5040 matches found
EUVD-2026-35561
Access of resource using incompatible type 'type confusion' in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally...
EUVD-2026-35547
Improper limitation of a pathname to a restricted directory 'path traversal' in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...
CVE-2026-48578
Improper access control in Windows Secure Boot allows an authorized attacker to elevate privileges locally...
CVE-2026-47648
CVE-2026-47648 — Windows Storage contains an untrusted search path vulnerability that enables a locally authenticated attacker to perform privilege escalation. The issue arises from a trusted component loading an untrusted search path, potentially elevating privileges with high impact (C/H/I/H/A/...
CVE-2026-41092
CVE-2026-41092 describes an improper access control in Microsoft Kinect that enables a locally authenticated attacker to elevate privileges. The CVSS 3.1 vector is AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H with a base score of 7.8 (HIGH). Affected component: Kinect functionality; root cause is insuffic...
CVE-2026-45606
CVE-2026-45606 concerns an out-of-bounds read in the Microsoft UxTheme Library (uxtheme.dll) that allows an authorized, low-privilege user to cause a local denial of service. The NVD/NIST and CVE records concur on the impact as a local DoS; attack vector is LOCAL, with LOW prerequisites and NONE ...
CVE-2026-45490
CVE-2026-45490 : In .NET, improper authorization could allow an authorized local attacker to elevate privileges. Documents indicate a local attack with low privileges required and high impact on confidentiality, integrity, and availability. Exploitation details, affected versions, and a concrete ...
CVE-2026-34335
Use-after-free in the Windows Ancillary Function Driver for WinSock is the root cause of CVE-2026-34335. The vulnerability can allow an authenticated, local attacker to elevate privileges. The CVSSv3.1 score is 7.0 (High) with local attack vector, high complexity, and requires low privileges and ...
CVE-2026-46328
A flaw was found in the Linux kernel's AppArmor security module. The system's rlimit resource limit for POSIX Portable Operating System Interface CPU timers was not correctly enforced. This issue, stemming from an overlooked step in applying resource limits, could allow a local attacker to bypass...
Windows Network Controller (NC) Host Agent Denial of Service Vulnerability
Use after free in Windows Network Controller NC Host Agent allows an authorized attacker to deny service locally...
Windows Projected File System Elevation of Privilege Vulnerability
Buffer over-read in Windows Projected File System Filter Driver allows an authorized attacker to elevate privileges locally...
Windows Projected File System Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Projected File System Filter Driver allows an authorized attacker to elevate privileges locally...
Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Function Discovery Service fdwsd.dll allows an authorized attacker to elevate privileges locally...
Windows DWM Core Library Elevation of Privilege Vulnerability
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
Microsoft Office Remote Code Execution Vulnerability
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...
CVE-2026-46748
A vulnerability has been identified in SINEC INS All versions V1.0 SP2 Update 6. The affected system includes a binary that is configured with the capdacoverride capability. This capability allows the process to bypass file system permission checks, resulting in unrestricted file system access...
PT-2026-47906
Name of the Vulnerable Software and Affected Versions Windows 10 Version 1607 Description An integer underflow wrap or wraparound in the Windows NT OS Kernel, specifically within the WMI Windows Management Instrumentation subsystem, allows an authorized local attacker to elevate privileges to NT...
PT-2026-47872
Name of the Vulnerable Software and Affected Versions Microsoft Kinect affected versions not specified Description Improper access control allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no information about a newer version that contains a fix...
PT-2026-47961
Name of the Vulnerable Software and Affected Versions Linux MANA Driver affected versions not specified Windows Server Azure Network Adapter affected versions not specified Description A use after free issue exists in the Linux MANA Driver and the Windows Server Azure Network Adapter. This memory...