33396 matches found
EUVD-2026-2207
Concurrent execution using shared resource with improper synchronization 'race condition' in Capability Access Management Service camsvc allows an authorized attacker to elevate privileges locally...
CVE-2026-20940
Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-20938
Untrusted pointer dereference in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...
CVE-2026-20924
CVE-2026-20924 is a Windows Management Services use-after-free vulnerability that allows an authorized, local attacker to elevate privileges. The CVE is listed among Windows Management Services findings with a high base CVSS (7.8, LOCAL, HIGH impact). Connected sources confirm the vulnerability n...
CVE-2026-20923
CVE-2026-20923 is a use-after-free in Windows Management Services that allows an authorized, locally situated attacker to elevate privileges. Evidence from Nessus/NVD/CVE records shows this CVE is associated with Windows Management Services and is listed among January 2026 security updates. Remed...
CVE-2026-20923
Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally...
CVE-2026-20920
Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally...
CVE-2026-20918
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Management Services allows an authorized attacker to elevate privileges locally...
CVE-2026-20918
Technical details about CVE-2026-20918 are not publicly provided in the supplied documents. Monitor for updates from Microsoft and security advisories.
CVE-2026-20877
Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally...
CVE-2026-20876
CVE-2026-20876 is a heap-based buffer overflow in Windows Virtualization-Based Security (VBS) Enclave that enables a locally authorized attacker to elevate privileges. The vulnerability targets the VBS Enclave component and can lead to total compromise of the host if exploited. Microsoft has publ...
CVE-2026-20877
CVE-2026-20877 is a use-after-free vulnerability in Windows Management Services that enables a locally authenticated attacker to elevate privileges. The NVD entry specifies a CVSS v3.1 base score of 7.8 (AV: Local, AC: High, PR: Low, UI: None, S: Changed, C/I/A: High). Connected documents referen...
CVE-2026-20865
Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally...
CVE-2026-20864
Heap-based buffer overflow in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...
CVE-2026-20860
CVE-2026-20860 affects the Windows Ancillary Function Driver for WinSock and is a local privilege escalation via type confusion. Connected documents confirm the affected component and that exploitation requires local access with privileges already. Public details on exploit methods are not provid...
CVE-2026-20859
Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally...
CVE-2026-20859
CVE-2026-20859 is a Windows Kernel-Mode Driver elevation-of-privilege vulnerability described as a use-after-free in kernel-mode drivers that could enable a locally authenticated attacker to elevate privileges. The connected documents corroborate a Windows kernel-driver context and list Microsoft...
CVE-2026-20857
Untrusted pointer dereference in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...