CVE-2026-105732

A stack-based buffer overflow in SysInternals allows an authorized attacker to achieve local privilege escalation . The vulnerability has a HIGH base severity score of 7.3. No specific affected versions, root cause components, or exploit links are provided in the documents, though an official fix...

CVE-2026-105733

A vulnerability exists in Windows Hyper-V due to improper access control . This flaw allows an authorized attacker to achieve local code execution . The vulnerability is associated with CWE-1419 (Incorrect Initialization of Resource) and carries a HIGH severity rating. No specific exploit details...

CVE-2026-70235

A vulnerability in Windows Event Tracing due to improper authentication allows an authorized attacker to perform spoofing locally . The security impact is categorized as high integrity with a CVSS 3.1 base score of 5.5 . Official remediation is available via Microsoft updates.

CVE-2026-108399

A heap-based buffer overflow exists in Windows Hyper-V , which could allow an authorized attacker to achieve local privilege elevation . The vulnerability is listed with a CVSS 3.1 score of 7.2 (High) , indicating that while it requires local access and high privileges to exploit, it can have a s...

CVE-2026-105722

A Use after free vulnerability exists in the Windows Broadcast DVR User Service . This flaw allows an authorized attacker to achieve local privilege escalation . The official CVSS 3.1 score is 7.0, reflecting a high severity with significant impacts on confidentiality, integrity, and availability...

EUVD-2026-99069

Untrusted search path in .NET Framework allows an authorized attacker to bypass a security feature locally...

CVE-2026-97800

A vulnerability in Windows Mobile Broadband arises from an incorrect permission assignment for a critical resource. This flaw allows an authorized attacker to achieve local privilege elevation . While the CVSS 3.1 score reflects a High severity (7.8), specific details regarding the affected compo...

EUVD-2026-99066

Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally...

CVE-2026-108398

The .NET Framework is affected by an untrusted search path vulnerability (CWE-426), which allows an authorized attacker to bypass a security feature locally. This vulnerability results in the evading of security measures . While specific version numbers for the affected components are not explici...

CVE-2026-96183

A vulnerability exists in the Windows Health and Optimized Experiences Service due to missing authentication for a critical function. This flaw allows an authorized attacker to perform a local information disclosure . The vulnerability is assigned CWE-306 and has an official fix available. No spe...

EUVD-2026-99036

Improper resolution of path equivalence in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...

EUVD-2026-99037

Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...

EUVD-2026-99038

Missing authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...

CVE-2026-102231

A security feature bypass vulnerability exists in Visual Studio Code due to the improper resolution of path equivalence . This flaw allows an unauthorized attacker to bypass local security features. The vulnerability has been identified by Microsoft and is categorized under CWE-41 . While the spe...

CVE-2026-102233

A missing authorization vulnerability in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally . The vulnerability has a CVSS 3.1 score of 7.8 (High), with the attack vector identified as local and requiring user interaction. No specific component details, root c...

CVE-2026-102227

A heap-based buffer overflow exists in the Windows Resilient File System (ReFS) . This vulnerability allows an authorized attacker to achieve local code execution . Official remediation is available via Microsoft updates.

CVE-2026-108468

A Use after free vulnerability exists in the Windows Installer component. This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability has a CVSS 3.1 base score of 7.0 and is categorized under CWE-416 . No specific exploit details or patch versions are provided...

CVE-2026-105725

A Use after free vulnerability exists in the Windows Security App . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is categorized under CWE-416 and has a CVSS 3.1 base score of 7.0 (High). Remediation is available via an official fix provided by M...

cve-2021-4034

cve-2021-4034 PoC for cve-2021-4034 Based on the PoC by https://haxx.in: https://haxx.in/files/blasty-vs-pkexec.c. Probably he's https://github.com/blasty?! I don't know. With a little help from https://github.com/daimoniac How to use? Compile cve-2021-4034.c gcc -Wall cve-2021-4034.c -o...

Vulnerabilities in Microsoft System Center

Microsoft has identified vulnerabilities in Configuration Manager and Defender. A local malicious individual could exploit these vulnerabilities to gain elevated privileges and potentially access sensitive data. Microsoft Configuration Manager:...