347101 matches found
CVE-2026-110112: Incorrect Authorization
Dockhand before 1.0.50 contains a privilege escalation vulnerability that allows users from another tenant to gain admin access because OIDC iss, aud, nonce and exp claims are not validated. Attackers with admin rights in another tenant of a shared provider like Microsoft Entra ID can recreate th...
Important: xorg-x11-server security update
X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. Security Fixes: xorg-x11-server: xorg-x11-server: Privilege escalation via crafted RandR provider property requests...
Microsoft Windows: CVE-2026-70021: Windows Direct Composition Elevation of Privilege Vulnerability
Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally...
PT-2026-113135
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...
PT-2026-113134
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally...
PT-2026-112739
Name of the Vulnerable Software and Affected Versions Windows Installer affected versions not specified Description A heap-based buffer overflow occurs in Windows Installer, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory corruption issu...
PT-2026-113144
Time-of-check time-of-use toctou race condition in Servicing Stack Updates allows an authorized attacker to elevate privileges locally...
PT-2026-113239
Name of the Vulnerable Software and Affected Versions Windows Container Isolation FS Filter Driver unionfs.sys affected versions not specified Description A heap-based buffer overflow occurs in the Windows Container Isolation FS Filter Driver unionfs.sys. This issue allows an authorized attacker ...
PT-2026-112399
Incorrect authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...
PT-2026-112742
Name of the Vulnerable Software and Affected Versions Windows Management Instrumentation affected versions not specified Description An authorized attacker can elevate privileges locally due to the release of an invalid pointer or reference within the Windows Management Instrumentation component...
CVE-2026-85925: Improper Restriction of Communication Channel to Intended Endpoints
Improper restriction of communication channel to intended endpoints in Azure Key Vault allows an authorized attacker to elevate privileges over a network...
CVE-2026-85920: Time-of-check Time-of-use (TOCTOU) Race Condition
Time-of-check time-of-use toctou race condition in Windows BitLocker allows an authorized attacker to elevate privileges locally...
CVE-2026-85901: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...
CVE-2026-85914: Use After Free
Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally...
CVE-2026-85802: Use After Free
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...
CVE-2026-85918: Use After Free
Use after free in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...
CVE-2026-85372: Use After Free
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-85365: Heap-based Buffer Overflow
Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally...
CVE-2026-85377: Access of Resource Using Incompatible Type
Access of resource using incompatible type 'type confusion' in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-85825: Concurrent Execution using Shared Resource with Improper Synchronization
Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...