CVE-2026-62881

The CVE-2026-62881 entry describes a numeric truncation flaw in Windows DNS that allows an authenticated, local attacker to elevate privileges. Affected component is the Windows DNS service; root cause is a numeric truncation error. Exploitation is local with high privileges required and no user ...

CVE-2026-62881 Windows DNS Elevation of Privilege Vulnerability

...

CVE-2026-62799 Windows SMB Client Elevation of Privilege Vulnerability

...

CVE-2026-62799 Windows SMB Client Elevation of Privilege Vulnerability

...

CVE-2026-62768

CVE-2026-62768 describes a stack-based buffer overflow in Windows Installer that can allow an authorized, locally authenticated user to elevate privileges. Affected component is Windows Installer; root cause is a buffer overflow in processing certain installer data, leading to high impact on conf...

CVE-2026-62768 Windows Installer Elevation of Privilege Vulnerability

...

CVE-2026-62769 Windows DNS Elevation of Privilege Vulnerability

...

CVE-2026-62732 Windows Telephony Service Elevation of Privilege Vulnerability

...

CVE-2026-62734 Windows Telephony Service Elevation of Privilege Vulnerability

...

CVE-2026-62732 Windows Telephony Service Elevation of Privilege Vulnerability

...

CVE-2026-62743 Win32k Information Disclosure Vulnerability

...

CVE-2026-62726 Windows Telephony Service Elevation of Privilege Vulnerability

...

CVE-2026-62725

CVE-2026-62725 describes a use-after-free in the Windows Telephony Service that can allow a locally authenticated user to elevate privileges. The NVD/CVE records indicate an elevated-privilege, local-execution risk with a CVSS v3.1 base score of 7.0 (high) and impact on confidentiality, integrity...

CVE-2026-62709

The CVE describes an information-disclosure flaw in Windows GDI+. Affected component: Windows GDI+ (graphics rendering). Root cause: use of an uninitialized resource, enabling an authorized local attacker to disclose information. Impact: confidentiality loss with a CVSS v3.1 base score of 5.5 (Lo...

CVE-2026-62701 Windows Telephony Service Elevation of Privilege Vulnerability

...

CVE-2026-61938 Windows Installer Elevation of Privilege Vulnerability

...

CVE-2026-61359 Windows Storage Elevation of Privilege Vulnerability

...

CVE-2026-59126 Windows Event Logging Service Elevation of Privilege Vulnerability

...

CVE-2026-59126

The CVE refers to a race condition in Windows Event Logging Service where concurrent execution on a shared resource with improper synchronization can enable a local, authorized user to elevate privileges. Affected component: Windows Event Logging Service; root cause: race condition due to insuffi...

CVE-2026-59122

CVE-2026-59122 describes a race condition in Windows Telephony Service caused by concurrent access to a shared resource with improper synchronization. This allows an authorized attacker with local access and low privileges to elevate privileges (CVSS v3.1: AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H; bas...