33990 matches found
CVE-2026-62768 Windows Installer Elevation of Privilege Vulnerability
...
CVE-2026-62768
CVE-2026-62768 describes a stack-based buffer overflow in Windows Installer that can allow an authorized, locally authenticated user to elevate privileges. Affected component is Windows Installer; root cause is a buffer overflow in processing certain installer data, leading to high impact on conf...
EUVD-2026-56653
Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally...
EUVD-2026-56651
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-62734 Windows Telephony Service Elevation of Privilege Vulnerability
...
EUVD-2026-56642
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally...
CVE-2026-62733
CVE-2026-62733 is an out-of-bounds read in Windows Win32K that allows a locally authenticated attacker to elevate privileges. The vulnerability affects Win32K components and yields a Local Privilege Escalation (LPE) with HIGH impact to confidentiality, integrity, and availability (per CVSS 3.1: A...
CVE-2026-62721 Windows User-Mode Power Service (UMPS) Elevation of Privilege Vulnerability
...
EUVD-2026-56637
Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally...
CVE-2026-62710
CVE-2026-62710 : Heap-based buffer overflow in the Windows Device Association Service allows an authorized attacker to elevate privileges locally. This entry is supported by multiple sources: the NVD/NVD-derived description confirms a local, privilege-escalation flaw with high impact (confidentia...
CVE-2026-62710 Windows Device Association Service Elevation of Privilege Vulnerability
...
CVE-2026-62708 Windows Kernel Elevation of Privilege Vulnerability
...
CVE-2026-62698 Microsoft Digest Authentication Elevation of Privilege Vulnerability
...
CVE-2026-61358 Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability
...
EUVD-2026-56612
No cwe for this issue in AMD Zen allows an authorized attacker to disclose information locally...
CVE-2026-59122
CVE-2026-59122 describes a race condition in Windows Telephony Service caused by concurrent access to a shared resource with improper synchronization. This allows an authorized attacker with local access and low privileges to elevate privileges (CVSS v3.1: AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H; bas...
CVE-2026-66804
Technical details about CVE-2026-66804 are not publicly available in the provided documents. Monitor for updates from Microsoft and NVD for affected products, vulnerable component, impact, and remediation.
EUVD-2026-56465
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...