66135 matches found
CVE-2026-62769 Windows DNS Elevation of Privilege Vulnerability
...
CVE-2026-62732 Windows Telephony Service Elevation of Privilege Vulnerability
...
CVE-2026-62732 Windows Telephony Service Elevation of Privilege Vulnerability
...
CVE-2026-62734 Windows Telephony Service Elevation of Privilege Vulnerability
...
CVE-2026-62743 Win32k Information Disclosure Vulnerability
...
CVE-2026-62726 Windows Telephony Service Elevation of Privilege Vulnerability
...
CVE-2026-62725
CVE-2026-62725 describes a use-after-free in the Windows Telephony Service that can allow a locally authenticated user to elevate privileges. The NVD/CVE records indicate an elevated-privilege, local-execution risk with a CVSS v3.1 base score of 7.0 (high) and impact on confidentiality, integrity...
CVE-2026-62711 Windows Win32k Elevation of Privilege Vulnerability
...
CVE-2026-62709
The CVE describes an information-disclosure flaw in Windows GDI+. Affected component: Windows GDI+ (graphics rendering). Root cause: use of an uninitialized resource, enabling an authorized local attacker to disclose information. Impact: confidentiality loss with a CVSS v3.1 base score of 5.5 (Lo...
CVE-2026-62701 Windows Telephony Service Elevation of Privilege Vulnerability
...
CVE-2026-61938 Windows Installer Elevation of Privilege Vulnerability
...
CVE-2026-61359 Windows Storage Elevation of Privilege Vulnerability
...
CVE-2026-61349 Windows Work Folder Service Elevation of Privilege Vulnerability
...
CVE-2026-59126 Windows Event Logging Service Elevation of Privilege Vulnerability
...
CVE-2026-59126
The CVE refers to a race condition in Windows Event Logging Service where concurrent execution on a shared resource with improper synchronization can enable a local, authorized user to elevate privileges. Affected component: Windows Event Logging Service; root cause: race condition due to insuffi...
CVE-2026-59122
CVE-2026-59122 describes a race condition in Windows Telephony Service caused by concurrent access to a shared resource with improper synchronization. This allows an authorized attacker with local access and low privileges to elevate privileges (CVSS v3.1: AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H; bas...
CVE-2026-70344 Windows Installer Elevation of Privilege Vulnerability
...
EUVD-2026-56588
Improper neutralization of special elements used in an os command 'os command injection' in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to elevate privileges locally...