301683 matches found
CVE-2026-97811
A double free vulnerability exists in OpenSSH for Windows , which allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-415 (Double Free) and CWE-400 (Uncontrolled Resource Consumption). While the impact is categorized as high for confident...
CVE-2026-97804
A heap-based buffer overflow vulnerability exists in the HID class driver . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability's base score is 7.8 (High) , with impacts on confidentiality, integrity, and availability. No specific exploit information ...
CVE-2026-97798
The Windows Error Reporting service is vulnerable to an argument injection vulnerability (CWE-88) caused by improper neutralization of argument delimiters in a command. An authorized attacker can leverage this flaw to achieve local privilege escalation . The official fix is available via the prov...
EUVD-2026-100401
Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally...
CVE-2026-105007
An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) because ndis.sys fails to validate buffer length before copying memory. In a local attack scenario, an attacker with the ability to execute a malicious application could run a specially crafted app...
CVE-2026-105009
A local privilege escalation vulnerability exists in the Windows Server Update Service due to incorrect default permissions (CWE-276). An authorized attacker can exploit this flaw to elevate privileges locally. While the CVSS 3.1 score reflects a High severity (7.5), the attack requires low privi...
EUVD-2026-100396
An elevation of privilege vulnerability exists in the Network Driver Interface Specification NDIS when ndis.sys fails to check the length of a buffer prior to copying memory to it. To exploit the vulnerability, in a local attack scenario, an attacker could run a specially crafted application to...
EUVD-2026-100398
Incorrect default permissions in Windows Server Update Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-100400
Improper neutralization of argument delimiters in a command 'argument injection' in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
CVE-2026-97799
The Windows Audio Service is vulnerable to a Local Privilege Escalation flaw due to improper verification of cryptographic signatures (CWE-347). An authorized attacker can exploit this weakness to elevate privileges locally. A high-severity OFFICIAL_FIX is available. No specific exploit details o...
EUVD-2026-100386
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Credential Providers allows an authorized attacker to elevate privileges locally...
EUVD-2026-100384
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...
CVE-2026-105004
A high-severity out-of-bounds read vulnerability exists in the Windows Overlay Filter . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is characterized by CWE-125 and carries a CVSS 3.1 base score of 7.8 . Specific details regarding the impacted ...
CVE-2026-103565
A Use after free vulnerability in the Windows Broadcast DVR User Service allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-416 . No specific exploit links or detailed remediation instructions are provided in the documents, though an offi...
EUVD-2026-100393
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...
EUVD-2026-100385
Buffer over-read in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally...
EUVD-2026-100392
Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally...
CVE-2026-103567
A buffer over-read vulnerability exists in the Windows Broadcast DVR User Service . This flaw allows an authorized attacker to disclose information locally on the affected system. The vulnerability is categorized under CWE-126 . No specific exploit code or evidence of in-the-wild exploitation is ...
CVE-2026-105003
A heap-based buffer overflow exists in the HID class driver , which can be exploited by an authorized attacker to achieve local privilege elevation . The vulnerability has a high severity base score of 7.8. No specific software versions, root causes, or exploits are provided in the documents, but...