drbuho records
2 published records for vendor drbuho.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.
Recurring classes
- CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition1
- CWE-732 Incorrect Permission Assignment for Critical Resource1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
2 records| Action | CVE | Vulnerability | Severity | EPSS · Published |
|---|---|---|---|---|
34Monitor | CVE-2025-13733No exploit | BuhoNTFS 1.3.2 - Local Privilege Escalationdrbuho · buhontfs · CWE-732 | High8.5 | 0.2%Dec 12, 2025 |
29Monitor | CVE-2026-0924No exploit | BuhoCleaner 1.15.2 - Local Privilege Escalation via PID reuse attackdrbuho · buhocleaner · CWE-367 | High7.3 | 0.1%Feb 2, 2026 |
- CVE-2025-1373334Monitor
BuhoNTFS 1.3.2 - Local Privilege Escalation
HighCVSS 8.5No exploitEPSS 0%drbuho · buhontfsDec 12, 2025
- CVE-2026-092429Monitor
BuhoCleaner 1.15.2 - Local Privilege Escalation via PID reuse attack
HighCVSS 7.3No exploitEPSS 0%drbuho · buhocleanerFeb 2, 2026