228824 matches found
CVE-2026-61353
Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges locally...
CVE-2026-59122
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Telephony Service allows an authorized attacker to elevate privileges locally...
CVE-2026-59128
Out-of-bounds read in Windows Encrypting File System EFS allows an authorized attacker to disclose information locally...
CVE-2026-57105
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
UBUNTU-CVE-2026-62909
Uncaught exception in .NET allows an authorized attacker to elevate privileges locally...
CVE-2026-48435
CAI Content Credentials is affected by an Integer Underflow Wrap or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not...
CVE-2026-48375
ColdFusion is affected by an Incorrect Authorization vulnerability that could result in an application denial-of-service. A low-privileged attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user...
DEBIAN-CVE-2026-20713
Always-incorrect control flow implementation in some firmware for some IntelR XeonR processors may allow an escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via...
EUVD-2026-56778
Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-68817
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
EUVD-2026-56747
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
CVE-2026-65798 Windows DNS Elevation of Privilege Vulnerability
...
CVE-2026-65797 Windows DNS Elevation of Privilege Vulnerability
...
CVE-2026-65780 Windows Autopilot Elevation of Privilege Vulnerability
...
EUVD-2026-56730
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...
CVE-2026-65773
CVE-2026-65773 concerns improper access control in Windows Kernel, enabling a locally authenticated attacker to elevate privileges. Affected software/component: Windows Kernel (details not expanded in provided documents). Root cause: incorrect access control checks; impact: local privilege escala...
CVE-2026-62882 Microsoft Outlook Spoofing Vulnerability
...
CVE-2026-64911
CVE-2026-64911 is an integer overflow/wraparound vulnerability in Microsoft Office that enables local code execution by an attacker with user interaction. The root cause is an overflow in a Microsoft Office component, enabling a privileged or unauthenticated user to run arbitrary code locally onc...