attacker to elevate privileges.
CVE-2026-33839 - Windows Win32K GRFX Race Condition Privilege Escalation
2 rules 1 TTP 1 CVECVE-2026-33839 is a race condition vulnerability in Windows Win32K - GRFX that allows an authorized local attacker to elevate privileges.
CVE-2026-33838: Windows Message Queuing Double Free Vulnerability
2 rules 1 TTP 1 CVECVE-2026-33838 is a double free vulnerability in Windows Message Queuing that allows a locally authorized attacker to elevate privileges.
CVE-2026-33837 - Windows TCP/IP Heap-Based Buffer Overflow for Privilege Escalation
2 rules 1 TTP 1 CVECVE-2026-33837 is a heap-based buffer overflow vulnerability in the Windows TCP/IP stack that allows an authenticated local attacker to elevate privileges.
CVE-2026-33835 - Windows Cloud Files Mini Filter Driver Use-After-Free Privilege Escalation
2 rules 1 TTP 1 CVECVE-2026-33835 is a use-after-free vulnerability in the Windows Cloud Files Mini Filter Driver, allowing a local attacker to elevate privileges.
CVE-2026-33834 - Windows Event Logging Service Improper Access Control Vulnerability
2 rules 1 TTP 1 CVECVE-2026-33834 is an improper access control vulnerability in the Windows Event Logging Service, allowing a locally authenticated attacker to escalate privileges.