37431 matches found
CVE-2026-50466 Microsoft Brokering File System Elevation of Privilege Vulnerability
...
CVE-2026-50466 Microsoft Brokering File System Elevation of Privilege Vulnerability
...
CVE-2026-50466
CVE-2026-50466 is a local privilege escalation in the Windows Brokering File System caused by a use-after-free in the Windows Brokering File System component. Public documentation confirms that an authorized attacker could elevate privileges locally (CVSSv3.1 base score 7.8, LOCAL attack vector, ...
CVE-2026-50451
CVE-2026-50451 affects Windows Routing and Remote Access Service (RRAS): missing authentication for a critical function enables local privilege escalation by an authorized attacker. Documented impact is privilege escalation (local), base CVSSv3.1 7.1 (HIGH); remediation is Microsoft security upda...
CVE-2026-50451 Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability
...
CVE-2026-50367 Windows Sensor Data Service Elevation of Privilege Vulnerability
...
CVE-2026-50367 Windows Sensor Data Service Elevation of Privilege Vulnerability
...
CVE-2026-50367
CVE-2026-50367 describes an elevation of privilege in the Windows Sensor Data Service due to a logic flaw: incorrect access of an indexable resource (a range error). An authenticated local attacker could exploit this to escalate privileges on the affected system. The vulnerability’s CVSS 3.1 vect...
CVE-2026-50374
CVE-2026-50374 concerns the Windows Cloud Files Mini Filter Driver. The connected sources confirm a use-after-free condition in this driver that can be exploited by an authorized attacker to gain elevated privileges, with the exploitation described as requiring a physical attack. The impact is el...
CVE-2026-50374 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
...
CVE-2026-50374 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
...
CVE-2026-50422 Windows NTFS Elevation of Privilege Vulnerability
...
CVE-2026-50422
CVE-2026-50422 is a Windows NTFS vulnerability described as an out-of-bounds read that could let an authenticated, local attacker gain elevated privileges. Affected component: Windows NTFS (NTFS subsystem). Root cause: out-of-bounds read in NTFS code path. Impact: local privilege escalation and p...
CVE-2026-50421 Windows Connected User Experiences and Telemetry Elevation of Privilege Vulnerability
...
CVE-2026-50421
CVE-2026-50421 is a Windows vulnerability in Windows Connected User Experiences and Telemetry described as a local privilege escalation via a resource access type confusion. The CVE entry is supported by multiple records: NVD/NCSC/CIRCL indicate the issue and Microsoft has released updates to add...
CVE-2026-50422 Windows NTFS Elevation of Privilege Vulnerability
...
CVE-2026-50421 Windows Connected User Experiences and Telemetry Elevation of Privilege Vulnerability
...
CVE-2026-50427
CVE-2026-50427 affects Content Delivery Manager. Description: use-after-free vulnerability that allows an authorized attacker to elevate privileges locally. CVSS v3.1: 7.8 (Local, Low user interaction, Privilege Escalation, high impact on confidentiality, integrity, availability). Connected sourc...
CVE-2026-50413
CVE-2026-50413 is a Windows Runtime elevation-of-privilege vulnerability caused by a use-after-free condition. The NVD/NCSC entries describe an authorized local attacker exploiting a use-after-free in Windows Runtime to gain elevated privileges. The CVSSv3.1 base score is 8.8 (HIGH) with LOCAL at...