43708 matches found
CVE-2026-62881: Numeric Truncation Error
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally...
CVE-2026-61932: Access of Resource Using Incompatible Type
Access of resource using incompatible type 'type confusion' in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
CVE-2026-70330: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally...
CVE-2026-70307: Use After Free
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...
CVE-2026-50472: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally...
PT-2026-70732
Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description An out-of-bounds read exists that allows an unauthorized attacker to execute arbitrary code locally or remotely, potentially affecting the system. Recommendations At the moment...
PT-2026-70360
Name of the Vulnerable Software and Affected Versions Vitis Embedded Single File Download SFD affected versions not specified Description Uncontrolled search paths in the local Windows installation of the Vitis Embedded Single File Download SFD may allow a low-privileged user to achieve arbitrary...
PT-2026-70582
Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description An out-of-bounds read in Windows NTFS allows an authorized attacker to disclose sensitive information locally, which can affect the system. Recommendations At the moment, there is no...
CVE-2026-62788: Use After Free
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...
PT-2026-70431
Name of the Vulnerable Software and Affected Versions Windows GDI affected versions not specified Description An untrusted pointer dereference in Windows GDI allows an authorized attacker to disclose sensitive information locally. Recommendations At the moment, there is no information about a new...
CVE-2026-65788: Use After Free
Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally...
Windows Package Manager (WinGet) < 1.29.280 Elevation of Privilege (CVE-2026-68821)
The version of Windows Package Manager WinGet installed on the remote host is prior to 1.29.280. It is, therefore, affected by an elevation of privilege vulnerability: - An elevation of privilege vulnerability exists in Windows Package Manager that allows a local attacker with low privileges to...
PT-2026-70983
Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels RAS Client. An attacker must first obtain the ability to execute low-privileged cod...
CVE-2025-0046: Incorrect Permission Assignment for Critical Resource
Incorrect directory permissions could allow a local user to escalate their privileges, potentially resulting in arbitrary code execution...
CVE-2026-61349: Use After Free
Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally...
CVE-2026-59122: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Telephony Service allows an authorized attacker to elevate privileges locally...
CVE-2026-42976: Missing Authentication for Critical Function
Missing authentication for critical function in Windows RPC API allows an authorized attacker to elevate privileges locally...
CVE-2026-70347: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...