29733 matches found
CVE-2026-45476
CVE-2026-45476 concerns the Microsoft Azure Network Adapter (CVEList entry) with a use-after-free in the Linux MANA Driver that allows an authorized local attacker to escalate privileges. The root cause is disclosed as a use-after-free in the Linux MANA Driver, leading to local privilege elevatio...
EUVD-2026-35543
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally...
CVE-2026-45459
Protection mechanism failure in Microsoft Office Excel allows an unauthorized attacker to bypass a security feature locally...
EUVD-2026-35541
Protection mechanism failure in Microsoft Office Excel allows an unauthorized attacker to bypass a security feature locally...
CVE-2026-48583
CVE-2026-48583 is a Windows kernel use-after-free vulnerability that enables a local privilege escalation by an authorized attacker. Sources confirm the issue and report CVSS v3.1 base score 7.8 (High) with LOCAL attack vector, LOW privileges required, no user interaction. The documents do not sp...
CVE-2026-48576
CVE-2026-48576 is a Windows Secure Boot vulnerability described as a protection mechanism failure enabling a local attacker with high privileges to bypass a security feature. The available documents specify a local attack vector with low complexity and no user interaction, and a base CVSS 3.1 sco...
CVE-2026-48573
No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...
CVE-2026-45588
CVE-2026-45588 concerns a protection mechanism failure in Windows Secure Boot that allows an authorized attacker to bypass a security feature locally. The NVD/CVE entry describes a local attack with high impact on confidentiality and integrity and no availability impact, requiring high privileges...
CVE-2026-45634
The CVE describes an out-of-bounds read in the Windows DHCP Server that enables an authorized local attacker to disclose information. The affected component is Windows DHCP Server; the root cause is a memory read violation leading to information disclosure. The CVSS metrics indicate a local attac...
CVE-2026-45485
CVE-2026-45485: In Microsoft Office, an out-of-bounds read leads to local information disclosure. Documents confirm the vulnerability and its impact (local disclosure) with low severity (CVSS 3.1:3.3). Exploitation details and affected component/version specifics are not provided in the supplied ...
Microsoft PC Manager Elevation of Privilege Vulnerability
Missing authentication for critical function in Microsoft PC Manager allows an authorized attacker to elevate privileges locally...
Windows DWM Core Library Elevation of Privilege Vulnerability
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
Windows Kernel Elevation of Privilege Vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...
Visual Studio Code Security Feature Bypass Vulnerability
Improper input validation in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...
Microsoft DWM Core Library Elevation of Privilege Vulnerability
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
Windows SDK Elevation of Privilege Vulnerability
Use after free in Windows SDK allows an authorized attacker to elevate privileges locally...
Secure Boot Security Feature Bypass Vulnerability
No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...
Secure Boot Security Feature Bypass Vulnerability
Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...