1664 matches found
CVE-2026-27914 Microsoft Management Console Elevation of Privilege Vulnerability
...
CVE-2026-27909
CVE-2026-27909 is a Windows Search Component elevation-of-privilege vulnerability (use-after-free) that could allow an authenticated local attacker to gain SYSTEM privileges. Connected advisories confirm the issue and indicate Microsoft has fixed vulnerabilities across Windows components in April...
CVE-2026-26184 Windows Projected File System Elevation of Privilege Vulnerability
...
CVE-2026-26170 PowerShell Elevation of Privilege Vulnerability
...
CVE-2026-26170 PowerShell Elevation of Privilege Vulnerability
...
CVE-2026-26168 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
...
CVE-2026-26159 Remote Desktop Licensing Service Elevation of Privilege Vulnerability
...
CVE-2026-33825 Microsoft Defender Elevation of Privilege Vulnerability
...
CVE-2026-32219 Microsoft Brokering File System Elevation of Privilege Vulnerability
...
CVE-2026-32168 Azure Monitor Agent Elevation of Privilege Vulnerability
...
CVE-2026-32167 SQL Server Elevation of Privilege Vulnerability
...
CVE-2026-32090 Windows Speech Brokered Api Elevation of Privilege Vulnerability
...
CVE-2026-32090 Windows Speech Brokered Api Elevation of Privilege Vulnerability
...
CVE-2026-32090
CVE-2026-32090 affects the Windows Speech Brokered API. The vulnerability is an Elevation of Privilege with a CVSSv3.1 base score of 7.8 (HIGH). It is a LOCAL, LOW attack complexity, LOW privileges required, with no user interaction and UNCHANGED scope. The impact is HIGH for confidentiality, int...
CVE-2026-32089 Windows Speech Brokered Api Elevation of Privilege Vulnerability
...
CVE-2026-32083
CVE-2026-32083 pertains to Windows’ Simple Search and Discovery Protocol (SSDP) Service elevation of privilege. The vulnerability is local, with low privileges required and no user interaction, and yields a high impact on confidentiality, integrity, and availability. Microsoft lists an official f...
CVE-2026-32075
CVE-2026-32075 affects Windows that uses the UPnP Device Host; vulnerability is Elevation of Privilege via a local vector. Requires LOW privileges and no user interaction, with high impact on confidentiality, integrity, and availability. Exploit code maturity is UNPROVEN; remediation is an offici...
CVE-2026-27921 Windows TDI Translation Driver (tdx.sys) Elevation of Privilege Vulnerability
...
CVE-2026-27921 Windows TDI Translation Driver (tdx.sys) Elevation of Privilege Vulnerability
...
CVE-2026-27921
CVE-2026-27921 describes a race condition in the Windows TDI Translation Driver (tdx.sys) that can allow an authenticated attacker to elevate to SYSTEM privileges. The description in multiple sources confirms a concurrency flaw involving a shared resource, aligned with the CVE entry’s root cause ...