CVE-2026-61355

A heap-based buffer overflow in Windows Sensor Data Service allows an authorized local attacker to elevate privileges. Affected component: Windows Sensor Data Service. Vulnerability type: heap-based overflow. Impact: elevated local privileges with high confidentiality, integrity, and availability...

EUVD-2026-56613

Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally...

CVE-2026-61349

CVE-2026-61349 is a Windows vulnerability in the Work Folder Service described as a use-after-free that allows an authorized attacker to elevate privileges locally. The NVD entries (and CVE records) corroborate a local-exploit scenario with a CVSS v3.1 base score of 7.8 (HIGH), requiring LOW priv...

CVE-2026-61349 Windows Work Folder Service Elevation of Privilege Vulnerability

...

CVE-2026-59126

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Event Logging Service allows an authorized attacker to elevate privileges locally...

CVE-2026-59126 Windows Event Logging Service Elevation of Privilege Vulnerability

...

CVE-2026-59126

The CVE refers to a race condition in Windows Event Logging Service where concurrent execution on a shared resource with improper synchronization can enable a local, authorized user to elevate privileges. Affected component: Windows Event Logging Service; root cause: race condition due to insuffi...

EUVD-2026-56609

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Telephony Service allows an authorized attacker to elevate privileges locally...

CVE-2026-59122 Windows Telephony Service Elevation of Privilege Vulnerability

...

CVE-2026-59122 Windows Telephony Service Elevation of Privilege Vulnerability

...

CVE-2026-59122

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Telephony Service allows an authorized attacker to elevate privileges locally...

CVE-2026-59122

CVE-2026-59122 describes a race condition in Windows Telephony Service caused by concurrent access to a shared resource with improper synchronization. This allows an authorized attacker with local access and low privileges to elevate privileges (CVSS v3.1: AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H; bas...

CVE-2026-42976 Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability

...

EUVD-2026-56601

Improper link resolution before file access 'link following' in Windows Management Services allows an authorized attacker to deny service locally...

CVE-2026-70348 Windows Management Services Denial of Service Vulnerability

...

CVE-2026-70348

CVE-2026-70348 describes an issue in Windows Management Services where improper link resolution before file access (link following) can allow an authenticated local attacker to cause a Denial of Service . The available sources state the vulnerability enables local DoS; no exploitable details or p...

CVE-2026-70348 Windows Management Services Denial of Service Vulnerability

...

CVE-2026-73089 Browserslist: Unbounded memory growth (no cache eviction) via distinct query results, leading to eventual OOM

Browserslist is a configuration tool for sharing target browsers and Node.js versions between front-end tools. Prior to 4.28.7, index.js retains every distinct queries, context result in cache and every parseQueries AST in parseCache without a size cap, TTL, or eviction, allowing an attacker who...

CVE-2026-73089 Browserslist: Unbounded memory growth (no cache eviction) via distinct query results, leading to eventual OOM

Browserslist is a configuration tool for sharing target browsers and Node.js versions between front-end tools. Prior to 4.28.7, index.js retains every distinct queries, context result in cache and every parseQueries AST in parseCache without a size cap, TTL, or eviction, allowing an attacker who...

CVE-2026-73089

CVE-2026-73089 affects Browserslist: prior to 4.28.7, index.js caches every distinct (queries, context) result and every parseQueries() AST in parseCache without a size cap, TTL, or eviction. An attacker who can influence repeated browserslist() query values (including those in the form --) can b...