32875 matches found
CVE-2026-42991
CVE-2026-42991 describes a race condition in Windows Push Notifications arising from improper synchronization of a shared resource. This yields local privilege escalation for an authorized attacker. The CVSS v3.1 metrics indicate local attack vector, high impact on confidentiality, integrity, and...
CVE-2026-42978
CVE-2026-42978: A race condition due to improper synchronization in Windows Push Notifications leads to local privilege escalation for an authorized attacker. The CVSSv3.1 base score is 7.8 (LOCAL, HIGH impact on confidentiality, integrity, and availability) with HIGH attack complexity and LOW pr...
EUVD-2026-35737
Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...
CVE-2026-42984
CVE-2026-42984 relates to a use-after-free in the Windows Kernel enabling an authorized local attacker to elevate privileges. Affected component: Windows Kernel. Underlying cause: use-after-free (exact technical details not provided here). Impact: local privilege elevation with high confidentiali...
EUVD-2026-35734
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...
EUVD-2026-35725
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Telephony Service allows an authorized attacker to elevate privileges locally...
CVE-2026-42912
The CVE-2026-42912 entry concerns a race condition in the Windows Telephony Service caused by improper synchronization. A local, low-privilege attacker could exploit this vulnerability to elevate privileges on the host (CVSSv3.1: 7.0, HIGH). Affected component: Windows Telephony Service. Root cau...
EUVD-2026-35723
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...
CVE-2026-42911
CVE-2026-42911 describes a use-after-free vulnerability in the Windows Ancillary Function Driver for WinSock. The issue permits an authorized local attacker to elevate privileges. The documented impact is local privilege elevation with high severity (CVSSv3.1: AV=L/AC=H/PR=L/UI=N/S=U/C=H/I=H/A=H,...
CVE-2026-42916
Integer overflow or wraparound in Windows NT OS Kernel allows an authorized attacker to elevate privileges locally...
EUVD-2026-35600
Integer underflow wrap or wraparound in Windows NT OS Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-42980
The CVE-2026-42980 entry describes an integer underflow (wrap or wraparound) in the Windows NT OS Kernel that allows an authorized, local attacker to elevate privileges. Affected component: Windows NT OS Kernel; root cause: numeric underflow leading to improper bounds/flow control, enabling privi...
EUVD-2026-35598
Integer underflow wrap or wraparound in Windows NT OS Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-42836
CVE-2026-42836: A race condition due to improper synchronization in the Windows Function Discovery Service (fdwsd.dll) enables a locally authenticated attacker to escalate privileges. The issue is described as a concurrency problem with a shared resource. Affected component: Function Discovery Se...
CVE-2026-48565
Windows Narrator Braille contains an untrusted search path vulnerability that can elevate privileges locally for an authorized user. Root cause is an untrusted search path in the Narrator Braille component, with an attacker able to exploit it without user interaction. CVSSv3.1 metrics indicate AV...
EUVD-2026-35585
Untrusted search path in Windows Narrator Braille allows an authorized attacker to elevate privileges locally...
EUVD-2026-35575
Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally...
CVE-2026-47293
CVE-2026-47293 describes a use-after-free vulnerability in Microsoft Office Click-To-Run that could allow an authorized, local attacker to elevate privileges. Affected component is Microsoft Office Click-To-Run; root cause is use-after-free. The published metrics indicate a high-severity impact (...
CVE-2026-42910
CVE-2026-42910 describes an out-of-bounds write in Windows Hotpatch Monitoring Service that enables a locally authenticated attacker to elevate privileges. According to the records, the impact is local with high severity (CVSS v3.1: AVLOCAL, ACLOW, PRLOW, UI NONE, S U, C I A H). The exploitation ...