CVE-2026-57104 Azure Storage Explorer Elevation of Privilege Vulnerability

...

CVE-2026-70335 GitHub Copilot and Visual Studio Code Elevation of Privilege Vulnerability

...

CVE-2026-70335 GitHub Copilot and Visual Studio Code Elevation of Privilege Vulnerability

...

CVE-2026-70335

The CVE-2026-70335 entry concerns an os command injection in GitHub Copilot and Visual Studio Code due to improper neutralization of special elements. This allows a local attacker to achieve elevation of privileges. The public records identify affected products (GitHub Copilot and VS Code) and de...

CVE-2026-70304 Windows DNS Elevation of Privilege Vulnerability

...

CVE-2026-70304 Windows DNS Elevation of Privilege Vulnerability

...

CVE-2026-70330 Windows DNS Elevation of Privilege Vulnerability

...

CVE-2026-70330 Windows DNS Elevation of Privilege Vulnerability

...

CVE-2026-70330

CVE-2026-70330 is a heap-based buffer overflow in the Windows DNS service that allows an authorized attacker to elevate privileges locally . NVD assigns a CVSS 3.1 score of 7.8 (HIGH) with low privileges required, while Microsoft's CNA score is 6.7 (MEDIUM) requiring high privileges. CISA SSVC as...

CVE-2026-70324 Microsoft SharePoint Elevation of Privilege Vulnerability

...

CVE-2026-70324 Microsoft SharePoint Elevation of Privilege Vulnerability

...

CVE-2026-70324

CVE-2026-70324 describes a server-side request forgery (SSRF) in Microsoft Office SharePoint that allows an authorized attacker to elevate privileges over a network. Affected product: SharePoint server components; root cause is SSRF enabling privilege escalation. The CVSSv3.1 score is 8.8 (HIGH) ...

CVE-2026-70307 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

...

CVE-2026-70307 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

...

CVE-2026-70307

CVE-2026-70307 describes a use-after-free flaw in the Windows Ancillary Function Driver for WinSock that can allow an authorized local attacker to elevate privileges. Affected component is the Windows network stack’s Ancillary Function Driver used by WinSock; root cause is a use-after-free bug in...

CVE-2026-68821

The CVE-2026-68821 entry concerns Windows Package Manager with an issue in privilege management that allows an authorized local attacker to elevate privileges. Affected software is Windows Package Manager; the underlying cause is improper privilege handling, enabling local privilege escalation wi...

CVE-2026-68821 Windows Package Manager Elevation of Privilege Vulnerability

...

CVE-2026-68821 Windows Package Manager Elevation of Privilege Vulnerability

...

CVE-2026-68820 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

...

CVE-2026-68820

CVE-2026-68820 is a local privilege escalation caused by a use-after-free in the Windows Ancillary Function Driver for WinSock (afd.sys). The vulnerability allows an attacker with code execution on the target to elevate to SYSTEM, as described in NVD/NVD-derived entries and echoed by Krebs/Automo...