1664 matches found
Oracle VM VirtualBox Core Component Elevation of Privilege Vulnerability (CNVD-2026-18427)
Oracle VM VirtualBox is a desktop virtualization software developed by Oracle for running multiple operating systems on a single host. An elevation of privilege vulnerability exists in Oracle VM VirtualBox. The vulnerability stems from a failure of the Core component to properly handle privilege...
CVE-2026-33104 Win32k Elevation of Privilege Vulnerability
...
CVE-2026-33101 Windows Print Spooler Elevation of Privilege Vulnerability
...
CVE-2026-33100
CVE-2026-33100: Use-after-free in Windows Ancillary Function Driver for WinSock allows a locally authorized privilege escalation. The connected advisory set confirms the driver as affected and lists CVE-2026-33100 with a base CVSS v3.1 score of 7.0 (High) and local attack vector. Mitigation is vi...
CVE-2026-33101 Windows Print Spooler Elevation of Privilege Vulnerability
...
CVE-2026-33099 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
...
CVE-2026-32176 SQL Server Elevation of Privilege Vulnerability
...
CVE-2026-32150
CVE-2026-32150 is a local privilege-escalation vulnerability in Windows Function Discovery Service (fdwsd.dll) caused by a race condition from concurrent access to a shared resource. An authenticated, local attacker could elevate privileges. Public references indicate the issue is addressed by Mi...
CVE-2026-32091
CVE-2026-32091 is a Microsoft elevation of privilege vulnerability in the Brokering File System with a CVSS 3.1 base score of 8.4 (HIGH). It is a local, no-user-interaction attack requiring no privileges, with high impact on confidentiality, integrity, and availability. The exploitation status is...
CVE-2026-32091 Microsoft Brokering File System Elevation of Privilege Vulnerability
...
CVE-2026-32086 Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability
...
CVE-2026-32080 Windows WalletService Elevation of Privilege Vulnerability
...
CVE-2026-32077 Windows UPnP Device Host Elevation of Privilege Vulnerability
...
CVE-2026-32070 Windows Common Log File System Driver Elevation of Privilege Vulnerability
...
CVE-2026-32070 Windows Common Log File System Driver Elevation of Privilege Vulnerability
...
CVE-2026-32070
CVE-2026-32070 affects Windows where the Common Log File System Driver contains an elevation-of-privilege flaw. The root cause is not explicitly described in the provided text, but the CVSS 3.1 metrics indicate a local attack vector with high impact on confidentiality, integrity, and availability...
CVE-2026-32068 Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability
...
CVE-2026-32068
CVE-2026-32068 impacts Windows SSDP service, enabling local elevation of privilege via the Simple Search and Discovery Protocol. The issue is local, requires low privileges, and does not require user interaction. CVSS v3.1 base score 7.0 (HIGH) with HIGH impact on confidentiality, integrity, and ...
CVE-2026-27916
CVE-2026-27916 describes a use-after-free in Windows Universal Plug and Play (UPnP) Device Host that could allow an authorized, local attacker to elevate privileges. The connected documents confirm this CVE is associated with the UPnP Device Host and that Microsoft has published updates to fix vu...