29733 matches found
EUVD-2026-44241
Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...
EUVD-2026-44239
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally...
EUVD-2026-44238
Out-of-bounds read in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...
EUVD-2026-44235
Use after free in Microsoft XML Core Services allows an authorized attacker to elevate privileges locally...
EUVD-2026-44215
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally...
EUVD-2026-44198
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
EUVD-2026-44194
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
EUVD-2026-44188
Improper validation of specified type of input in Microsoft Office Word allows an unauthorized attacker to disclose information locally...
EUVD-2026-44179
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally...
EUVD-2026-44152
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...
kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold
A flaw was found in the Linux kernel's Bluetooth SCO Synchronous Connection-Oriented protocol implementation. The scorecvframe function fails to properly hold a reference to a socket after releasing a lock. This oversight allows a concurrent operation to free the socket while it is still being...
kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete
A flaw was found in the Linux kernel's xfrm IPSec framework subsystem. This vulnerability, a use-after-free, occurs when the system incorrectly manages memory related to security policies, specifically during the deletion of xfrmstate lists. An attacker with local access could exploit this flaw b...
kernel: exit: prevent preemption of oopsing TASK_DEAD task
A flaw was found in the Linux kernel. During the exit process of a task that has encountered an error, the system can incorrectly allow the task to be interrupted. This can lead to improper management of the task's memory, potentially causing memory corruption. Such an issue could allow a local...
CVE-2026-50364
Technical details (affected product/version, root cause, and fixes) are not publicly available in the provided documents. Monitor for updates.
CVE-2026-50303
CVE-2026-50303 describes a vulnerability in Windows Key Guard where use of a cryptographic primitive with a risky implementation enables an authorized local attacker to bypass a security feature. Affected component: Windows Key Guard cryptographic handling; root cause: risky implementation of the...
CVE-2026-50384
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Clip Service allows an authorized attacker to elevate privileges locally...
CVE-2026-50296
Use after free in Graphics Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-49808
The CVE-2026-49808 entry describes a race condition in the Windows kernel caused by concurrent execution on a shared resource with improper synchronization. An authorized local attacker can elevate privileges, as indicated by the description and CVSS vector (Local attack, High impact to confident...
CVE-2026-49803
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally...