146630 matches found
CVE-2026-50361
CVE-2026-50361 describes a double free in Microsoft Brokering File System leading to local privilege elevation for an authenticated attacker. The vulnerability affects the Brokering File System component and is triggered via improper memory management that can allow an attacker with local access ...
CVE-2026-50434 Windows Push Notification Information Disclosure Vulnerability
...
CVE-2026-50343 Microsoft Install Service Elevation of Privilege Vulnerability
...
CVE-2026-50343
CVE-2026-50343, a Microsoft Install Service Elevation of Privilege vulnerability, arises from improper privilege management. An authorized local attacker could elevate privileges on affected Windows systems. The vulnerability is listed among several critical Windows privilege-escalation issues di...
CVE-2026-50343 Microsoft Install Service Elevation of Privilege Vulnerability
...
CVE-2026-50329
CVE-2026-50329 is a Windows DWM Core Library elevation-of-privilege vulnerability rooted in a use-after-free in the Windows kernel. The available connected sources confirm the affected component as Windows DWM Core Library (Windows Kernel) and describe local privilege escalation possible by an au...
CVE-2026-50305
CVE-2026-50305 is a Microsoft Brokering File System (Windows) use-after-free vulnerability leading to local privilege escalation for an authenticated user. The available connected data confirms the root cause as a use-after-free in the Brokering File System and a resulting privilege elevation. Ex...
CVE-2026-50305 Microsoft Brokering File System Elevation of Privilege Vulnerability
...
CVE-2026-50305 Microsoft Brokering File System Elevation of Privilege Vulnerability
...
CVE-2026-45646 OData for ASP.NET and ASP.NET Core Denial of Service Vulnerability
...
CVE-2026-48581
CVE-2026-48581 affects Microsoft Surface. It describes insufficient granularity of access control enabling a locally authenticated attacker to escalate privileges (Impact: high; CVSS 3.1 base 7.8, AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Connected records show the vulnerability in Surface Broker SDM...
CVE-2026-58647 Microsoft PowerBI Report Server Spoofing Vulnerability
...
CVE-2026-58644
CVE-2026-58644 – Microsoft SharePoint Deserialization of Untrusted Data (Server) involves a deserialization flaw in SharePoint Server that allows an unauthenticated attacker to execute arbitrary code over a network. The vulnerability affects Microsoft Office SharePoint/SharePoint Server component...
CVE-2026-58644 Microsoft SharePoint Remote Code Execution Vulnerability
...
CVE-2026-58636 Microsoft PC Manager Elevation of Privilege Vulnerability
...
CVE-2026-58636 Microsoft PC Manager Elevation of Privilege Vulnerability
...
CVE-2026-58618 Microsoft Excel Remote Code Execution Vulnerability
...
CVE-2026-58618
CVE-2026-58618 : Heap-based buffer overflow in Microsoft Office Excel can allow a local attacker to execute code. Affects Excel components implicated in the heap overflow; CVSS 3.1 base score 7.8 (High). Exploitation is local and requires user interaction. Current connected docs reference Microso...