CVE-2026-62908 Windows Backup Engine Elevation of Privilege Vulnerability

...

CVE-2026-62894 Windows DWM Core Library Elevation of Privilege Vulnerability

...

CVE-2026-62894

CVE-2026-62894 describes a heap-based buffer overflow in the Windows DWM Core Library that allows an authenticated local attacker to elevate privileges. The vulnerability is documented across CVE/NVD listings with a CVSSv3.1 base score of 7.8 (HIGH), vector: LOCAL, LOW attack complexity, and NONE...

CVE-2026-62894 Windows DWM Core Library Elevation of Privilege Vulnerability

...

CVE-2026-62892 Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability

...

CVE-2026-62892 Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability

...

CVE-2026-62892

CVE-2026-62892 is a use-after-free vulnerability in the Capability Access Management Service (camsvc) that could allow an authorized attacker to elevate privileges locally. The publicly available data identifies a local attack vector with high impact (confidentiality, integrity, and availability)...

CVE-2026-62890

CVE-2026-62890 is a heap-based buffer overflow in Windows GDI+ that allows an authorized attacker to execute code locally. CVSS v3.1 base score 7.8 (HIGH) with LOCAL attack vector, requiring LOW privileges and no user interaction; impact to confidentiality, integrity, and availability is HIGH. No...

CVE-2026-62890 Windows GDI+ Elevation of Privilege Vulnerability

...

CVE-2026-62890 Windows GDI+ Elevation of Privilege Vulnerability

...

CVE-2026-62877 Windows Win32k Elevation of Privilege Vulnerability

...

CVE-2026-62877

CVE-2026-62877 is a Windows Win32K vulnerability described as a stack-based buffer overflow that enables local privilege escalation by an authorized user. The affected component is the Windows Win32K subsystem; the root cause is a stack-based buffer overflow within Win32K code paths. The CVSS vec...

CVE-2026-62877 Windows Win32k Elevation of Privilege Vulnerability

...

CVE-2026-62876

The CVE-2026-62876 vulnerability affects Windows Win32K, with an out-of-bounds read that allows an authorized, local attacker to elevate privileges. Affected component: Win32K (Windows). Root cause and impact are: local escalation to higher integrity/privilege with potential confidentiality, inte...

CVE-2026-62876 Windows Win32k Elevation of Privilege Vulnerability

...

CVE-2026-62876 Windows Win32k Elevation of Privilege Vulnerability

...

CVE-2026-62812 Windows DHCP Server Elevation of Privilege Vulnerability

...

CVE-2026-62812 Windows DHCP Server Elevation of Privilege Vulnerability

...

CVE-2026-62812

CVE-2026-62812 concerns Windows DHCP Server and describes an elevation of privilege via improper link resolution before file access ('link following'). An attacker with local, low-privilege access and no user interaction could elevate privileges to achieve high impact (CVSS v3.1: AV:L/AC:L/PR:L/U...

CVE-2026-62797

Technical details about CVE-2026-62797 are not publicly available in the provided documents. The descriptions only note a heap-based buffer overflow in Windows NTFS causing local privilege escalation. Monitor for updates.