239191 matches found
EUVD-2026-56623
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-61926 Windows USB Driver Elevation of Privilege Vulnerability
...
CVE-2026-61926 Windows USB Driver Elevation of Privilege Vulnerability
...
CVE-2026-61926
CVE-2026-61926 : Heap-based buffer overflow in the Windows USB Driver allows an authorized local attacker to perform a local privilege escalation . Exploitation details are not provided beyond the CVSS metrics (LOCAL, LOW complexity, LOW privileges, NONE user interaction; high impact to confident...
EUVD-2026-56622
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows DNS allows an authorized attacker to execute code over a network...
CVE-2026-61920 Windows DNS Server Remote Code Execution Vulnerability
...
CVE-2026-61360
The CVE-2026-61360 entry concerns an issue in Windows GDI described as an untrusted pointer dereference that could allow an authorized attacker to disclose information locally. Affected component is Windows GDI; root cause is a pointer dereference involving untrusted data, enabling local informat...
EUVD-2026-56621
Untrusted pointer dereference in Windows GDI allows an authorized attacker to disclose information locally...
CVE-2026-61360 Windows GDI Information Disclosure Vulnerability
...
CVE-2026-61920 Windows DNS Server Remote Code Execution Vulnerability
...
CVE-2026-61360 Windows GDI Information Disclosure Vulnerability
...
CVE-2026-61920
CVE-2026-61920 – Windows DNS Server : A race condition caused by improper synchronization on a shared resource enables an authorized attacker to execute code over a network. Affected product: Windows DNS Server. Root cause: concurrent execution due to lack of proper synchronization in the shared ...
CVE-2026-61357 Application Information Services Elevation of Privilege Vulnerability
...
CVE-2026-61358 Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability
...
CVE-2026-61358
The CVE-2026-61358 entry concerns Windows Accessibility Infrastructure (ATBroker.exe) with an improper link resolution before file access (‘link following’) vulnerability that allows an authorized, local attacker to elevate privileges. Reported CVSSv3.1: 7.8 (HIGH) with Local access, Low attack c...
CVE-2026-61358 Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability
...
CVE-2026-61357
CVE-2026-61357 is described as a use-after-free in Application Information Services that allows an authorized attacker to locally elevate privileges. The available data indicate a local attack vector with low privilege required and no user interaction, resulting in high impact to confidentiality,...
EUVD-2026-56620
Improper link resolution before file access 'link following' in Windows Accessibility Infrastructure ATBroker.exe allows an authorized attacker to elevate privileges locally...