9003 matches found
Symlink Attack
Overview Affected versions of this package are vulnerable to Symlink Attack in the handling of Unix named-mutex and shared-memory paths via insecure global directories, symlink races, and unsafe permission changes. An attacker can truncate or overwrite files, widen directory permissions, or eleva...
EUVD-2026-100617
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally...
EUVD-2026-100615
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally...
CVE-2026-88088
An integer overflow or wraparound vulnerability in Microsoft SQL Server allows an authorized attacker to achieve local privilege escalation . Microsoft has released updates to address this vulnerability, which may be mitigated by installing the security updates provided in KB5126967 (SQL Server 2...
CVE-2026-85919
A Heap-based buffer overflow in Microsoft SQL Server allows an authorized attacker to elevate privileges locally . This vulnerability may allow malicious actors to gain excessive privileges, execute arbitrary code, or access sensitive data. Remediation is available through official Microsoft secu...
EUVD-2026-100608
Time-of-check time-of-use toctou race condition in Linux Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-68883
A heap-based buffer overflow in Microsoft SQL Server allows an authorized attacker to elevate privileges over a network. This vulnerability could allow malicious actors to cause a denial-of-service attack, gain excessive privileges, execute arbitrary code, and potentially access sensitive data. M...
EUVD-2026-100709
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network...
EUVD-2026-100707
Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-97808
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...
CVE-2026-97799
Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally...
CVE-2026-97800
Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally...
CVE-2026-97774
Time-of-check time-of-use toctou race condition in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally...
CVE-2026-96997
Use after free in Microsoft Office OneNote allows an authorized attacker to elevate privileges locally...
CVE-2026-96995
Stack-based buffer overflow in Microsoft Office Word allows an authorized attacker to elevate privileges locally...
CVE-2026-96946
Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...
CVE-2026-96931
Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally...
CVE-2026-96937
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...