243691 matches found
CVE-2026-59125
Use-after-free in the Virtual Hard Disk (VHD) Miniport Driver can allow an authorized local attacker to elevate privileges. The vulnerability is described as a local privilege escalation with high impact to confidentiality, integrity, and availability. The CVSS vector indicates LOCAL access, user...
CVE-2026-59125
Use after free in Virtual Hard Disk VHD Miniport Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-59126
The CVE refers to a race condition in Windows Event Logging Service where concurrent execution on a shared resource with improper synchronization can enable a local, authorized user to elevate privileges. Affected component: Windows Event Logging Service; root cause: race condition due to insuffi...
CVE-2026-59125 Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability
...
CVE-2026-59126 Windows Event Logging Service Elevation of Privilege Vulnerability
...
CVE-2026-59125 Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability
...
CVE-2026-59122 Windows Telephony Service Elevation of Privilege Vulnerability
...
EUVD-2026-56609
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Telephony Service allows an authorized attacker to elevate privileges locally...
CVE-2026-59122 Windows Telephony Service Elevation of Privilege Vulnerability
...
CVE-2026-59119 PowerShell Elevation of Privilege Vulnerability
...
CVE-2026-59122
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Telephony Service allows an authorized attacker to elevate privileges locally...
CVE-2026-59119
CVE-2026-59119 : The vulnerability is in Microsoft PowerShell, caused by incorrect default permissions that allow an authorized, local attacker to elevate privileges. The CVSS v3.1 base score is 7.3 (HIGH) with LOCAL attack vector, LOW attack complexity, LOW privileges required, and user interact...
CVE-2026-59122
CVE-2026-59122 describes a race condition in Windows Telephony Service caused by concurrent access to a shared resource with improper synchronization. This allows an authorized attacker with local access and low privileges to elevate privileges (CVSS v3.1: AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H; bas...
CVE-2026-58641
CVE-2026-58641 describes an integer overflow/wraparound in .NET that allows a local attacker to elevate privileges. The public descriptions state that the vulnerability is a local privilege escalation with high impact (confidentiality, integrity, and availability). The provided documents do not s...
EUVD-2026-56603
Improper link resolution before file access 'link following' in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to perform tampering locally...
CVE-2026-72971
CVE-2026-72971 applies to the Windows Container Isolation FS Filter Driver (unionfs.sys). The issue is improper link resolution before file access ("link following"), enabling a locally authenticated attacker with low privileges to tamper with files. CVSS 3.1 Base: 5.5 (Local, Low attack complexi...
EUVD-2026-56604
Missing authentication for critical function in Windows RPC API allows an authorized attacker to elevate privileges locally...
CVE-2026-72971 Windows Container Isolation FS Filter Driver (unionfs.sys) Tampering Vulnerability
...