346954 matches found
CVE-2026-85828: Heap-based Buffer Overflow
Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-83917: Windows ALPC Elevation of Privilege Vulnerability
Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally...
CVE-2026-105897: Server-Side Request Forgery (SSRF)
ColdFusion is affected by a Server-Side Request Forgery SSRF vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed...
Microsoft Exchange: CVE-2026-87696: Microsoft Exchange Server Elevation of Privilege Vulnerability
Improper verification of cryptographic signature in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-110237: Unverified Ownership
Vifm 0.8.1-beta through 0.14.4 reuses a pre-existing IPC FIFO in the shared temporary directory without checking ownership, allowing local users to execute commands as another user. Attackers can pre-create a world-writable vifm-ipc-vifm FIFO and write IPC packets with -c and ! shell commands tha...
CVE-2026-70136: Use After Free
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
PT-2026-113030
Name of the Vulnerable Software and Affected Versions Azure Arc affected versions not specified Description A server-side request forgery SSRF issue in the Azure Connected Machine Agent allows an authorized attacker to perform a local Instance Metadata Service IMDS SSRF. This can be used to hijac...
UBUNTU-CVE-2026-107612
Incorrect permission assignment in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to read or overwrite the inter-process communication handles used between the TightVNC service and its desktop server process. The named shared memory segment in the Global...
Microsoft Windows: CVE-2026-96223: Windows Hyper-V Elevation of Privilege Vulnerability
Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally...
CVE-2026-83761: Use After Free
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...
PT-2026-112594
Name of the Vulnerable Software and Affected Versions Windows Bluetooth Port Driver affected versions not specified Description A heap-based buffer overflow occurs in the Windows Bluetooth Port Driver. This issue allows an authorized attacker to elevate privileges locally on the system. A...
PT-2026-113211
Time-of-check time-of-use toctou race condition in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-70021: Windows Direct Composition Elevation of Privilege Vulnerability
Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally...
PT-2026-113135
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...
PT-2026-113134
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally...
PT-2026-112739
Name of the Vulnerable Software and Affected Versions Windows Installer affected versions not specified Description A heap-based buffer overflow occurs in Windows Installer, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory corruption issu...
PT-2026-111974
An elevation of privilege vulnerability exists in the Network Driver Interface Specification NDIS when ndis.sys fails to check the length of a buffer prior to copying memory to it. To exploit the vulnerability, in a local attack scenario, an attacker could run a specially crafted application to...
PT-2026-113144
Time-of-check time-of-use toctou race condition in Servicing Stack Updates allows an authorized attacker to elevate privileges locally...
PT-2026-113239
Name of the Vulnerable Software and Affected Versions Windows Container Isolation FS Filter Driver unionfs.sys affected versions not specified Description A heap-based buffer overflow occurs in the Windows Container Isolation FS Filter Driver unionfs.sys. This issue allows an authorized attacker ...