Logo
Retour à la veille

CVE-2026-78464

Publié : 8 septembre 2026
Modifié : 9 septembre 2026
Lien officiel NVD
Score CVSS
7
HIGH

Description détaillée

Time-of-check time-of-use (toctou) race condition in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Références et Patchs

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78464

Dernières Vulnérabilités

CVE-2026-9166

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in GIS Informatics GisLab Laboratory Management System allows Path Traversal. This issue affects GisLab Laboratory Management System: from 1.4.03 before 1.5.

VOIR DÉTAILS

CVE-2026-9163

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in GIS Informatics GisLab Laboratory Management System allows SQL Injection. This issue affects GisLab Laboratory Management System: from 1.4.03 before 1.5.

VOIR DÉTAILS

CVE-2026-9161

Observable response discrepancy vulnerability in DernekPlus Website Template allows Account Footprinting. This issue affects Website Template: through 10092026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

VOIR DÉTAILS