301680 matches found
CVE-2026-108396
Time-of-check time-of-use toctou race condition in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...
CVE-2026-108132
Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally...
CVE-2026-108135
Improper link resolution before file access 'link following' in Windows Backup Engine allows an authorized attacker to elevate privileges locally...
CVE-2026-108134
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally...
CVE-2026-108130
Heap-based buffer overflow in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...
CVE-2026-108133
Release of invalid pointer or reference in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...
CVE-2026-107606
SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to retrieve a snapshot of the live feed without authentication...
CVE-2026-107607
SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to access a real-time video stream without authentication...
CVE-2026-105729
Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally...
CVE-2026-105731
Use of uninitialized resource in Microsoft Graphics Component allows an authorized attacker to disclose information locally...
CVE-2026-105732
Stack-based buffer overflow in SysInternals allows an authorized attacker to elevate privileges locally...
CVE-2026-107605
SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to view live video feed without authentication...
CVE-2026-105733
Improper access control in Windows Hyper-V allows an authorized attacker to execute code locally...
UBUNTU-CVE-2026-110237
Vifm 0.8.1-beta through 0.14.4 reuses a pre-existing IPC FIFO in the shared temporary directory without checking ownership, allowing local users to execute commands as another user. Attackers can pre-create a world-writable vifm-ipc-vifm FIFO and write IPC packets with -c and ! shell commands tha...
CVE-2026-105725
Use after free in Windows Security App allows an authorized attacker to elevate privileges locally...
CVE-2026-105726
Out-of-bounds read in Microsoft Defender allows an authorized attacker to disclose information locally...
CVE-2026-110237
Vifm 0.8.1-beta through 0.14.4 reuses a pre-existing IPC FIFO in the shared temporary directory without checking ownership, allowing local users to execute commands as another user. Attackers can pre-create a world-writable vifm-ipc-vifm FIFO and write IPC packets with -c and ! shell commands tha...
CVE-2026-105722
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...