CVE-2026-42902

Improper authorization in Microsoft PowerToys allows an authorized attacker to elevate privileges locally...

CVE-2026-42828

Buffer over-read in Windows Projected File System Filter Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-41092

Improper access control in Microsoft Kinect allows an authorized attacker to elevate privileges locally...

CVE-2026-41108

Heap-based buffer overflow in Microsoft Windows DNS allows an authorized attacker to elevate privileges locally...

CVE-2026-33828

Trust boundary violation in Windows Attestation allows an authorized attacker to elevate privileges locally...

CVE-2026-22926

Omnissa Workspace ONE® Assist for macOS contains a Local Privilege Escalation Vulnerability...

UBUNTU-CVE-2026-45490

Improper authorization in .NET allows an authorized attacker to elevate privileges locally...

EUVD-2026-35762

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

CVE-2026-44813

CVE-2026-44813 is a Windows vulnerability described as a use-after-free in the Windows DWM Core Library that enables an authorized local attacker to elevate privileges. The NVD/MSRC entries identify the affected component as the Windows DWM Core Library with an impact profile including local priv...

CVE-2026-44802

CVE-2026-44802 is a use-after-free in Windows DWM Core Library that enables a local privilege escalation by an authorized user. CVSS 3.1 base score 7.8 (High) with local attack vector, low attack complexity, and require low privileges with no user interaction; impact to confidentiality, integrity...

EUVD-2026-35753

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

CVE-2026-44807

CVE-2026-44807 is a Windows vulnerability affecting the DWM Core Library, described as a use-after-free condition that enables local privilege escalation for an attacker with low privileges and no user interaction. The CVSS 3.1 base score is 7.8 (HIGH); vector: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H...

EUVD-2026-35749

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

EUVD-2026-35748

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

CVE-2026-44808

Affects: Windows DWM Core Library. Issue: Use-after-free in DWM Core Library leading to local privilege escalation by an authorized attacker. Impact: CVSS 3.1 base score 7.8 (HIGH) with LOCAL exploit, low attack complexity, and privileges required. Root cause: use-after-free vulnerability. Exploi...

EUVD-2026-35747

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

CVE-2026-44811

Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

CVE-2026-44808

Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

EUVD-2026-35744

Improper authentication in Windows Cryptographic Services allows an unauthorized attacker to elevate privileges locally...

CVE-2026-42989

Winlogon Elevation of Privilege (CVE-2026-42989) is caused by improper link resolution before file access ("link following"). This vulnerability allows an authorized, local attacker to gain higher privileges. Affected: Winlogon component on Windows; impact is local privilege escalation with a CVS...