298044 matches found
CVE-2026-96218
A vulnerability exists in the Windows Update Stack due to improper access control . This flaw allows an authorized attacker to perform tampering locally . The vulnerability is associated with CWE-15 (External Control of System or Configuration Setting) and carries a MEDIUM base severity (CVSS 3.1...
CVE-2026-96219
A critical out-of-bounds write vulnerability exists in the Windows Local Security Authority Subsystem Service (LSASS) . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is assigned a CVSS v3.1 score of 9.80 , indicating a high severity l...
CVE-2026-96216
A Use after free vulnerability exists in the Windows Kernel (associated with CWE-416 and CWE-822 ). This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is rated with a High base severity (CVSS 3.1 score of 7.0). No specific exploit details or in-the-wi...
CVE-2026-96223
A Use after free vulnerability exists in Windows Hyper-V , allowing an authorized attacker to achieve local privilege escalation . The vulnerability impacts the Hyper-V hypervisor component. While the CVSS score indicates a High severity (7.8) with high impacts on confidentiality, integrity, and ...
CVE-2026-96220
The Windows Assigned Access feature contains an improper control of generation of code (code injection) vulnerability. This flaw allows an authorized attacker to perform a local privilege escalation . The vulnerability is associated with CWE-94 . No specific exploit links or exploit details are p...
CVE-2026-96215
A race condition exists in Windows Autopilot due to concurrent execution using a shared resource with improper synchronization. This vulnerability allows an authorized attacker to achieve local privilege escalation . While the CVSS v3.1 score indicates a High severity (7.0) with impacts on confid...
CVE-2026-96217
A heap-based buffer overflow exists in Windows NTFS that allows an authorized attacker to elevate privileges locally . The vulnerability is associated with CWE-122 (Heap-based Buffer Overflow) and CWE-190 (Integer Overflow or Wraparound). No specific exploit information or details on in-the-wild ...
CVE-2026-70276
A Use after free vulnerability exists in Microsoft Office Click-To-Run , which may allow an authorized attacker to elevate privileges locally . This vulnerability is categorized with a CVSS 3.1 score of 7.0 (High) . Microsoft has released updates to address this issue; users are recommended to in...
CVE-2026-70220
A heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to achieve arbitrary code execution locally. To successfully exploit this vulnerability, an attacker must trick the victim into opening a malicious file or clicking a malicious link. Microsoft has released updat...
EUVD-2026-99699
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...
CVE-2026-70161
Improper limitation of a pathname to a restricted directory 'path traversal' in .NET allows an authorized attacker to elevate privileges locally...
CVE-2026-70165
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...
CVE-2026-70190
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...
EUVD-2026-99692
Improper limitation of a pathname to a restricted directory 'path traversal' in .NET allows an authorized attacker to elevate privileges locally...
EUVD-2026-99693
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...
CVE-2026-70165
The .NET runtime is vulnerable to an improper link resolution before file access (link following) issue. This flaw allows an authorized attacker to achieve local privilege escalation on the affected system. The vulnerability is categorized as a MEDIUM severity issue with a CVSS score of 6.70 . No...
CVE-2026-70161
The .NET framework is affected by a path traversal vulnerability (CVE-2026-70161 ) caused by the improper limitation of a pathname to a restricted directory. An authorized attacker can exploit this flaw to elevate privileges locally . The vulnerability has a CVSS v3.1 base score of 7.3 (High). No...
CVE-2026-70190
.NET contains an improper link resolution before file access (link following) vulnerability, identified as CVE-2026-70190 . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is part of the Microsoft Developer Tools suite. Official metrics indicate a...
