37429 matches found
CVE-2026-62737
CVE-2026-62737 describes a local privilege escalation in Windows 11 kernel via untrusted pointer dereference in the ExecutionContext.sys path. Affected component: Windows kernel driver; vulnerability arises from insufficient validation of a kernel function pointer before dispatch to a worker thre...
CVE-2026-62737 Windows Kernel Elevation of Privilege Vulnerability
...
CVE-2026-62735 Windows HTTP.sys Elevation of Privilege Vulnerability
...
CVE-2026-62735 Windows HTTP.sys Elevation of Privilege Vulnerability
...
CVE-2026-62753 Windows HTTP.sys Elevation of Privilege Vulnerability
...
CVE-2026-62753
CVE-2026-62753 is a heap-based buffer overflow in Windows HTTP.sys that allows local privilege escalation by an authorized attacker. Affected: Windows HTTP.sys; Impact: local high-severity compromise of confidentiality, integrity, and availability. CVSS: 7.0 (3.1) with LOCAL, LOW privileges requi...
CVE-2026-62753 Windows HTTP.sys Elevation of Privilege Vulnerability
...
CVE-2026-62729 Windows Telephony Service Elevation of Privilege Vulnerability
...
CVE-2026-62729 Windows Telephony Service Elevation of Privilege Vulnerability
...
CVE-2026-62729
CVE-2026-62729 describes a race condition in Windows Telephony Service caused by concurrent execution on a shared resource with improper synchronization. This allows an authorized, local attacker to elevate privileges. The entry notes a local attack vector with high impact on confidentiality, int...
CVE-2026-62748 Windows Telephony Service Elevation of Privilege Vulnerability
...
CVE-2026-62748 Windows Telephony Service Elevation of Privilege Vulnerability
...
CVE-2026-62748
CVE-2026-62748 affects the Windows Telephony Service. The issue is a race condition due to improper synchronization on a shared resource, enabling a locally authorized attacker to elevate privileges. The weakness is exploited locally with no user interaction and results in high impact to confiden...
CVE-2026-62724 Windows Telephony Service Elevation of Privilege Vulnerability
...
CVE-2026-62723 Windows Telephony Service Elevation of Privilege Vulnerability
...
CVE-2026-62724 Windows Telephony Service Elevation of Privilege Vulnerability
...
CVE-2026-62724
CVE-2026-62724 is a local privilege escalation affecting the Windows Telephony Service due to a use-after-free. An authorized attacker can elevate privileges locally. Root cause: use-after-free in Telephony service code; impact: high (local elevation of rights) per CVSS 3.1; exploitability and ex...
CVE-2026-62723 Windows Telephony Service Elevation of Privilege Vulnerability
...
CVE-2026-62723
CVE-2026-62723 is a use-after-free vulnerability in Windows Telephony Service that allows an authorized attacker to elevate privileges locally. The NVD entry and CVE records confirm a local exploit path with low privileges required and no user interaction, with a CVSSv3.1 base score of 7.0 (High)...