313366 matches found
CVE-2026-49785: Improper Resource Shutdown or Release
Improper resource shutdown or release in Windows UEFI allows an authorized attacker to bypass a security feature locally...
Microsoft Windows: CVE-2026-83654: Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability
Missing authentication for critical function in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-70149: Windows Client Side Caching driver (csc.sys) Elevation of Privilege Vulnerability
Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver csc.sys allows an authorized attacker to disclose information locally...
PT-2026-111419
A vulnerability was determined in conductor-oss conductor up to 3.32.5. Affected by this vulnerability is the function A2AService.getAgentCard of the file ai/src/main/java/org/conductoross/conductor/ai/a2a/A2AService.java of the component Agent Card Fetching. Executing a manipulation of the...
CVE-2026-81971: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows NTFS allows an authorized attacker to elevate privileges locally...
CVE-2026-88139: Use After Free
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-69882: Untrusted Search Path
Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-70015: Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability
Use after free in Windows Local Security Authority Subsystem Service LSASS allows an authorized attacker to elevate privileges locally...
CVE-2026-70118: Use After Free
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-85901: Windows Graphics Component Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...
CVE-2026-83912: Use After Free
Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally...
CVE-2026-85884: Missing Authentication for Critical Function
Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-83586: Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability
Weak authentication in Windows Resilient File System ReFS Deduplication Service allows an authorized attacker to elevate privileges locally...
CVE-2026-96315: Missing Authorization
Missing authorization in Windows Overlay Filter allows an authorized attacker to perform tampering locally...
Microsoft Windows: CVE-2026-83721: Win32k Elevation of Privilege Vulnerability
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...
CVE-2026-88140: Out-of-bounds Read
Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally...
Microsoft Windows: CVE-2026-87712: Microsoft Windows QoS Scheduler Driver Elevation of Privilege Vulnerability
Use after free in Windows Quality of Service QoS Packet Scheduler allows an authorized attacker to elevate privileges locally...
PT-2026-112741
Name of the Vulnerable Software and Affected Versions Windows Installer affected versions not specified Description A use after free issue exists in Windows Installer. This allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs when an...