37429 matches found
CVE-2026-61932
The CVE-2026-61932 entry describes a type confusion vulnerability in the Windows DWM Core Library that allows an authorized attacker to achieve local privilege escalation . Affected component is the Windows DWM Core Library; root cause is resource access via incompatible type. The provided docume...
CVE-2026-62692 Windows Remote Desktop Services Elevation of Privilege Vulnerability
...
CVE-2026-62692
CVE-2026-62692 : Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 vector is LOCAL, LOW exploitability with NONE user interaction and impact on Confidentiality, Integrity, Availability (HIGH) ; base sco...
CVE-2026-62692 Windows Remote Desktop Services Elevation of Privilege Vulnerability
...
CVE-2026-61937 Windows HTTP.sys Elevation of Privilege Vulnerability
...
CVE-2026-61937 Windows HTTP.sys Elevation of Privilege Vulnerability
...
CVE-2026-61937
CVE-2026-61937 is a Windows HTTP.sys elevation-of-privilege vulnerability caused by an integer overflow/wraparound. An authenticated, local attacker could exploit this to gain elevated privileges on affected systems. The available documents identify the vulnerable component as Windows HTTP.sys an...
CVE-2026-61930 Windows Kernel Elevation of Privilege Vulnerability
...
CVE-2026-61930 Windows Kernel Elevation of Privilege Vulnerability
...
CVE-2026-61930
CVE-2026-61930 describes a heap-based buffer overflow in the Windows kernel that allows an authorized attacker to elevate privileges locally. The available documents identify the affected component as the Windows Kernel and characterize the vulnerability as a local privilege escalation with a hig...
CVE-2026-61925 Windows Installer Elevation of Privilege Vulnerability
...
CVE-2026-61927 Windows Bind Filter Driver Elevation of Privilege Vulnerability
...
CVE-2026-61927 Windows Bind Filter Driver Elevation of Privilege Vulnerability
...
CVE-2026-61925
CVE-2026-61925 describes an elevation of privilege vulnerability in Windows Installer caused by incorrect authorization checks. An authenticated local attacker can exploit this to gain higher privileges on the host. CVSS v3.1 metrics indicate a HIGH-severity, local attacker, no user interaction, ...
CVE-2026-61927
CVE-2026-61927 documents a use-after-free in Windows Bind Filter Driver that enables an authorized local attacker to elevate privileges. The description specifies local elevation of privilege with high impact across confidentiality, integrity, and availability. The CVSSv3.1 data indicates Local a...
CVE-2026-61925 Windows Installer Elevation of Privilege Vulnerability
...
CVE-2026-61366
Affected component: Windows Network Connection Broker. Vulnerability: double free allows local privilege escalation by an authorized user. Root cause: double-free in the broker when handling network connection objects. Impact: high; local attacker with low privileges and no user interaction can e...
CVE-2026-61366 Windows Network Connection Broker Elevation of Privilege Vulnerability
...