EUVD-2026-100202

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...

CVE-2026-96225

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...

CVE-2026-96225

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...

CVE-2026-96243

A local elevation of privilege vulnerability exists in the Windows WalletService due to improper link resolution before file access (link following ). An authorized attacker can exploit this flaw to gain higher privileges on the local system. While the CVSS score indicates a High severity (7.8) w...

CVE-2026-96186

The Microsoft Windows Media Foundation component is vulnerable to a deserialization of untrusted data flaw (CWE-502). This vulnerability allows an authorized attacker to achieve local privilege elevation . No specific patch versions or exploit links are provided in the documents.

CVE-2026-96188

A vulnerability in Microsoft PowerToys allows an authorized attacker to achieve local privilege elevation through external control of system or configuration settings (CWE-15). The vulnerability has a High base severity score of 7.3, requiring local access and user interaction to exploit. No spec...

CVE-2026-96206

A use of uninitialized resource (CWE-908) within the Windows Subsystem for Linux allows an authorized attacker to perform a local information disclosure . The vulnerability has a CVSS 3.1 score of 6.5 (Medium), with a high confidentiality impact. No specific component details, exploit links, or p...

CVE-2026-85340

A Use after free vulnerability exists in Microsoft Office Click-To-Run , which could allow an authorized attacker to elevate privileges locally . The vulnerability impacts the Click-To-Run subcomponent of various Office products. Microsoft has released updates to address this issue, and users are...

CVE-2026-69919

An out-of-bounds read vulnerability exists in Windows Cryptographic Services . This flaw allows an authorized attacker to perform a local attack to disclose information . The vulnerability is associated with CWE-125 . No specific exploit details or remediation instructions are provided in the doc...

CVE-2026-70214

A vulnerability in Microsoft Office Excel allows an unauthorized attacker to perform an out-of-bounds read , which can result in the disclosure of sensitive information locally. The issue has a CVSS v3.1 score of 5.5 (Medium) . Microsoft has released official updates to address this vulnerability...

CVE-2026-88093

A Heap-based buffer overflow exists in the Desktop Window Manager , which allows an authorized attacker to perform a local privilege escalation . The vulnerability has a High severity rating (CVSS 3.1 score of 7.8) and involves a LOW attack complexity. No specific exploit information or patch ver...

EUVD-2026-100144

Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally...

EUVD-2026-100143

Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally...

CVE-2026-87695

A vulnerability in Microsoft Exchange Server involves the inclusion of functionality from an untrusted control sphere, which allows an authorized attacker to achieve local privilege escalation . The vulnerability has a base score of 7.8 (High) . Microsoft has released updates to address this issu...

CVE-2026-70160

A Use after free vulnerability in the Windows Kernel allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-416 and has a CVSS 3.1 base score of 7.0 . No specific component, version, or remediation details are provided in the documents, and ...

EUVD-2026-100136

Improper link resolution before file access 'link following' in Microsoft Defender allows an authorized attacker to disclose information locally...

CVE-2026-70260

The Microsoft Trace Data Helper component is vulnerable to an information disclosure flaw (CWE-497) that allows an authorized attacker to disclose sensitive system information locally. The vulnerability results from exposure to an unauthorized control sphere. The CVSS 3.1 score is 5.5 (Medium) , ...

CVE-2026-70261

The Microsoft Trace Data Helper component is affected by a vulnerability that allows an authorized attacker to disclose sensitive system information locally. This issue is categorized as CWE-497 (Exposure of Sensitive System Information to an Unauthorized Control Sphere). The vulnerability has a ...

CVE-2026-70228

An out-of-bounds read vulnerability exists in the Desktop Window Manager component. This flaw allows an authorized attacker to perform a local privilege escalation . Exploitation details and specific affected versions are not provided in the documents. Remediation information is not explicitly de...

CVE-2026-70227

An out-of-bounds read vulnerability exists in the Windows Device Association Service . This flaw allows an authorized attacker to perform a local information disclosure, potentially revealing sensitive data. No specific exploit code or in-the-wild exploitation details are provided in the document...