25 matches found
EUVD-2026-73358
Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...
CVE-2026-70289
CVE-2026-70289 is a heap-based buffer overflow in the Windows Win32 Kernel Subsystem (Win32k) that allows an authorized (low-privilege) attacker to elevate privileges locally . The vulnerability is rated CVSS 7.8 (HIGH) with local attack vector, low complexity, and high impact to confidentiality,...
EUVD-2026-73075
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...
PT-2026-87794
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...
CVE-2026-70289: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...
CVE-2026-70290: Use of Uninitialized Resource
Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...
CVE-2026-58632
CVE-2026-58632 is a Windows Win32K use-after-free vulnerability in the Win32 Kernel Subsystem that could allow a locally authenticated attacker to escalate privileges. The CVE is described as a local elevation of privilege (no remote code execution). Public sources in the connected set consistent...
CVE-2025-49667 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
...
CVE-2025-24983
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...
CVE-2025-24044 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
...
CVE-2025-24044: Use After Free
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...
CVE-2025-24983: Use After Free
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...
PT-2025-10799
Name of the Vulnerable Software and Affected Versions: Windows Win32 Kernel Subsystem affected versions not specified Description: The issue is related to a use after free condition in the Windows Win32 Kernel Subsystem, which allows an authorized attacker to elevate privileges locally...
CVE-2025-21367
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability...
CVE-2025-21367 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
...
CVE-2025-21367: Use After Free
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability...
CVE-2024-49046
CVE-2024-49046 affects the Windows Win32 Kernel Subsystem and is categorized as an Elevation of Privilege vulnerability. The CVSS 3.1 vector indicates LOCAL exploitability with LOW attack complexity and LOW privileges required, but HIGH impact to confidentiality, integrity, and availability under...
CVE-2024-49046: Time-of-check Time-of-use (TOCTOU) Race Condition
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability...