29733 matches found
CVE-2026-49802
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows USB Print Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-49798
CVE-2026-49798 is a Windows Kernel use-after-free vulnerability that enables local privilege escalation. The root cause is use-after-free in kernel code, allowing an unauthenticated attacker with local access to elevate privileges. Affected component details are limited in the provided documents;...
CVE-2026-56193
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally...
CVE-2026-56193
CVE-2026-56193 describes an out-of-bounds read in Microsoft Office that allows a local attacker to disclose information. The available records indicate a high-severity impact (Confidentiality and Availability) with local access and user interaction required, but no explicit details on affected Of...
CVE-2026-54997
Public technical details are not provided in the supplied documents for CVE-2026-54997. No specifics on affected products, versions, root cause, or remediation are available here. Monitor for updates from official sources.
CVE-2026-54996
CVE-2026-54996 describes a race condition in the Windows USB Print Driver caused by concurrent access to a shared resource with improper synchronization. An authorized local attacker could elevate privileges. The entry provides CVSS 3.1 base score 7.0 (High) with local attack vector, high impact ...
CVE-2026-55004
Double free in Microsoft Printer Drivers allows an authorized attacker to elevate privileges locally...
CVE-2026-54112
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Win32K allows an authorized attacker to elevate privileges locally...
CVE-2026-54112
CVE-2026-54112 affects Windows Win32K. The issue is a race condition caused by concurrent execution on a shared resource due to improper synchronization, enabling a locally authenticated user to elevate privileges. The base score is 7.8 (HIGH) with LOCAL attack vector, requiring LOW privileges an...
CVE-2026-55001
CVE-2026-55001 affects Windows Active Directory / Active Directory Domain Services. The root cause is improper certificate validation within AD, enabling an authorized attacker to achieve local privilege escalation. CVSS 3.1 base score 7.8 (Local, Low complexity, Privileges Required: Low; User In...
Windows User Interface Core Elevation of Privilege Vulnerability
Relative path traversal in Windows User Interface Core allows an authorized attacker to elevate privileges locally...
Microsoft Office Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally...
Windows Boot Loader Security Feature Bypass Vulnerability
Missing cryptographic step in Windows Boot Loader allows an authorized attacker to bypass a security feature locally...
Desktop Window Manager Elevation of Privilege Vulnerability
Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally...
Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Routing and Remote Access Service RRAS allows an authorized attacker to elevate privileges locally...
Windows MIDI Service Module Elevation of Privileges Vulnerability
Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...
Windows Kernel Security Feature Bypass Vulnerability
Improper access control in Windows Kernel allows an authorized attacker to bypass a security feature locally...
Windows Kernel Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally...