228829 matches found
CVE-2026-68792
CVE-2026-68792 concerns a Microsoft Office command-injection vulnerability (improper neutralization of special elements used in a command) that allows an authorized, local attacker with low privileges and no user interaction to achieve local privilege elevation. Impacted aspects: confidentiality,...
CVE-2026-65788
CVE-2026-65788 is a use-after-free in Desktop Window Manager that enables local privilege escalation for an authorized user. Documented impact is elevation of privileges; CVSSv3.1 base score 7.0 (HIGH) with LOCAL attack, HIGH impact to confidentiality, integrity, and availability. Connected sourc...
EUVD-2026-56444
Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally...
EUVD-2026-56436
Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally...
EUVD-2026-56435
Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally...
CVE-2026-65658 Microsoft SharePoint Server Remote Code Execution Vulnerability
...
CVE-2026-65658 Microsoft SharePoint Server Remote Code Execution Vulnerability
...
CVE-2026-65657 Microsoft Office Remote Code Execution Vulnerability
...
EUVD-2026-56405
Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
CVE-2026-62894
CVE-2026-62894 describes a heap-based buffer overflow in the Windows DWM Core Library that allows an authenticated local attacker to elevate privileges. The vulnerability is documented across CVE/NVD listings with a CVSSv3.1 base score of 7.8 (HIGH), vector: LOCAL, LOW attack complexity, and NONE...
EUVD-2026-56399
Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally...
EUVD-2026-56398
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally...
CVE-2026-62798 Win32k Information Disclosure Vulnerability
...
CVE-2026-62783
CVE-2026-62783 describes a heap-based buffer overflow in Windows Remote Access Connection Manager that allows an authenticated, local attacker to escalate privileges. Affected component: Windows Remote Access Connection Manager (RAS). Underlying issue: heap overflow leading to local code executio...
CVE-2026-62722
Heap-based buffer overflow in Windows Brokering File System allows an authorized attacker to elevate privileges locally...
EUVD-2026-56353
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally...
CVE-2026-62712 Windows Win32k Elevation of Privilege Vulnerability
...
CVE-2026-62705 Microsoft Brokering File System Elevation of Privilege Vulnerability
...
CVE-2026-62699
The CVE-2026-62699 entry concerns the Windows Universal Disk Format File System Driver (UDFS). It describes a heap-based buffer overflow in UDFS that permits code execution by an unauthenticated attacker with physical access to the system. Affected component: UDFS in Windows. Root cause: heap-bas...