619 matches found
CVE-2026-50356
CVE-2026-50356 describes a race-condition in Microsoft Windows App Store caused by concurrent execution using a shared resource with improper synchronization. This allows a locally authenticated attacker to elevate privileges. The fixed details or patch versions are not provided in the connected ...
CVE-2026-50297
CVE-2026-50297 is a Windows Win32K local privilege escalation due to improper access control. The vulnerable component is Win32K; the condition allows an authorized attacker to elevate privileges locally. Base impact is high (C, I, A) with local attack vector and no user interaction required beyo...
CVE-2026-49803
CVE-2026-49803 describes a race condition in the Windows AppX Deployment Service due to improper synchronization, enabling an authorized attacker to perform local privilege escalation. The NVD entry corroborates the description: concurrent execution on a shared resource leads to elevation of priv...
CVE-2026-50323
Technical details (affected products, versions, root cause, exploit specifics) are not provided in the connected documents. Monitor for updates to CVE-2026-50323.
CVE-2026-50311
CVE-2026-50311 concerns Windows Server where improper access control allows an authorized user to locally elevate privileges. Root cause: insufficient authorization checks in the affected Windows Server components, enabling privilege escalation with local access and no user interaction required. ...
CVE-2026-56155
Insufficient granularity of access control in Active Directory Federation Services AD FS allows an authorized attacker to elevate privileges locally...
CVE-2026-54114
CVE-2026-54114 is a Windows Win32K use-after-free that enables a local privilege elevation for an authenticated user. The vulnerability affects Win32k functionality (Win32k.sys context) and is triggered by an improper handling of freed objects, allowing an attacker to escalate to SYSTEM level on ...
CVE-2026-50697
The CVE-2026-50697 entry concerns a vulnerability in the Windows Common Log File System Driver that could allow an attacker with local access to elevate privileges. The issue is described as exposure of sensitive information to an unauthorized actor, enabling local privilege escalation. Public de...
CVE-2026-54987
CVE-2026-54987 is a Windows vulnerability described as a heap-based buffer overflow in the Windows Overlay Filter, enabling a locally authenticated attacker to elevate privileges. The CVSSv3.1 score is 7.8 (HIGH) with local attack vector, low attack complexity, and requires low privileges with no...
CVE-2026-54129
Technical details (affected product/version, root cause, exploit vector, and remediation) are not provided in the supplied documents. Monitor for updates.
CVE-2026-49166
CVE-2026-49166: Use-after-free in Microsoft Printer Drivers allows an authorized attacker to elevate privileges locally. Affected component is Microsoft Printer Drivers; root cause is a use-after-free condition. Exploitation status is not detailed in the provided documents. Base CVSS v3.1 score i...
CVE-2026-49162
CVE-2026-49162 is a use-after-free in Microsoft Brokering File System leading to local privilege escalation for an authenticated user; CVSSv3.1 indicates high impact (C/H, I/H, A/H) with local exploit required and low privileges. Public details in the connected documents do not specify affected p...
Windows Bluetooth Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...
Windows Overlay Filter Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...
Windows DNS Client Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally...
Windows Runtime Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Runtime allows an authorized attacker to elevate privileges locally...
DirectX Graphics Kernel Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows DirectX allows an authorized attacker to elevate privileges locally...
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally...