339 matches found
CVE-2026-85921
CVE-2026-85921 is a double free vulnerability in Windows Secure Kernel Mode that allows an authorized attacker to elevate privileges locally . The CVSS 3.1 score is 8.2 (HIGH) with a local attack vector, low complexity, high privileges required, and changed scope , resulting in high impact to con...
CVE-2026-70341
Use after free in Microsoft Edge Chromium-based allows an authorized attacker to execute code over a network...
CVE-2026-83987
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-83985
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-83969
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-83948
Improper neutralization of special elements used in a command 'command injection' in Microsoft Azure CLI allows an authorized attacker to execute code over a network...
CVE-2026-81349
Improper neutralization of special elements used in an os command 'os command injection' in Azure HDInsights allows an authorized attacker to elevate privileges over a network...
CVE-2026-72993
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-72988
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-72980
Uncontrolled search path element in Windows Hello allows an authorized attacker to bypass a security feature locally...
CVE-2026-72945
Use of uninitialized resource in Windows Task Scheduler allows an authorized attacker to disclose information locally...
CVE-2026-71337
Stack-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally...
CVE-2026-70584
Access of resource using incompatible type 'type confusion' in Windows Core Messaging allows an authorized attacker to elevate privileges locally...
CVE-2026-70565
Use after free in Windows AFUNIX Socket Provider allows an authorized attacker to elevate privileges locally...
CVE-2026-69862
Out-of-bounds read in Windows Wireless Wide Area Network Service allows an authorized attacker to disclose information locally...
CVE-2026-69785
Untrusted search path in Windows Smart Card allows an authorized attacker to elevate privileges locally...
CVE-2026-69773
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network...
CVE-2026-69738
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally...