312904 matches found
EUVD-2026-100236
Time-of-check time-of-use toctou race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...
CVE-2026-96853
A Time-of-check time-of-use (TOCTOU) race condition exists in the Windows Win32 Kernel Subsystem . This vulnerability allows an authorized attacker to perform a local information disclosure . While the technical details of the root cause are limited to the TOCTOU classification (CWE-367), the imp...
EUVD-2026-100224
Use after free in Windows Update allows an authorized attacker to elevate privileges locally...
EUVD-2026-100214
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally...
EUVD-2026-100221
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-96235
Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network...
EUVD-2026-100209
Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network...
CVE-2026-96225
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...
CVE-2026-96231
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...
EUVD-2026-100203
Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network...
CVE-2026-96250
A Use after free vulnerability exists in the Windows USB Print Driver , where an authorized attacker can achieve local privilege elevation . The vulnerability is associated with CWE-416 . While the documents confirm the impact and the affected component, no specific exploit details or available l...
CVE-2026-96231
A vulnerability exists in .NET due to improper link resolution before file access (link following). This flaw allows an authorized attacker to elevate privileges locally . The impact is categorized as Access to elevated privileges with a CVSS score of 7.8 . No specific exploit details or remediat...
EUVD-2026-100201
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...
EUVD-2026-100202
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...
CVE-2026-96235
A vulnerability in .NET involves an out-of-bounds write that allows an unauthorized attacker to execute arbitrary code over a network. This issue is categorized under CWE-787 and has a CVSS 3.1 score of 8.8 (High) . Exploitation details are not provided in the documents, but the impact includes h...
CVE-2026-96225
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...
CVE-2026-96188
A vulnerability in Microsoft PowerToys allows an authorized attacker to achieve local privilege elevation through external control of system or configuration settings (CWE-15). The vulnerability has a High base severity score of 7.3, requiring local access and user interaction to exploit. No spec...
CVE-2026-96186
The Microsoft Windows Media Foundation component is vulnerable to a deserialization of untrusted data flaw (CWE-502). This vulnerability allows an authorized attacker to achieve local privilege elevation . No specific patch versions or exploit links are provided in the documents.