43282 matches found
CVE-2026-72946: Heap-based Buffer Overflow
Heap-based buffer overflow in Storage Port Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-72929: Improper Validation of Integrity Check Value
Improper validation of integrity check value in Windows Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-71338: Double Free
Double free in Windows Failover Cluster allows an authorized attacker to elevate privileges locally...
CVE-2026-69476: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69846: Integer Overflow or Wraparound
Integer overflow or wraparound in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...
CVE-2026-69293: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-72958: Double Free
Double free in Windows Credential Guard allows an authorized attacker to elevate privileges locally...
CVE-2026-71351: Double Free
Double free in Windows Routing and Remote Access Service RRAS allows an authorized attacker to elevate privileges locally...
CVE-2026-71340: Use After Free
Use after free in Windows File History Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69787: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69589: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-58848: Concurrent Execution using Shared Resource with Improper Synchronization
In multiple functions of alloc.c, there is a possible unauthorized read/write access due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-58846: Improper Privilege Management
In kvmiommumapsg of iommu.c, there is a possible use after free due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-78457: Use After Free
Use after free in Windows Security App allows an authorized attacker to elevate privileges locally...
CVE-2026-86819: Missing Authorization
Waves Central for macOS contains a local privilege escalation in the privileged helper service. The helper authorizes connecting XPC clients by comparing the caller's code-signing certificate chain for equality with its own, rather than validating the caller against a pinned code requirement...
CVE-2026-77827: Unquoted Search Path or Element
Maono Link 3.8.13 MaonoAiServices Windows service allows local privilege escalation for a standard user account via improper write privileges in 'C:\ProgramData\Maono'. Fixed in 4.0.80...
CVE-2026-69472: Use After Free
Use after free in Windows Devices Human Interface allows an authorized attacker to elevate privileges locally...
CVE-2026-70564: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...