347346 matches found
CVE-2026-70021: Use After Free
Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally...
CVE-2026-83707: Use After Free
Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-70212: Windows Security Center Elevation of Privilege Vulnerability
Improper restriction of communication channel to intended endpoints in Windows Security Center allows an authorized attacker to elevate privileges locally...
CVE-2026-83753: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally...
PT-2026-112822
Name of the Vulnerable Software and Affected Versions Windows Clipboard User Service affected versions not specified Description A use-after-free condition in the Windows Clipboard User Service allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issu...
PT-2026-111134
Name of the Vulnerable Software and Affected Versions SAP UI5 affected versions not specified Description Insufficient input validation under certain configurations allows a low-privileged attacker to submit specially crafted content. This content is subsequently rendered in a victim's browser,...
CVE-2026-104661: Incorrect Privilege Assignment
GitLab has remediated an issue in GitLab EE affecting all versions from 17.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user holding a custom role with compliance framework administration permissions to configure a...
Microsoft Windows: CVE-2026-83767: Windows Installer Elevation of Privilege Vulnerability
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...
PT-2026-112158
Name of the Vulnerable Software and Affected Versions Windows IP Over USB Service affected versions not specified Description An integer overflow or wraparound occurs in the Windows IP Over USB Service. This issue allows an authorized attacker to elevate privileges locally, enabling them to affec...
PT-2026-112099
Name of the Vulnerable Software and Affected Versions Microsoft COM for Windows affected versions not specified Description A heap-based buffer overflow in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program...
PT-2026-111976
Name of the Vulnerable Software and Affected Versions Windows Server Update Service affected versions not specified Description Incorrect default permissions in the service allow an authorized attacker to elevate privileges locally, which enables them to affect the system. Recommendations At the...
Microsoft Windows: CVE-2026-69916: Windows NTFS Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally...
CVE-2026-70115: Use After Free
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
CVE-2026-69977: Use After Free
Use after free in Quality Windows Audio/Video Experience QWAVE service allows an authorized attacker to elevate privileges locally...
CVE-2026-70299: Incorrect Authorization
Improper access control in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-70111: Untrusted Pointer Dereference
Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges over a network...
Microsoft Windows: CVE-2026-70111: Windows Kernel Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-88085: Heap-based Buffer Overflow
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-83838: Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability
Integer underflow wrap or wraparound in Windows Bluetooth A2DP driver allows an authorized attacker to elevate privileges over an adjacent network...