EUVD-2026-56387

Untrusted pointer dereference in Windows Win32K allows an authorized attacker to disclose information locally...

CVE-2026-62758 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

...

CVE-2026-62729

CVE-2026-62729 describes a race condition in Windows Telephony Service caused by concurrent execution on a shared resource with improper synchronization. This allows an authorized, local attacker to elevate privileges. The entry notes a local attack vector with high impact on confidentiality, int...

CVE-2026-62723 Windows Telephony Service Elevation of Privilege Vulnerability

...

CVE-2026-62722 Microsoft Brokering File System Elevation of Privilege Vulnerability

...

CVE-2026-62722

The CVE-2026-62722 issue affects the Windows Bind Filter Driver and is caused by a heap-based buffer overflow, enabling an authorized local attacker to achieve privilege escalation. The provided sources confirm the vulnerability and its local, high-severity impact (CVE-2026-62722 with CVSS 3.1: A...

CVE-2026-62713 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

...

CVE-2026-62690 Windows Push Notifications Elevation of Privilege Vulnerability

...

CVE-2026-62695 Windows Storage Elevation of Privilege Vulnerability

...

CVE-2026-61934 Windows Bind Filter Driver Elevation of Privilege Vulnerability

...

CVE-2026-61928 Windows Hello Tampering Vulnerability

...

CVE-2026-61925

CVE-2026-61925 describes an elevation of privilege vulnerability in Windows Installer caused by incorrect authorization checks. An authenticated local attacker can exploit this to gain higher privileges on the host. CVSS v3.1 metrics indicate a HIGH-severity, local attacker, no user interaction, ...

CVE-2026-61925 Windows Installer Elevation of Privilege Vulnerability

...

EUVD-2026-56323

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

EUVD-2026-56322

Use after free in Windows DHCP Client allows an authorized attacker to execute code locally...

CVE-2026-61348

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

EUVD-2026-56313

Weak authentication in Microsoft Windows Search Component allows an authorized attacker to disclose information locally...

CVE-2026-59128

Out-of-bounds read in Windows Encrypting File System EFS allows an authorized attacker to disclose information locally...

EUVD-2025-210686

Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to create arbitrary code, potentially resulting in binary hijacking...

CVE-2026-68272

A flaw was found in the Linux kernel's drm/amdgpu component. An unprivileged local attacker can exploit this vulnerability by submitting a specially crafted command with a zero-length chunk size for CPGFXSHADOW. This leads to improper memory access within the kernel, causing a system crash and a...