CVE-2026-68820

CVE-2026-68820 is a local privilege escalation caused by a use-after-free in the Windows Ancillary Function Driver for WinSock (afd.sys). The vulnerability allows an attacker with code execution on the target to elevate to SYSTEM, as described in NVD/NVD-derived entries and echoed by Krebs/Automo...

CVE-2026-68820 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

...

CVE-2026-66799 Windows Key Guard Elevation of Privilege Vulnerability

...

CVE-2026-68792 Microsoft Office Elevation of Privilege Vulnerability

...

CVE-2026-66799

CVE-2026-66799 describes a heap-based buffer overflow in Windows Key Guard that allows an authenticated, local attacker to elevate privileges. Affected component: Windows Key Guard. Root cause: heap-based buffer overflow (as stated). Impact: local privilege escalation with high confidentiality, i...

CVE-2026-66799 Windows Key Guard Elevation of Privilege Vulnerability

...

CVE-2026-68792 Microsoft Office Elevation of Privilege Vulnerability

...

CVE-2026-68792

CVE-2026-68792 concerns a Microsoft Office command-injection vulnerability (improper neutralization of special elements used in a command) that allows an authorized, local attacker with low privileges and no user interaction to achieve local privilege elevation. Impacted aspects: confidentiality,...

CVE-2026-65814 Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability

...

CVE-2026-65814

CVE-2026-65814: Heap-based buffer overflow in Windows Storage Port Driver enabling local privilege escalation for an authorized attacker. Documents provide only the generic impact; no specific affected Windows versions or patch details are available. Exploitation status is not described in the co...

CVE-2026-65814 Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability

...

CVE-2026-65813 Microsoft Exchange Server Elevation of Privilege Vulnerability

...

CVE-2026-65813 Microsoft Exchange Server Elevation of Privilege Vulnerability

...

CVE-2026-65813

SSRF in Microsoft Exchange Server lets an authenticated attacker escalate privileges over the network. NVD scores it HIGH (CVSS 8.8), while Microsoft's CNA rates it MEDIUM (6.5) with confidentiality impact only. Microsoft has released fixes: KB5121573 (Exchange Server Subscription Edition RTM), K...

CVE-2026-65787

The CVE-2026-65787 entry describes a heap-based buffer overflow in Desktop Window Manager that allows an authorized attacker to elevate privileges locally. Documented impact is local privilege escalation with a high severity (CVSS 3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). The vulnerability affec...

CVE-2026-65788

CVE-2026-65788 is a use-after-free in Desktop Window Manager that enables local privilege escalation for an authorized user. Documented impact is elevation of privileges; CVSSv3.1 base score 7.0 (HIGH) with LOCAL attack, HIGH impact to confidentiality, integrity, and availability. Connected sourc...

CVE-2026-65788 Desktop Window Manager Elevation of Privilege Vulnerability

...

CVE-2026-65787 Desktop Window Manager Elevation of Privilege Vulnerability

...

CVE-2026-65788 Desktop Window Manager Elevation of Privilege Vulnerability

...

CVE-2026-65787 Desktop Window Manager Elevation of Privilege Vulnerability

...