CVE-2026-27918 Windows Shell Elevation of Privilege Vulnerability

...

CVE-2026-27918

CVE-2026-27918 describes a race condition in the Windows Shell where concurrent execution over a shared resource allows an authorized local attacker to elevate privileges. The Red Hat and NC SC advisories reiterate the same description, confirming Windows Shell as the affected component and local...

CVE-2026-27915 Windows UPnP Device Host Elevation of Privilege Vulnerability

...

CVE-2026-26174 Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability

...

CVE-2026-26166 Windows Shell Elevation of Privilege Vulnerability

...

CVE-2026-26165

CVE-2026-26165 is a Windows Shell elevation-of-privilege vulnerability. The record shows local access required (attack vector: LOCAL), with low privileges required and no user interaction, and maintains the same security scope. The impact is high on confidentiality, integrity, and availability, w...

CVE-2026-26165 Windows Shell Elevation of Privilege Vulnerability

...

CVE-2026-26162

CVE-2026-26162 is a Windows OLE vulnerability described as a type-confusion in resource access that enables a locally authenticated attacker to elevate privileges. The Red Hat and NVD/NCSC entries confirm the same issue, with Microsoft’s MSRC entry associating it to Windows OLE and listing Window...

CVE-2026-26161 Windows Sensor Data Service Elevation of Privilege Vulnerability

...

CVE-2026-26161

Technical details such as affected product/component, root cause, impact specifics, or available remediation are not provided in the supplied documents. Monitor official CVE and vendor advisories for updates.

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

Windows UPnP Device Host Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...

SQL Server Elevation of Privilege Vulnerability

Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges locally...

Windows Kerberos Elevation of Privilege Vulnerability

Improper authorization in Windows Kerberos allows an authorized attacker to elevate privileges over an adjacent network...

Microsoft Azure Monitor Agent < 1.41.0 Elevation of Privilege (CVE-2026-32192)

The version of Microsoft Azure Monitor Agent installed on the remote host is prior to 1.41.0. It is, therefore, affected by an elevation of privilege vulnerability: - An elevation of privilege vulnerability exists in Azure Monitor Agent that allows an authorized attacker to elevate privileges...

BIT-DOTNET-2026-26131 .NET Elevation of Privilege Vulnerability

Incorrect default permissions in .NET allows an authorized attacker to elevate privileges locally...

CVE-2026-32186

Server-side request forgery ssrf in Microsoft Bing allows an unauthorized attacker to elevate privileges over a network...

PT-2026-30207

Name of the Vulnerable Software and Affected Versions Microsoft Bing affected versions not specified Description A Server-Side Request Forgery SSRF issue exists within Bing's search infrastructure. This could allow attackers to pivot into Microsoft's internal networks. The vulnerability involves...

Azure Custom Locations Resource Provider (RP) Elevation of Privilege Vulnerability

Server-side request forgery ssrf in Azure Custom Locations Resource Provider RP allows an authorized attacker to elevate privileges over a network...

Security information for Hitachi Disk Array Systems

Overview CVE-2026-20846 | GDI+ Denial of Service Vulnerability CVE-2026-21222 | Windows Kernel Information Disclosure Vulnerability CVE-2026-21231 | Windows Kernel Elevation of Privilege Vulnerability CVE-2026-21234 | Windows Connected Devices Platform Service Elevation of Privilege Vulnerability...