43688 matches found
CVE-2026-66804
Technical details about CVE-2026-66804 are not publicly available in the provided documents. Monitor for updates from Microsoft and NVD for affected products, vulnerable component, impact, and remediation.
EUVD-2026-56465
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
EUVD-2026-56461
Incomplete cleanup in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally...
CVE-2026-65678 Windows Win32k Elevation of Privilege Vulnerability
...
EUVD-2026-56434
Out-of-bounds read in Windows GDI allows an authorized attacker to disclose information locally...
EUVD-2026-56424
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally...
CVE-2026-62908
CVE-2026-62908: A race condition in the Windows Backup Engine allows local privilege escalation by an authorized attacker. Documented impact: high across confidentiality, integrity, and availability (CVSS 3.1 base score 7.0; LOCAL access; HIGH likelihood of impact). Affected component is the Wind...
CVE-2026-62892 Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability
...
CVE-2026-62890 Windows GDI+ Elevation of Privilege Vulnerability
...
CVE-2026-62797 Windows NTFS Elevation of Privilege Vulnerability
...
EUVD-2026-56389
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally...
EUVD-2026-56387
Untrusted pointer dereference in Windows Win32K allows an authorized attacker to disclose information locally...
CVE-2026-62758 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
...
CVE-2026-62729
CVE-2026-62729 describes a race condition in Windows Telephony Service caused by concurrent execution on a shared resource with improper synchronization. This allows an authorized, local attacker to elevate privileges. The entry notes a local attack vector with high impact on confidentiality, int...
CVE-2026-62723 Windows Telephony Service Elevation of Privilege Vulnerability
...
CVE-2026-62722
The CVE-2026-62722 issue affects the Windows Bind Filter Driver and is caused by a heap-based buffer overflow, enabling an authorized local attacker to achieve privilege escalation. The provided sources confirm the vulnerability and its local, high-severity impact (CVE-2026-62722 with CVSS 3.1: A...
CVE-2026-62722 Microsoft Brokering File System Elevation of Privilege Vulnerability
...
CVE-2026-62713 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
...