5242 matches found
CVE-2026-44800
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Push Notifications allows an authorized attacker to elevate privileges locally...
CVE-2026-42982
Improper validation of consistency within input in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...
CVE-2026-57968 Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability
...
CVE-2026-57091 Windows File History Service Elevation of Privilege Vulnerability
...
CVE-2026-56173 Windows WebView Elevation of Privilege Vulnerability
...
CVE-2026-50359 Microsoft XML Core Services Elevation of Privilege Vulnerability
...
CVE-2026-50498 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
...
CVE-2026-50478
CVE-2026-50478 is a Windows Kernel use-after-free vulnerability that enables local privilege escalation by an authorized attacker. The entry cites a Windows Kernel UAF issue with a high overall impact (CVSS v3.1: 7.8, Local, Privilege Escalation, Integrity/Confidentiality/Availability: High). Con...
CVE-2026-50458 Microsoft Brokering File System Elevation of Privilege Vulnerability
...
CVE-2026-50444 Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability
...
CVE-2026-50399
CVE-2026-50399 is a Windows Kernel elevation-of-privilege vulnerability caused by an out-of-bounds read in the Windows Kernel. The issue enables an authorized attacker to elevate privileges locally. According to the connected sources, the affected component is Windows Kernel, with a CVSS v3.1 bas...
CVE-2026-50454 Windows User Interface Core Elevation of Privilege Vulnerability
...
CVE-2026-50449 Windows Runtime Elevation of Privilege Vulnerability
...
CVE-2026-50330 Windows Remote Desktop Client Elevation of Privilege Vulnerability
...
CVE-2026-50364
Technical details (affected product/version, root cause, and fixes) are not publicly available in the provided documents. Monitor for updates.
CVE-2026-50356
CVE-2026-50356 describes a race-condition in Microsoft Windows App Store caused by concurrent execution using a shared resource with improper synchronization. This allows a locally authenticated attacker to elevate privileges. The fixed details or patch versions are not provided in the connected ...
CVE-2026-50325
Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally...
CVE-2026-50297
CVE-2026-50297 is a Windows Win32K local privilege escalation due to improper access control. The vulnerable component is Win32K; the condition allows an authorized attacker to elevate privileges locally. Base impact is high (C, I, A) with local attack vector and no user interaction required beyo...
CVE-2026-49803
CVE-2026-49803 describes a race condition in the Windows AppX Deployment Service due to improper synchronization, enabling an authorized attacker to perform local privilege escalation. The NVD entry corroborates the description: concurrent execution on a shared resource leads to elevation of priv...