CVE-2026-65786

CVE-2026-65786 is a heap-based buffer overflow in Desktop Window Manager that allows an authorized local attacker to elevate privileges. Affected: Desktop Window Manager on Windows. Root cause: heap-based overflow in DWM. Impact: local privilege escalation with high confidentiality/integrity/avai...

CVE-2026-65786 Desktop Window Manager Elevation of Privilege Vulnerability

...

CVE-2026-65786 Desktop Window Manager Elevation of Privilege Vulnerability

...

CVE-2026-65678 Windows Win32k Elevation of Privilege Vulnerability

...

CVE-2026-65678

CVE-2026-65678: A use-after-free in Windows Win32K enables an in-local privilege elevation by an authorized attacker. Affected software is Windows with Win32K component; the vulnerability arises from improper lifecycle handling leading to use-after-free conditions. The CVSS score is 7.0 (High) wi...

CVE-2026-65678 Windows Win32k Elevation of Privilege Vulnerability

...

CVE-2026-65672 Remote Access API Elevation of Privilege Vulnerability

...

CVE-2026-65672

CVE-2026-65672 is a Windows vulnerability describing a heap-based buffer overflow in the Windows Remote Access API. An authorized attacker can elevate privileges locally. CVSS v3.1 metrics: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H; base score 7.8 (HIGH). Attack vector is LOCAL, with LOW complexity and...

CVE-2026-65672 Remote Access API Elevation of Privilege Vulnerability

...

CVE-2026-65671

The CVE-2026-65671 entry describes a heap-based buffer overflow in Windows Remote Access API that allows an authorized attacker to achieve local privilege escalation. The impact is indicated as high (CVSSv3.1 base score 7.8) with local access required and no user interaction. Public details in th...

CVE-2026-65671 Remote Access API Elevation of Privilege Vulnerability

...

CVE-2026-65671 Remote Access API Elevation of Privilege Vulnerability

...

CVE-2026-62910 Microsoft Exchange Server Elevation of Privilege Vulnerability

...

CVE-2026-62910

CVE-2026-62910 affects Microsoft Exchange Server and stems from improper control of resource identifiers (resource injection). According to the available documents, the issue allows an authorized attacker to elevate privileges over a network, with CVSS v3.1 base metrics: Network attack vector, Lo...

CVE-2026-62909 .NET Elevation of Privilege Vulnerability

...

CVE-2026-62909

The CVE-2026-62909 entry concerns an uncaught exception in .NET that allows an authorized attacker to locally elevate privileges. Affected software is the .NET framework/component referenced in the CVE description. The impact is elevation of privilege with a high base score (CVSS 3.1: 7.8, HIGH),...

CVE-2026-62910 Microsoft Exchange Server Elevation of Privilege Vulnerability

...

CVE-2026-62909 .NET Elevation of Privilege Vulnerability

...

CVE-2026-62908 Windows Backup Engine Elevation of Privilege Vulnerability

...

CVE-2026-62908

CVE-2026-62908: A race condition in the Windows Backup Engine allows local privilege escalation by an authorized attacker. Documented impact: high across confidentiality, integrity, and availability (CVSS 3.1 base score 7.0; LOCAL access; HIGH likelihood of impact). Affected component is the Wind...