297621 matches found
CVE-2026-100216
A stack-based buffer overflow exists in Windows Storage , which could allow an authorized attacker to achieve local privilege elevation . The vulnerability is characterized by a high level of attack complexity and impacts confidentiality, integrity, and availability. An official fix is available;...
CVE-2026-100207
A vulnerability in Azure CycleCloud involving improper neutralization of special elements used in an OS command (OS command injection) allows an authorized attacker to execute code locally . This flaw is associated with CWE-78 and has a CVSS 3.1 base score of 7.3 . While the vulnerability was ide...
CVE-2026-105729
An untrusted pointer dereference vulnerability exists in SysInternals , which could allow an authorized attacker to perform a local privilege escalation . The vulnerability is associated with CWE-822 . While the CVSS score indicates a high severity impact on integrity and availability, specific d...
EUVD-2026-100323
Incorrect privilege assignment in Visual Studio Code allows an authorized attacker to bypass a security feature locally...
CVE-2026-100203
A heap-based buffer overflow exists in the Windows Update Service , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is classified as High severity with a CVSS 3.1 score of 7.0. While the root cause is identified as a heap overflow, specific file ...
EUVD-2026-100318
Improper neutralization of special elements used in an os command 'os command injection' in Azure CycleCloud allows an authorized attacker to execute code locally...
EUVD-2026-100326
Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally...
EUVD-2026-100317
Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally...
CVE-2026-102851
Visual Studio Code is affected by an incorrect privilege assignment vulnerability. This flaw allows an authorized attacker to bypass a security feature locally. The vulnerability has a Medium base severity (6.1) and requires local access and user interaction to exploit. Specific technical details...
CVE-2026-100205
An untrusted pointer dereference vulnerability in SysInternals allows an authorized attacker to achieve local privilege escalation . This vulnerability is associated with CWE-822 and has been assigned a CVSS 3.1 base score of 7.1 (High) . No specific exploit details or in-the-wild exploitation in...
EUVD-2026-100310
Improper link resolution before file access 'link following' in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to perform tampering locally...
CVE-2026-96118
A vulnerability in the Windows Graphics Kernel involving an out-of-bounds read (CWE-125) and integer overflow or wraparound (CWE-190) allows an authorized attacker to achieve local privilege escalation . The security impact is rated as High with an official fix available. No specific exploit code...
CVE-2026-97787
A race condition vulnerability exists in the Windows Container Isolation FS Filter Driver (unionfs.sys) due to concurrent execution using a shared resource with improper synchronization. This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit details or...
CVE-2026-97792
An improper access control vulnerability exists in the Windows Container Isolation FS Filter Driver (unionfs.sys) . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-732 (Incorrect Permission Assignment for Critical Resource) a...
CVE-2026-100201
A heap-based buffer overflow vulnerability exists in the Windows Client License Service . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-122 (Heap-based Buffer Overflow) and CWE-197 (Numeric Truncation Error). Details regar...
CVE-2026-97793
A vulnerability in Windows Setup and Deployment arises from missing authentication for a critical function . This flaw allows an authorized attacker to perform a local privilege escalation . The vulnerability is associated with CWE-306 . While a CVSS v3.1 score of 7.0 is provided, specific detail...
CVE-2026-100200
A use after free vulnerability exists in the Windows Update Service , allowing an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-416 and has a base severity score of 7.0 . While the specific root cause and affected versions are not detailed ...
EUVD-2026-100312
Missing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally...
EUVD-2026-100309
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to elevate privileges locally...