37538 matches found
Windows HTTP.sys Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows HTTP.sys allows an authorized attacker to elevate privileges locally...
Cluster Client Failover (CCF) Elevation of Privilege Vulnerability
Use after free in Windows Cluster Client Failover allows an authorized attacker to elevate privileges locally...
PT-2026-7340
Name of the Vulnerable Software and Affected Versions Windows Ancillary Function Driver for WinSock affected versions not specified Description An elevation-of-privilege issue exists in the Windows Ancillary Function Driver for WinSock, potentially allowing an attacker to elevate privileges...
Microsoft Excel 安全漏洞
Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. An elevation of privilege vulnerability exists in Microsoft Excel, which can be exploited by an attacker to elevate privileges...
KB5075906: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (February 2026)
The remote Windows host is missing security update 5075906. It is, therefore, affected by multiple vulnerabilities - Protection mechanism failure in MSHTML Framework allows an unauthorized attacker to bypass a security feature over a network. CVE-2026-21513 - Access of resource using incompatible...
KB5075970: Windows Server 2012 R2 Security Update (February 2026)
The remote Windows host is missing security update 5075970. It is, therefore, affected by multiple vulnerabilities - Protection mechanism failure in MSHTML Framework allows an unauthorized attacker to bypass a security feature over a network. CVE-2026-21513 - Heap-based buffer overflow in Microso...
Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability
Microsoft Office Word contains a reliance on untrusted inputs in a security decision vulnerability that could allow an authorized attacker to elevate privileges locally...
CVE-2026-21419
Dell Display and Peripheral Manager Windows versions prior to 2.2 contain an Improper Link Resolution Before File Access 'Link Following' vulnerability in the Installer and Service. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of...
CVE-2026-24300
Azure Front Door Elevation of Privilege Vulnerability...
CVE-2026-24302
Azure Arc Elevation of Privilege Vulnerability...
EUVD-2026-5522
Azure Arc Elevation of Privilege Vulnerability...
EUVD-2026-5520
Azure Front Door Elevation of Privilege Vulnerability...
CVE-2026-24302
Improper access control in Azure Arc allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-24300
Azure Front Door Elevation of Privilege Vulnerability...
CVE-2026-24300 Azure Front Door Elevation of Privilege Vulnerability
...
CVE-2026-24300 Azure Front Door Elevation of Privilege Vulnerability
...
CVE-2026-24300
Azure Front Door Elevation of Privilege Vulnerability (CVE-2026-24300) is documented with a Network attack vector and a high-impact profile (Confidentiality, Integrity, Availability). The CVE entry indicates no details on exploited versions or fixes within the provided documents. Red Hat and EU a...
CVE-2026-24300
Azure Front Door Elevation of Privilege Vulnerability...
CVE-2026-24302
CVE-2026-24302 is an Elevation of Privilege issue in Microsoft Azure Arc caused by improper access control. An authenticated attacker could exploit a network path to elevate privileges; CVSS 3.1 vectors show network access, no user interaction, high to critical impact. Microsoft/Microsoft-affilia...