CVE-2026-96225

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...

CVE-2026-96231

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...

CVE-2026-96249

A use after free vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is classified as HIGH severity with a CVSS3.1 base score of 7.8. Official remediation is available via Microsoft updates, ...

CVE-2026-96250

A Use after free vulnerability exists in the Windows USB Print Driver , where an authorized attacker can achieve local privilege elevation . The vulnerability is associated with CWE-416 . While the documents confirm the impact and the affected component, no specific exploit details or available l...

CVE-2026-96231

A vulnerability exists in .NET due to improper link resolution before file access (link following). This flaw allows an authorized attacker to elevate privileges locally . The impact is categorized as Access to elevated privileges with a CVSS score of 7.8 . No specific exploit details or remediat...

CVE-2026-96225

A vulnerability in .NET allows an authorized attacker to achieve local privilege escalation due to improper link resolution before file access (link following ). This flaw is classified as CWE-59 . The impact is significant, potentially allowing for access to elevated privileges with a CVSS score...

CVE-2026-96188

A vulnerability in Microsoft PowerToys allows an authorized attacker to achieve local privilege elevation through external control of system or configuration settings (CWE-15). The vulnerability has a High base severity score of 7.3, requiring local access and user interaction to exploit. No spec...

CVE-2026-96206

A use of uninitialized resource (CWE-908) within the Windows Subsystem for Linux allows an authorized attacker to perform a local information disclosure . The vulnerability has a CVSS 3.1 score of 6.5 (Medium), with a high confidentiality impact. No specific component details, exploit links, or p...

CVE-2026-96186

The Microsoft Windows Media Foundation component is vulnerable to a deserialization of untrusted data flaw (CWE-502). This vulnerability allows an authorized attacker to achieve local privilege elevation . No specific patch versions or exploit links are provided in the documents.

CVE-2026-85340

A Use after free vulnerability exists in Microsoft Office Click-To-Run , which could allow an authorized attacker to elevate privileges locally . The vulnerability impacts the Click-To-Run subcomponent of various Office products. Microsoft has released updates to address this issue, and users are...

CVE-2026-69919

An out-of-bounds read vulnerability exists in Windows Cryptographic Services . This flaw allows an authorized attacker to perform a local attack to disclose information . The vulnerability is associated with CWE-125 . No specific exploit details or remediation instructions are provided in the doc...

CVE-2026-70214

A vulnerability in Microsoft Office Excel allows an unauthorized attacker to perform an out-of-bounds read , which can result in the disclosure of sensitive information locally. The issue has a CVSS v3.1 score of 5.5 (Medium) . Microsoft has released official updates to address this vulnerability...

CVE-2026-88093

A Heap-based buffer overflow exists in the Desktop Window Manager , which allows an authorized attacker to perform a local privilege escalation . The vulnerability has a High severity rating (CVSS 3.1 score of 7.8) and involves a LOW attack complexity. No specific exploit information or patch ver...

CVE-2026-87695

A vulnerability in Microsoft Exchange Server involves the inclusion of functionality from an untrusted control sphere, which allows an authorized attacker to achieve local privilege escalation . The vulnerability has a base score of 7.8 (High) . Microsoft has released updates to address this issu...

EUVD-2026-100144

Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally...

EUVD-2026-100143

Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally...

CVE-2026-70228

An out-of-bounds read vulnerability exists in the Desktop Window Manager component. This flaw allows an authorized attacker to perform a local privilege escalation . Exploitation details and specific affected versions are not provided in the documents. Remediation information is not explicitly de...

EUVD-2026-100136

Improper link resolution before file access 'link following' in Microsoft Defender allows an authorized attacker to disclose information locally...

CVE-2026-70261

The Microsoft Trace Data Helper component is affected by a vulnerability that allows an authorized attacker to disclose sensitive system information locally. This issue is categorized as CWE-497 (Exposure of Sensitive System Information to an Unauthorized Control Sphere). The vulnerability has a ...

CVE-2026-70227

An out-of-bounds read vulnerability exists in the Windows Device Association Service . This flaw allows an authorized attacker to perform a local information disclosure, potentially revealing sensitive data. No specific exploit code or in-the-wild exploitation details are provided in the document...