EUVD-2026-10624

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-10649

Improper validation of specified type of input in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

EUVD-2026-10610

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

EUVD-2026-10637

Use after free in Windows Authentication Methods allows an authorized attacker to elevate privileges locally...

EUVD-2026-10628

Null pointer dereference in Windows Performance Counters allows an authorized attacker to elevate privileges locally...

EUVD-2026-10630

Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally...

EUVD-2026-10650

Improper validation of specified type of input in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

EUVD-2026-10602

Heap-based buffer overflow in Windows File Server allows an authorized attacker to elevate privileges locally...

EUVD-2026-10615

Incorrect permission assignment for critical resource in Windows Accessibility Infrastructure ATBroker.exe allows an authorized attacker to elevate privileges locally...

EUVD-2026-10581

Improper access control in Azure Portal Windows Admin Center allows an authorized attacker to elevate privileges locally...

EUVD-2026-10593

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Bluetooth RFCOM Protocol Driver allows an authorized attacker to elevate privileges locally...

EUVD-2026-10586

Heap-based buffer overflow in Azure Linux Virtual Machines allows an authorized attacker to elevate privileges locally...

EUVD-2026-10597

Out-of-bounds read in Windows Resilient File System ReFS allows an authorized attacker to elevate privileges locally...

EUVD-2026-10587

Use after free in Broadcast DVR allows an authorized attacker to elevate privileges locally...

EUVD-2026-10477

If a legitimate user confirms a self-update prompt or initiate an installation of a CODESYS Development System, a low privileged local attacker can gain elevated rights due to a TOCTOU vulnerability in the CODESYS installer...

GO-2026-4610 Docker CLI Plugins: Uncontrolled Search Path Element Leads to Local Privilege Escalation on Windows in github.com/docker/cli

Docker CLI Plugins: Uncontrolled Search Path Element Leads to Local Privilege Escalation on Windows in github.com/docker/cli...

CVE-2026-26148

External initialization of trusted variables or data stores in Azure Entra ID allows an unauthorized attacker to elevate privileges locally...

CVE-2026-26141

Improper authentication in Azure Arc allows an authorized attacker to elevate privileges locally...

CVE-2026-26132

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-26117

Authentication bypass using an alternate path or channel in Azure Windows Virtual Machine Agent allows an authorized attacker to elevate privileges locally...