313366 matches found
PT-2026-118112
Уязвимость интегрированной системы управления предприятием Microsoft Dynamics NAV связана с неверным ограничением имени пути к каталогу с ограниченным доступом. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, повысить свои привилегии...
Microsoft Windows: CVE-2026-96313: Windows Push Notifications Elevation of Privilege Vulnerability
Missing authentication for critical function in Windows Push Notifications allows an authorized attacker to elevate privileges locally...
CVE-2026-96225: Improper Link Resolution Before File Access
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...
CVE-2026-70038: Use After Free
Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network...
CVE-2026-83681: Weak Authentication
Weak authentication in Microsoft PowerToys allows an authorized attacker to perform tampering locally...
CVE-2026-83905: Exposure of Sensitive System Information to an Unauthorized Control Sphere
Exposure of sensitive system information to an unauthorized control sphere in Windows Shell allows an authorized attacker to disclose information locally...
CVE-2026-96225: Improper Link Resolution Before File Access
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...
CVE-2026-83705: Exposure of Sensitive System Information to an Unauthorized Control Sphere
Exposure of sensitive system information to an unauthorized control sphere in Windows HTTP.sys allows an authorized attacker to disclose information locally...
PT-2026-112683
Name of the Vulnerable Software and Affected Versions Windows Direct Composition affected versions not specified Description A use after free issue in Windows Direct Composition allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs whe...
PT-2026-112578
Name of the Vulnerable Software and Affected Versions Windows Encrypting File System EFS affected versions not specified Description An absolute path traversal issue exists in the Windows Encrypting File System EFS. This allows an authorized attacker to elevate privileges over a network...
CVE-2026-102207: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Kernel allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-69387: Windows Error Reporting Elevation of Privilege Vulnerability
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-70116: Windows Resilient File System (ReFS) Security Feature Bypass Vulnerability
Stack-based buffer overflow in Windows Resilient File System ReFS allows an unauthorized attacker to bypass a security feature with a physical attack...
PT-2026-112266
Improper limitation of a pathname to a restricted directory 'path traversal' in .NET allows an authorized attacker to elevate privileges locally...
CVE-2026-96231: Improper Link Resolution Before File Access
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-83913: Windows Kernel Elevation of Privilege Vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-85854: Use After Free
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
PT-2026-112545
Name of the Vulnerable Software and Affected Versions Windows Error Reporting affected versions not specified Description A time-of-check time-of-use toctou race condition exists in Windows Error Reporting. This occurs when a program checks a condition such as a file's existence or permissions an...
Microsoft Windows: CVE-2026-83568: Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability
Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally...
CVE-2026-83763: Access of Resource Using Incompatible Type
Access of resource using incompatible type 'type confusion' in Windows Input System allows an authorized attacker to elevate privileges locally...