CVE-2026-61367 Windows Remote Desktop Services Elevation of Privilege Vulnerability

...

CVE-2026-61923

CVE-2026-61923 describes a heap-based buffer overflow in Windows Display Enhancement Service that could allow an authorized local attacker to elevate privileges. Documented impact is high for confidentiality, integrity, and availability; exploitation details, affected Windows versions, specific v...

CVE-2026-61923 Windows Display Enhancement Service Elevation of Privilege Vulnerability

...

CVE-2026-61367 Windows Remote Desktop Services Elevation of Privilege Vulnerability

...

CVE-2026-61367

The CVE-2026-61367 entry describes a local Privilege Escalation in Windows Remote Desktop Services caused by missing authentication for a critical function. An authorized attacker can elevate privileges locally (ATT&CK-style: Privilege Escalation) with a CVSSv3.1 base score of 7.8 (HIGH) and LOCA...

CVE-2026-61356 Windows Remote Desktop Services Elevation of Privilege Vulnerability

...

CVE-2026-61356

CVE-2026-61356 : The vulnerability concerns Windows Remote Desktop Services . The issue is described as “Missing authentication for a critical function,” enabling an elevation of privileges attack from a local, authenticated position. The CVSS 3.1 score is reported as 7.8 (HIGH) with local access...

CVE-2026-61356 Windows Remote Desktop Services Elevation of Privilege Vulnerability

...

CVE-2026-61348 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

...

CVE-2026-61348

This CVE (CVE-2026-61348) is a local privilege escalation in the Windows Ancillary Function Driver for WinSock. The issue is a use-after-free in the driver component, enabling an authenticated attacker to elevate privileges on the affected system. The provided materials indicate a high-severity i...

CVE-2026-61348 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

...

CVE-2026-61353 Windows Telephony Service Elevation of Privilege Vulnerability

...

CVE-2026-61353

CVE-2026-61353 describes a heap-based buffer overflow in the Windows Telephony Service that enables a locally authenticated attacker to achieve privilege escalation . The vulnerability arises from a heap overflow in the Telephony Service component, leading to potential unauthorized system access....

CVE-2026-61353 Windows Telephony Service Elevation of Privilege Vulnerability

...

CVE-2026-61346 Windows Graphics Kernel Elevation of Privilege Vulnerability

...

CVE-2026-61346 Windows Graphics Kernel Elevation of Privilege Vulnerability

...

CVE-2026-61346

CVE-2026-61346 describes a use-after-free in the Windows Graphics Kernel that can allow an authorized local attacker to elevate privileges. The available documents confirm the vulnerable component is the Windows Graphics Kernel and indicate a local, high-impact risk (CVSSv3.1: AV=L/AC=H/PR=L/UI=N...

CVE-2026-59133 Microsoft High Performance Computing (HPC) Pack Elevation of Privilege Vulnerability

...

CVE-2026-59133 Microsoft High Performance Computing (HPC) Pack Elevation of Privilege Vulnerability

...

CVE-2026-59133

The CVE-2026-59133 entry concerns the Microsoft High Performance Computing (HPC) Pack, where an authorized attacker can escalate privileges over the network. According to the data, the issue enables Execution with unnecessary privileges, leading to High impact on confidentiality, integrity, and a...