33 matches found
CVE-2026-105009
A local privilege escalation vulnerability exists in the Windows Server Update Service due to incorrect default permissions (CWE-276). An authorized attacker can exploit this flaw to elevate privileges locally. While the CVSS 3.1 score reflects a High severity (7.5), the attack requires low privi...
CVE-2026-83499
The Windows Server Update Service is impacted by an insufficient granularity of access control vulnerability (CWE-1220). This flaw allows an authorized attacker to achieve local privilege escalation . While the technical root cause is not further detailed in the provided documents, the vulnerabil...
CVE-2026-81969
The Windows Server Update Service is affected by a vulnerability involving insufficient granularity of access control . This flaw allows an authorized attacker to perform a local privilege escalation . The vulnerability is characterized by a HIGH base severity score of 7.8 and is associated with ...
Windows Server Update Service Elevation of Privilege Vulnerability
Incorrect default permissions in Windows Server Update Service allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-83499: Windows Server Update Service Elevation of Privilege Vulnerability
Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally...
CVE-2026-105009: Incorrect Default Permissions
Incorrect default permissions in Windows Server Update Service allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-81969: Windows Server Update Service Elevation of Privilege Vulnerability
Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally...
The vulnerability of the Windows Server Update Service (WSUS) for Windows operating systems allows a hacker to make changes to the system via the network.
The vulnerability of the Windows Server Update Service WSUS for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to make changes to the system remotely...
PT-2026-58319
Name of the Vulnerable Software and Affected Versions Windows Server Update Service affected versions not specified Description An uncaught exception in the Windows Server Update Service allows an unauthorized attacker to perform tampering over a network. Recommendations Deploy the July 14 update...
CVE-2026-50444: Missing Authentication for Critical Function
Missing authentication for critical function in Windows Server Update Service allows an authorized attacker to elevate privileges over a network...
CVE-2026-50328: Uncaught Exception
Uncaught exception in Windows Server Update Service allows an unauthorized attacker to perform tampering over a network...
Security information for Hitachi Disk Array Systems
Overview CVE-2026-0390 | UEFI Secure Boot Security Feature Bypass Vulnerability CVE-2026-20806 | Windows COM Server Information Disclosure Vulnerability CVE-2026-20928 | Windows Recovery Environment Security Feature Bypass Vulnerability CVE-2026-20930 | Windows Management Services Elevation of...
EUVD-2026-22376
Improper input validation in Windows Server Update Service allows an unauthorized attacker to perform tampering over a network...
CVE-2026-32224
Use after free in Windows Server Update Service allows an authorized attacker to elevate privileges locally...
CVE-2026-32224: Use After Free
Use after free in Windows Server Update Service allows an authorized attacker to elevate privileges locally...
CVE-2026-26174: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Server Update Service allows an authorized attacker to elevate privileges locally...
CVE-2026-26154: Improper Input Validation
Improper input validation in Windows Server Update Service allows an unauthorized attacker to perform tampering over a network...
Microsoft Windows 资源管理错误漏洞
Microsoft Windows is an operating system used by personal devices by the American company Microsoft. The Microsoft Windows Server Update Service has a resource management vulnerability. Attackers can exploit this vulnerability to gain higher privileges. The following products and versions are...
