37468 matches found
CVE-2026-33104
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...
CVE-2026-33104 Win32k Elevation of Privilege Vulnerability
...
CVE-2026-33104
CVE-2026-33104 is a Windows Win32K - GRFX race condition vulnerability rated CVSS v3.1 7.0 (High) with local privilege escalation impact. The connected sources label this as a Win32K-GRFX issue enabling “Obtain increased privileges” and reference Microsoft Windows updates guidance, but the provid...
CVE-2026-33104 Win32k Elevation of Privilege Vulnerability
...
CVE-2026-33100
CVE-2026-33100: Use-after-free in Windows Ancillary Function Driver for WinSock allows a locally authorized privilege escalation. The connected advisory set confirms the driver as affected and lists CVE-2026-33100 with a base CVSS v3.1 score of 7.0 (High) and local attack vector. Mitigation is vi...
CVE-2026-33101
CVE-2026-33101 is a Windows Print Spooler Components use-after-free vulnerability that allows local privilege escalation by an authorized attacker. Affected component: Windows Print Spooler Components. Root cause: use-after-free condition as described in the CVE entry. Impact: local privilege ele...
CVE-2026-33101 Windows Print Spooler Elevation of Privilege Vulnerability
...
CVE-2026-33100 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
...
CVE-2026-33100 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
...
CVE-2026-33101 Windows Print Spooler Elevation of Privilege Vulnerability
...
CVE-2026-33099 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
...
CVE-2026-33099
Technical details (affected products, root cause, vulnerable components, or exploitation specifics) are not publicly provided in the supplied documents. Monitor for updates from sources like MSRC and the CVE record.
CVE-2026-32176
CVE-2026-32176 arises from improper neutralization of input in SQL Server, enabling an authorized local user to elevate privileges. Connected sources confirm this is one of multiple SQL Server elevation-of-privilege issues addressed in the Microsoft April 2026 security updates (e.g., KB5084815 fo...
CVE-2026-32176 SQL Server Elevation of Privilege Vulnerability
...
CVE-2026-32176 SQL Server Elevation of Privilege Vulnerability
...
CVE-2026-32171 Azure Logic Apps Elevation of Privilege Vulnerability
...
CVE-2026-32171
CVE-2026-32171—Azure Logic Apps Elevation of Privilege is confirmed with a high-severity impact (CVSS v3.1 base 8.8) due to insufficiently protected credentials that allow an authorized attacker to obtain elevated privileges over the network. Affected product: Azure Logic Apps. Root cause: insuff...
CVE-2026-32171 Azure Logic Apps Elevation of Privilege Vulnerability
...
CVE-2026-32164
CVE-2026-32164 describes a race condition in Windows User Interface Core that can allow an authorized local attacker to elevate privileges. Technical details in the connected advisories confirm the flaw is a Windows UI Core race condition and that Microsoft has released security updates to fix it...