CVE-2026-83791

Improper authorization in Windows Virtual Input allows an authorized attacker to elevate privileges locally...

CVE-2026-83791

The Windows Virtual Input component is susceptible to an improper authorization vulnerability (CWE-283), which allows an authorized attacker to achieve local privilege escalation . The vulnerability is rated with a CVSS v3.1 score of 7.8 (High). No specific exploit details or remediation versions...

EUVD-2026-100002

Improper authorization in Windows Virtual Input allows an authorized attacker to elevate privileges locally...

PT-2026-112585

Name of the Vulnerable Software and Affected Versions Windows Virtual Input affected versions not specified Description Improper authorization in Windows Virtual Input allows an authorized attacker to elevate privileges locally, which enables them to affect the system. Recommendations At the...

Microsoft Windows: CVE-2026-83791: Windows Virtual Input Elevation of Privilege Vulnerability

Improper authorization in Windows Virtual Input allows an authorized attacker to elevate privileges locally...

CVE-2026-83791: Unverified Ownership

Improper authorization in Windows Virtual Input allows an authorized attacker to elevate privileges locally...

CVE-2026-69890

Use after free in Windows Virtual Trusted Platform Module allows an authorized attacker to elevate privileges locally...

CVE-2026-69890

CVE-2026-69890 is a Use-After-Free vulnerability in Windows Virtual Trusted Platform Module (vTPM) that allows an authorized local attacker to escalate privileges. The attack requires high privileges and high complexity , with no user interaction needed, but results in a scope change and high imp...

CVE-2026-69890: Use After Free

Use after free in Windows Virtual Trusted Platform Module allows an authorized attacker to elevate privileges locally...

Virtual Filtering Platform DoS

The vulnerability of the Virtual Filtering Platform component for Windows operating systems relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Window Virtual Filtering Platform (VFP) Denial of Service Vulnerability

Use after free in Windows Virtual Filtering Platform VFP allows an authorized attacker to deny service over a network...

CVE-2026-50432: Use After Free

Use after free in Windows Virtual Filtering Platform VFP allows an authorized attacker to deny service over a network...

EUVD-2026-10687

Authentication bypass using an alternate path or channel in Azure Windows Virtual Machine Agent allows an authorized attacker to elevate privileges locally...

CVE-2026-26117

Authentication bypass using an alternate path or channel in Azure Windows Virtual Machine Agent allows an authorized attacker to elevate privileges locally...

CVE-2026-26141 Hybrid Worker Extension (Arc‑enabled Windows VMs) Elevation of Privilege Vulnerability

...

Hybrid Worker Extension (Arc‑enabled Windows VMs) Elevation of Privilege Vulnerability

Improper authentication in Azure Arc allows an authorized attacker to elevate privileges locally...

Arc Enabled Servers - Azure Connected Machine Agent Elevation of Privilege Vulnerability

Authentication bypass using an alternate path or channel in Azure Windows Virtual Machine Agent allows an authorized attacker to elevate privileges locally...

CVE-2026-26117: Authentication Bypass Using an Alternate Path or Channel

Authentication bypass using an alternate path or channel in Azure Windows Virtual Machine Agent allows an authorized attacker to elevate privileges locally...

Linux Distros Unpatched Vulnerability : CVE-2026-21986

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are 7.1.14 and 7.2.4. Easily...

CVE-2026-21986

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...