305343 matches found
CVE-2026-83507: Improper Link Resolution Before File Access
Improper link resolution before file access 'link following' in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally...
CVE-2026-83508: Out-of-bounds Read
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally...
CVE-2026-81971: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows NTFS allows an authorized attacker to elevate privileges locally...
CVE-2026-70295: Out-of-bounds Read
Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...
CVE-2026-70294: Out-of-bounds Read
Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...
CVE-2026-70293: Use of Uninitialized Resource
Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...
CVE-2026-70292: Out-of-bounds Read
Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...
CVE-2026-79715: Improper Limitation of a Pathname to a Restricted Directory
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 could allow a local attacker to traverse directories on the system. An attacker could use a specially crafted application archive to write files outside the intended directory...
CVE-2026-88124: Use After Free
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-87708: Use After Free
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-85864: Improper Restriction of Names for Files and Other Resources
Improper privilege management in Python allows an authorized attacker to elevate privileges locally...
CVE-2026-85857: Insertion of Sensitive Information into Log File
Insertion of sensitive information into log file in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally...
CVE-2026-85854: Use After Free
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
CVE-2026-85852: Out-of-bounds Read
Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally...
CVE-2026-85851: Use After Free
Use after free in Windows SmartScreen allows an authorized attacker to elevate privileges locally...
CVE-2026-85849: Improper Link Resolution Before File Access
Improper link resolution before file access 'link following' in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally...
CVE-2026-85843: Use of Uninitialized Resource
Use of uninitialized resource in Windows Background Intelligent Transfer Service BITS allows an authorized attacker to elevate privileges locally...
CVE-2026-85835: Buffer Over-read
Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally...