2443 matches found
CVE-2026-50670 Windows Win32k Elevation of Privilege Vulnerability
...
CVE-2026-50670
CVE-2026-50670 is a Windows Win32k elevation-of-privilege vulnerability caused by an out-of-bounds read in the Windows kernel. Connected sources confirm local privilege escalation potential and indicate Microsoft has released updates (e.g., KB5099538/KB5099540; MSRC guidance) addressing this issu...
CVE-2026-50670 Windows Win32k Elevation of Privilege Vulnerability
...
CVE-2026-50489
CVE-2026-50489 is a heap-based buffer overflow in Windows Win32K that allows an authorized, locally authenticated attacker to escalate privileges. The root cause is a memory corruption in the Win32K subsystem that leads to code execution with SYSTEM rights. The CVE entry is supported by multiple ...
CVE-2026-50489 Win32k Elevation of Privilege Vulnerability
...
CVE-2026-50489 Win32k Elevation of Privilege Vulnerability
...
CVE-2026-50416 Win32k Information Disclosure Vulnerability
...
CVE-2026-50416 Win32k Information Disclosure Vulnerability
...
CVE-2026-50416
CVE-2026-50416 is a Win32K information disclosure vulnerability in Windows. The issue allows local disclosure of sensitive data to an attacker with local access (CVSS v3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N, Base score 3.3). Microsoft has released updates to address this vulnerability; apply th...
CVE-2026-50325 Win32k Elevation of Privilege Vulnerability
...
CVE-2026-50325 Win32k Elevation of Privilege Vulnerability
...
CVE-2026-50325
Technical details (affected versions, root cause, remediation) are not provided in the supplied documents; monitor for updates.
CVE-2026-50297
CVE-2026-50297 is a Windows Win32K local privilege escalation due to improper access control. The vulnerable component is Win32K; the condition allows an authorized attacker to elevate privileges locally. Base impact is high (C, I, A) with local attack vector and no user interaction required beyo...
CVE-2026-50297 Win32k Elevation of Privilege Vulnerability
...
CVE-2026-49805 Win32k Elevation of Privilege Vulnerability
...
CVE-2026-49805
Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally...
CVE-2026-49805
CVE-2026-49805 concerns Windows: an improper access control in the Win32K subsystem could allow a locally authenticated attacker to elevate privileges. Affected software is described as Windows Win32K; the root cause cited is access-control issues within that component. The documents provide the ...
CVE-2026-49805 Win32k Elevation of Privilege Vulnerability
...