CVE-2026-102216

Access of resource using incompatible type 'type confusion' in Windows StateRepository API allows an authorized attacker to elevate privileges locally...

EUVD-2026-100366

Access of resource using incompatible type 'type confusion' in Windows StateRepository API allows an authorized attacker to elevate privileges locally...

CVE-2026-102216

A type confusion vulnerability exists in the Windows StateRepository API , where an access of resource using an incompatible type allows an authorized attacker to achieve local privilege escalation . The vulnerability has a HIGH base severity score of 7.8. No specific exploitative details or patc...

CVE-2026-85910

A buffer over-read vulnerability exists in the Windows StateRepository API . This flaw allows an authorized attacker to perform a local information disclosure, potentially exposing sensitive data. The vulnerability is associated with CWE-126 . No specific exploit details or active in-the-wild exp...

CVE-2026-85911

A use after free vulnerability exists in the Windows StateRepository API . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is assigned a CVSS 3.1 base score of 7.8 (High Severity). No specific exploit links or remediation details are provided in t...

CVE-2026-70218

The Windows StateRepository API is affected by an insufficient granularity of access control vulnerability. This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-1220 and CWE-285 . No specific exploitation details or patch version...

Windows StateRepository API Elevation of Privilege Vulnerability

Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate privileges locally...

Windows StateRepository API Elevation of Privilege Vulnerability

Access of resource using incompatible type 'type confusion' in Windows StateRepository API allows an authorized attacker to elevate privileges locally...

PT-2026-111924

Access of resource using incompatible type 'type confusion' in Windows StateRepository API allows an authorized attacker to elevate privileges locally...

EUVD-2026-43982

Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate privileges locally...

CVE-2026-49170

CVE-2026-49170 affects the Windows StateRepository API server file due to insufficient granularity in access control, enabling an authorized local attacker to elevate privileges. Base metrics show CVSS v3.1: 7.8 (HIGH) with local access, low attack complexity, low privileges required, and no user...

CVE-2026-49170 Windows StateRepository API Server file Elevation of Privilege Vulnerability

...

CVE-2026-49170 Windows StateRepository API Server file Elevation of Privilege Vulnerability

...

Windows StateRepository API Server file Elevation of Privilege Vulnerability

Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate privileges locally...

PT-2026-58145

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description Insufficient granularity of access control in the Windows StateRepository API allows an authorized attacker to elevate privileges locally. Recommendations Apply the July patch to resolve this...

CVE-2026-49170: Insufficient Granularity of Access Control

Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate privileges locally...

CVE-2025-59203

Insertion of sensitive information into log file in Windows StateRepository API allows an authorized attacker to disclose information locally...

EUVD-2025-34294

Insertion of sensitive information into log file in Windows StateRepository API allows an authorized attacker to disclose information locally...

CVE-2025-59203: Insertion of Sensitive Information into Log File

Insertion of sensitive information into log file in Windows StateRepository API allows an authorized attacker to disclose information locally...

PT-2025-42095

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description An issue exists in the Windows StateRepository API where sensitive information is inserted into log files. This allows an authorized attacker to disclose information locally. Recommendations ...