305270 matches found
CVE-2026-83583
Improper access control in Windows Geotag Broker allows an authorized attacker to elevate privileges locally...
CVE-2026-83582
Use after free in Windows Graphics Kernel allows an authorized attacker to disclose information locally...
CVE-2026-83584
Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally...
CVE-2026-83571
Null pointer dereference in Windows Audio Service allows an authorized attacker to disclose information locally...
CVE-2026-83573
Integer overflow or wraparound in Windows Kernel Mode Driver allows an unauthorized attacker to elevate privileges with a physical attack...
CVE-2026-83565
Buffer over-read in Windows Encrypting File System EFS allows an authorized attacker to disclose information locally...
CVE-2026-83521
Out-of-bounds read in Windows IKE Extension allows an authorized attacker to disclose information over a network...
CVE-2026-83511
Weak authentication in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-83509
Untrusted search path in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally...
CVE-2026-83500
Url redirection to untrusted site 'open redirect' in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...
CVE-2026-83499
Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally...
CVE-2026-81964
Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker to bypass a security feature locally...
CVE-2026-81971
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows NTFS allows an authorized attacker to elevate privileges locally...
CVE-2026-73027
External control of system or configuration setting in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally...
CVE-2026-71347
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Security Center allows an authorized attacker to elevate privileges locally...
CVE-2026-70580
Missing authentication for critical function in Windows Credential Guard allows an authorized attacker to perform spoofing locally...
CVE-2026-70293
Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...
CVE-2026-70294
Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...