313240 matches found
EUVD-2026-99408
Exposure of sensitive system information to an unauthorized control sphere in Windows Clipboard User Service allows an authorized attacker to disclose information locally...
CVE-2026-83885
The Windows Virtualization-Based Security (VBS) Enclave is vulnerable to a flaw characterized by inadequate encryption strength . This security weakness allows an authorized attacker to perform spoofing locally . The vulnerability is associated with CWE-326 . No specific exploit code or details r...
CVE-2026-83896
A heap-based buffer overflow vulnerability exists in Windows Direct Composition . This flaw allows an authorized attacker to achieve local privilege elevation . No specific details regarding the affected component versions, root cause, or exploit code are provided in the documents. Remediation is...
EUVD-2026-99402
Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-83892
A vulnerability exists in the HID Parser Library component of Windows , where an out-of-bounds read allows an authorized attacker to disclose information locally . The severity is rated as MEDIUM with a CVSS 3.1 score of 5.5. No specific exploit details or in-the-wild exploitation data are provid...
CVE-2026-83853
A Use after free vulnerability exists in Windows Hello , which allows an authorized attacker to achieve local privilege escalation . The impact is classified as high regarding confidentiality, integrity, and availability. No specific exploit details or in-the-wild exploitation information are pro...
CVE-2026-83876
A Use after free vulnerability in Windows Shell allows an authorized attacker to achieve local privilege elevation . The vulnerability is characterized as having a high severity with a CVSS 3.1 score of 7.8 . No specific versions, root causes, or exploit details are provided in the documents. Rem...
CVE-2026-83872
A vulnerability exists in Windows TCP/IP due to an incorrect conversion between numeric types (CWE-681). This flaw allows an authorized attacker to perform a local elevation of privilege . The impact includes high severity for confidentiality, integrity, and availability. No specific exploit deta...
EUVD-2026-99389
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...
CVE-2026-83864
The Windows NTFS file system contains an improper access control vulnerability. This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive data. While the vulnerability is confirmed, the provided documents do not specify the exact component,...
EUVD-2026-99394
Relative path traversal in Windows Internet wininet.dll allows an authorized attacker to perform tampering locally...
EUVD-2026-99399
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...
CVE-2026-83875
A vulnerability exists in the HID Parser Library where an out-of-bounds read occurs. This flaw allows an authorized attacker to disclose information locally . The impact is categorized as a high confidentiality loss. No specific exploit information or remediation details are provided in the docum...
EUVD-2026-99386
Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-99377
Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally...
CVE-2026-83842
A double free vulnerability exists within the Windows TCP/IP stack. This flaw allows an authorized attacker to achieve local privilege escalation . Exploitation details and specific affected versions are not provided in the documents. Remediation involves applying the official fix from Microsoft.
CVE-2026-83848
A vulnerability exists in the Windows COM+ Event System Service due to an untrusted pointer dereference . This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit details or versions are provided in the documents, though the issue is confirmed with a HIG...
EUVD-2026-99383
Out-of-bounds read in Windows Hello allows an authorized attacker to disclose information locally...
CVE-2026-83849
An out-of-bounds read vulnerability exists in Windows Hello , which allows an authorized attacker to disclose information locally . The vulnerability's confidentiality impact is rated as high, while integrity and availability are unaffected. No specific exploit code or in-the-wild exploitation de...