347572 matches found
CVE-2026-69387: Use After Free
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
PT-2026-112901
Name of the Vulnerable Software and Affected Versions Windows Hyper-V affected versions not specified Description A double free issue in Windows Hyper-V allows an authorized attacker to elevate privileges locally. A double free occurs when the system attempts to free the same memory location twic...
CVE-2026-83883: Use After Free
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-97811: Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability
Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally...
Microsoft SharePoint: CVE-2026-88198: Microsoft Office SharePoint Elevation of Privilege Vulnerability
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...
PT-2026-112034
Name of the Vulnerable Software and Affected Versions Dockhand versions prior to 1.0.50 Description An issue exists where OpenID Connect OIDC claims, specifically iss, aud, nonce, and exp, are not validated. This allows a user from a different tenant of a shared provider, such as Microsoft Entra...
CVE-2026-105732: Stack-based Buffer Overflow
Stack-based buffer overflow in SysInternals allows an authorized attacker to elevate privileges locally...
PT-2026-112637
Name of the Vulnerable Software and Affected Versions Windows TCP/IP affected versions not specified Description An incorrect conversion between numeric types in Windows TCP/IP allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no information abou...
PT-2026-112814
Name of the Vulnerable Software and Affected Versions Windows DWM Core Library affected versions not specified Description An out-of-bounds read in the Windows DWM Core Library allows an authorized attacker to elevate privileges locally, which can lead to an impact on the system. Recommendations ...
CVE-2026-109961: Improper Neutralization of Special Elements in Output Used by a Downstream Component
Froxlor 0.10.0 before 2.3.14 contains a newline injection vulnerability that allows authenticated customers to inject arbitrary entries into the root-owned NSS group database via the unvalidated additionalmembers parameter of the Ftps.add API. Attackers can embed newline characters that the...
CVE-2026-110237: Unverified Ownership
Vifm 0.8.1-beta through 0.14.4 reuses a pre-existing IPC FIFO in the shared temporary directory without checking ownership, allowing local users to execute commands as another user. Attackers can pre-create a world-writable vifm-ipc-vifm FIFO and write IPC packets with -c and ! shell commands tha...
PT-2026-111379
Name of the Vulnerable Software and Affected Versions SIMATIC WinCC versions 7.5 SIMATIC WinCC versions prior to 8.0 Update 11 SIMATIC WinCC versions prior to 8.1 Update 7 Description The application does not sufficiently restrict permissions assigned to a database role. This flaw allows an...
CVE-2026-96937: Use After Free
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
CVE-2026-83751: Use After Free
Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...
CVE-2026-69880: Access of Resource Using Incompatible Type
Access of resource using incompatible type 'type confusion' in Desktop Window Manager allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-69880: Desktop Window Manager Elevation of Privilege Vulnerability
Access of resource using incompatible type 'type confusion' in Desktop Window Manager allows an authorized attacker to elevate privileges locally...
PT-2026-112002
Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally...
CVE-2026-83872: Incorrect Conversion between Numeric Types
Incorrect conversion between numeric types in Windows TCP/IP allows an authorized attacker to elevate privileges locally...