CVE-2022-26100
published 2022-03-10CVE-2022-26100: SAPCAR - version 7.22, does not contain sufficient input validation on the SAPCAR archive. As a result, the SAPCAR process may crash, and the attacker may…
PriorityP349critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
1.15%
63.0th percentile
SAPCAR - version 7.22, does not contain sufficient input validation on the SAPCAR archive. As a result, the SAPCAR process may crash, and the attacker may obtain privileged access to the system.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| sap | sapcar | — | — |
| sap_se | sapcar | < 7.22 | 7.22 |
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Exploit-DB
Windows 11 24H2 - Local Privilege Escalation
exploitdb·2026-05-04·CVSS 7.8
CVE-2026-21250 [HIGH] Windows 11 24H2 - Local Privilege Escalation
Windows 11 24H2 - Local Privilege Escalation
---
# Exploit Title: Windows 11 24H2 - Local Privilege Escalation
# Google Dork: inurl:http.sys "Windows 11 24H2" vulnerability | intitle:"HTTP.sys" "CVE-2026-21250" "Elevation of Privilege"
# Date: 2026-02-27
# Exploit Author: London foggy snow
# Vendor Homepage: https://www.microsoft.com/en-us/msrc
# Software Link: https://learn.microsoft.com/en-us/windows/win32/http/http-sys
# Version: Windows 11 24H2 (10.0.26100.7780), Windows 11 25H2 (10.0.26200.7780), Windows Server 2022 23H2 (10.0.25398.2148)
# Tested on: Windows 11 24H2 (x64), Windows Server 2022 23H2 (Server Core x64)
# CVE : CVE-2026-21250
# powershell -> net start http
#define _CRT_SECURE_NO_WARNINGS
#include
#include
#include
#include
#pragma comment(lib, "ws2_32.lib")
#define
Exploit-DB
Microsoft Windows 11 Version 24H2 Cross Device Service - Elevation of Privilege
exploitdb·2025-06-09·CVSS 7.3
CVE-2025-24076 [HIGH] Microsoft Windows 11 Version 24H2 Cross Device Service - Elevation of Privilege
Microsoft Windows 11 Version 24H2 Cross Device Service - Elevation of Privilege
---
#!/usr/bin/env python3
# Exploit Title: Microsoft Windows 11 Version 24H2 Cross Device Service - Elevation of Privilege
# Author: Mohammed Idrees Banyamer
# Instagram: @banyamer_security
# GitHub: https://github.com/mbanyamer
# Date: 2025-06-06
# Tested on: Windows 11 Version 24H2 for x64-based Systems (10.0.26100.3476)
# CVE: CVE-2025-24076
#
# Affected Versions:
# - Windows 11 Version 24H2 (x64 and ARM64)
# - Windows 11 Version 23H2 (x64 and ARM64)
# - Windows 11 Version 22H2 (x64 and ARM64)
# - Windows Server 2025
# - Windows Server 2022 23H2 (Server Core installation)
#
# Type: Elevation of Privilege
# Platform: Microsoft Windows
# Author Country: Jordan
# CVSS v3.1 Score: 7.3 (Important)
# Weakness:
No writeups or analysis indexed.
2022-03-10
Published