266192 matches found
EUVD-2026-56595
Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally...
CVE-2026-66804 Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability
...
CVE-2026-70344 Windows Installer Elevation of Privilege Vulnerability
...
CVE-2026-70344
CVE-2026-70344 originates from a stack-based buffer overflow in Windows Installer. The vulnerability could allow an authorized attacker to perform local privilege escalation on affected systems. The CVSS 3.1 vector (L/L/P:L/U:N/S:U/C:H/I:H/A:H) indicates local attack vector, low attack complexity...
CVE-2026-66804
Technical details about CVE-2026-66804 are not publicly available in the provided documents. Monitor for updates from Microsoft and NVD for affected products, vulnerable component, impact, and remediation.
EUVD-2026-56596
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-65783
CVE-2026-65783 is a use-after-free vulnerability in Windows Autopilot that allows an authorized attacker to perform local privilege escalation. The available documents confirm the affected component (Windows Autopilot) and the underlying issue (use-after-free) with a local attacker requiring low ...
EUVD-2026-56594
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally...
CVE-2026-65783 Windows Autopilot Elevation of Privilege Vulnerability
...
CVE-2026-70340 Azure CycleCloud Elevation of Privilege Vulnerability
...
CVE-2026-70340
Azure CycleCloud CVE-2026-70340: AMissing authorization vulnerability could allow an authenticated attacker to elevate privileges over a network. The issue affects Azure CycleCloud and is rated HIGH (CVSS 3.1: AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H). The root cause is insufficient access control, en...
CVE-2026-57104
CVE-2026-57104 concerns Azure Storage Explorer, where improper neutralization of input during web page generation enables a cross-site scripting (XSS) vulnerability that can lead to elevation of privilege over a network. According to the CVSS 3.1 data, the issue has a base score of 8.8 (HIGH) wit...
CVE-2026-57104 Azure Storage Explorer Elevation of Privilege Vulnerability
...
CVE-2026-57104
Improper neutralization of input during web page generation 'cross-site scripting' in Azure Storage Explorer allows an unauthorized attacker to elevate privileges over a network...
EUVD-2026-56591
Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network...
EUVD-2026-56590
Improper neutralization of input during web page generation 'cross-site scripting' in Azure Storage Explorer allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-70335 GitHub Copilot and Visual Studio Code Elevation of Privilege Vulnerability
...
EUVD-2026-56588
Improper neutralization of special elements used in an os command 'os command injection' in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to elevate privileges locally...