232334 matches found
EUVD-2026-56646
Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges locally...
CVE-2026-62743
CVE-2026-62743 describes an out-of-bounds read in Windows Win32K that can lead to local information disclosure by an authorized attacker. The vulnerability affects the Win32K component and is exploitable with low privileges and no user interaction, with a local attack vector. The CVSS3.1 base sco...
EUVD-2026-56641
Time-of-check time-of-use toctou race condition in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-62725 Windows Telephony Service Elevation of Privilege Vulnerability
...
CVE-2026-62721
Technical details about CVE-2026-62721 are not publicly provided in the supplied documents. Monitor for updates.
CVE-2026-62711 Windows Win32k Elevation of Privilege Vulnerability
...
EUVD-2026-56634
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...
CVE-2026-62710 Windows Device Association Service Elevation of Privilege Vulnerability
...
CVE-2026-62708 Windows Kernel Elevation of Privilege Vulnerability
...
CVE-2026-62700
CVE-2026-62700 describes a heap-based buffer overflow in Windows NTFS that allows an authenticated, local attacker to elevate privileges. The vulnerability affects the NTFS component on Windows and is rated CVSSv3.1#3.1 with a base score of 7.8 (HIGH) and local attack vector/low complexity, requi...
CVE-2026-61938 Windows Installer Elevation of Privilege Vulnerability
...
CVE-2026-61938 Windows Installer Elevation of Privilege Vulnerability
...
CVE-2026-61926
CVE-2026-61926 : Heap-based buffer overflow in the Windows USB Driver allows an authorized local attacker to perform a local privilege escalation . Exploitation details are not provided beyond the CVSS metrics (LOCAL, LOW complexity, LOW privileges, NONE user interaction; high impact to confident...
CVE-2026-61349
Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-56610
Use after free in Virtual Hard Disk VHD Miniport Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-59119 PowerShell Elevation of Privilege Vulnerability
...
CVE-2026-42976
Missing authentication for critical function in Windows RPC API allows an authorized attacker to elevate privileges locally...
CVE-2026-70304
Windows DNS contains a heap-based buffer overflow exploitable by an authorized local attacker to elevate privileges. NVD rates it HIGH (7.8, PR:L); Microsoft's CVSS rates MEDIUM (6.7, PR:H). No in-the-wild exploitation reported. Patch via August 2026 Microsoft security updates (KB5121000, KB51202...
CVE-2026-68809
CVE-2026-68809 describes an information-disclosure flaw in Microsoft Office PowerPoint caused by incomplete cleanup. A local attacker could disclose information due to this cleanup issue. CVSS v3.1: 5.5 (Medium); Vector: Local; Privileges Required: None; User Interaction: Required; Scope: Unchang...
CVE-2026-68792
CVE-2026-68792 concerns a Microsoft Office command-injection vulnerability (improper neutralization of special elements used in a command) that allows an authorized, local attacker with low privileges and no user interaction to achieve local privilege elevation. Impacted aspects: confidentiality,...