941 matches found
PT-2026-32728
Name of the Vulnerable Software and Affected Versions Applocker Filter Driver applockerfltr.sys affected versions not specified Description A race condition occurs in the Applocker Filter Driver applockerfltr.sys due to concurrent execution using a shared resource with improper synchronization...
PT-2026-32808
Name of the Vulnerable Software and Affected Versions Windows SSDP Service affected versions not specified Description A race condition occurs in the Windows SSDP Service due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate privileges locally...
CVE-2026-32165: Use After Free
Use after free in Windows User Interface Core allows an authorized attacker to elevate privileges locally...
CVE-2026-32069: Double Free
Double free in Windows Projected File System allows an authorized attacker to elevate privileges locally...
PT-2026-32828
Name of the Vulnerable Software and Affected Versions Windows Push Notifications affected versions not specified Description An improper synchronization of shared resources during concurrent execution, known as a race condition, allows an authorized attacker to elevate privileges locally...
PT-2026-32753
Name of the Vulnerable Software and Affected Versions Windows Client Side Caching driver csc.sys affected versions not specified Description A heap-based buffer overflow in the Windows Client Side Caching driver csc.sys allows an authorized attacker to elevate privileges locally. A heap-based...
CVE-2026-27917: Use After Free
Use after free in Windows WFP NDIS Lightweight Filter Driver wfplwfs.sys allows an authorized attacker to elevate privileges locally...
CVE-2026-33100: Use After Free
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...
VulnCheck KEV: CVE-2025-60710
Microsoft Windows contains a link following vulnerability that allows for privilege escalation...
CVE-2026-22768
Dell AppSync, versions 4.6.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...
CVE-2026-25178
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...
CVE-2026-24290
Improper access control in Windows Projected File System allows an authorized attacker to elevate privileges locally...
CVE-2026-24292
Use after free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...
CVE-2026-20046
A vulnerability in task group assignment for a specific CLI command in Cisco IOS XR Software could allow an authenticated, local attacker to elevate privileges and gain full administrative control of an affected device. This vulnerability is due to incorrect mapping of a command to task groups...
Zoom Clients for Windows 安全漏洞
Zoom Clients for Windows is a video conferencing software developed by the American company Zoom. There is a security vulnerability in Zoom Clients for Windows, which stems from improper version checking in the update function. This vulnerability could allow authenticated users to gain elevated...
Incorrect Default Permissions
Overview Affected versions of this package are vulnerable to Incorrect Default Permissions. An attacker can gain elevated privileges by exploiting these permissions locally. Remediation Upgrade Microsoft.NETCore.App.Runtime.linux-arm64 to version 10.0.4 or higher. References - Vulnerability Advis...
CVE-2026-26132
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-25178
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...