66141 matches found
CVE-2026-62726
Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally...
CVE-2026-62725
Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally...
CVE-2026-48385
ColdFusion is affected by an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized write...
CVE-2026-48362
ColdFusion is affected by an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitatio...
CVE-2025-35973
Improper handling of values for some IntelR Processors within Ring 0: Kernel, Hypervisor and Bare Metal OS may allow an escalation of privilege. Authorized adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur...
UBUNTU-CVE-2025-35973
Improper handling of values for some IntelR Processors within Ring 0: Kernel, Hypervisor and Bare Metal OS may allow an escalation of privilege. Authorized adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur...
CVE-2026-66802
CVE-2026-66802 describes a race condition in Microsoft Azure Attestation service and Device Health Attestation Service caused by improper synchronization of a shared resource. This concurrency issue allows an unauthenticated, network-based attacker to execute code on affected systems, with high i...
CVE-2026-65797 Windows DNS Elevation of Privilege Vulnerability
...
CVE-2026-65797 Windows DNS Elevation of Privilege Vulnerability
...
CVE-2026-65799
Integer overflow or wraparound in Windows DNS allows an authorized attacker to elevate privileges locally...
CVE-2026-65799 Windows DNS Elevation of Privilege Vulnerability
...
CVE-2026-65790 Windows Message Queuing Elevation of Privilege Vulnerability
...
CVE-2026-65781
CVE-2026-65781 is a Windows Autopilot use-after-free causing local privilege escalation for an authorized attacker. Documents do not specify affected build numbers, exact vulnerable component/file, or root-cause details beyond the use-after-free description. No exploitation status or patch/versio...
CVE-2026-65778
CVE-2026-65778 is a Windows Autopilot use-after-free vulnerability that enables local privilege escalation for an authorized attacker with low privileges and no user interaction. The CVSS 3.1 vector (Local, High impact, Privileges Required: Low, Confidentiality/Integrity/Availability: High) indic...
CVE-2026-65778 Windows Autopilot Elevation of Privilege Vulnerability
...
CVE-2026-65779 Windows Autopilot Elevation of Privilege Vulnerability
...
CVE-2026-65774 Windows Installer Elevation of Privilege Vulnerability
...
CVE-2026-65681 Windows iSCSI Target Service Denial of Service Vulnerability
...
CVE-2026-62881
The CVE-2026-62881 entry describes a numeric truncation flaw in Windows DNS that allows an authenticated, local attacker to elevate privileges. Affected component is the Windows DNS service; root cause is a numeric truncation error. Exploitation is local with high privileges required and no user ...