CVE-2026-2713

The CVE-2026-2713 entry concerns the IBM Trusteer Rapport installer (v3.5.2309.290) and CWE-427 Uncontrolled Search Path Element. A local attacker could execute arbitrary code by placing a crafted file in a compromised folder during installation. IBM has issued a fixed installer (v3.5.2504.127); ...

EUVD-2026-10500

An exposed dangerous method in Ivanti DSM before version 2026.1.1 allows a local authenticated attacker to escalate their privileges...

EUVD-2026-10696

Incorrect default permissions in .NET allows an authorized attacker to elevate privileges locally...

EUVD-2026-10692

Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges locally...

EUVD-2026-10659

Improper link resolution before file access 'link following' in Winlogon allows an authorized attacker to elevate privileges locally...

EUVD-2026-10643

Out-of-bounds read in Windows Extensible File Allocation allows an authorized attacker to elevate privileges locally...

EUVD-2026-10606

External control of file name or path in Windows Kernel allows an authorized attacker to elevate privileges locally...

EUVD-2026-10631

Null pointer dereference in Microsoft Graphics Component allows an unauthorized attacker to deny service locally...

EUVD-2026-10612

Improper access control in Windows Projected File System allows an authorized attacker to elevate privileges locally...

EUVD-2026-10616

Use after free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...

EUVD-2026-10607

External control of file name or path in Windows Kernel allows an authorized attacker to elevate privileges locally...

EUVD-2026-10644

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally...

EUVD-2026-10634

Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally...

EUVD-2026-10618

Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

EUVD-2026-10613

Improper access control in Windows Projected File System allows an authorized attacker to elevate privileges locally...

EUVD-2026-10633

Divide by zero in Microsoft Graphics Component allows an unauthorized attacker to deny service locally...

EUVD-2026-10632

Divide by zero in Microsoft Graphics Component allows an unauthorized attacker to deny service locally...

EUVD-2026-10589

Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...

EUVD-2026-10588

Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...

CVE-2026-26148

External initialization of trusted variables or data stores in Azure Entra ID allows an unauthorized attacker to elevate privileges locally...