313240 matches found
CVE-2026-84011
The Windows SMB Client is susceptible to an incorrect authorization vulnerability (CWE-863) that allows an authorized attacker to bypass a security feature locally. The vulnerability results in a high integrity impact but no impact on confidentiality or availability. Remediation is provided via a...
CVE-2026-83927
The Windows Registry is susceptible to an improper link resolution before file access (link following) vulnerability. This security flaw allows an authorized attacker to achieve local privilege escalation . While the specific affected versions and technical root causes are not detailed beyond the...
EUVD-2026-99438
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
CVE-2026-83916
A double free vulnerability in Windows Error Reporting allows an authorized attacker to achieve local code execution . The vulnerability is characterized by a CWE-415 flaw, which can lead to significant impacts on confidentiality, integrity, and availability . An official fix is available, and sp...
CVE-2026-83920
A heap-based buffer overflow exists in the Microsoft Windows Search Component . This vulnerability allows an authorized attacker to achieve local privilege escalation . No specific versions, exploit details, or remediation steps are provided in the documents beyond the existence of an official fix.
CVE-2026-83769
A Use after free vulnerability exists in OpenSSH for Windows , which allows an authorized attacker to achieve local privilege escalation . The vulnerability is classified with a CVSS 3.1 base score of 7.8 , indicating a high severity. No specific exploit details or in-the-wild exploitation record...
EUVD-2026-99424
Weak authentication in Windows Resilient File System ReFS Deduplication Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-99426
Use after free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally...
EUVD-2026-99425
Use after free in Internet Explorer allows an authorized attacker to elevate privileges locally...
CVE-2026-83886
A Use after free vulnerability exists in the Windows Update Orchestrator Service . This flaw allows an authorized attacker to achieve local privilege elevation . While the specific technical root cause is not detailed in the provided documents, the impact includes high levels of confidentiality, ...
EUVD-2026-99421
Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...
EUVD-2026-99419
Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally...
EUVD-2026-99416
Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...
CVE-2026-70248
A null pointer dereference vulnerability exists in Windows Hyper-V . This flaw allows an authorized attacker to perform a local denial of service (DoS) attack. No specific versions or exploit links are provided in the documents, but the vulnerability has an official fix available.
CVE-2026-70128
An out-of-bounds read vulnerability exists in the HID Parser Library , which allows an authorized attacker to disclose information locally . The vulnerability results in a high confidentiality impact as it enables local information disclosure. No specific exploitation details or exploit links are...
CVE-2026-70222
A Relative path traversal vulnerability exists in Windows Shell . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-23 . No specific exploit information or specific internal component details are provided in the documentation.
EUVD-2026-99422
Improper access control in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally...
EUVD-2026-99418
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-70163
The OpenSSH for Windows software is vulnerable to a Denial of Service (DoS) attack due to the allocation of resources without limits or throttling . An unauthorized attacker can exploit this flaw over a network to disrupt service. The vulnerability is associated with CWE-770 . Remediation is avai...