243892 matches found
CVE-2026-62735 Windows HTTP.sys Elevation of Privilege Vulnerability
...
CVE-2026-62737 Windows Kernel Elevation of Privilege Vulnerability
...
CVE-2026-62735 Windows HTTP.sys Elevation of Privilege Vulnerability
...
CVE-2026-62740
CVE-2026-62740 describes a vulnerability in the Windows Imaging Component where an uninitialized resource can lead to local information disclosure by an authorized attacker. The issue is reported with a CVSS v3.1 base score of 5.5 (Medium), vector: Local, low attack complexity, and low privileges...
EUVD-2026-56365
Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally...
CVE-2026-62753 Windows HTTP.sys Elevation of Privilege Vulnerability
...
CVE-2026-62740 Windows Imaging Component Information Disclosure Vulnerability
...
CVE-2026-62753 Windows HTTP.sys Elevation of Privilege Vulnerability
...
CVE-2026-62740 Windows Imaging Component Information Disclosure Vulnerability
...
CVE-2026-62753
CVE-2026-62753 is a heap-based buffer overflow in Windows HTTP.sys that allows local privilege escalation by an authorized attacker. Affected: Windows HTTP.sys; Impact: local high-severity compromise of confidentiality, integrity, and availability. CVSS: 7.0 (3.1) with LOCAL, LOW privileges requi...
EUVD-2026-56364
Use of uninitialized resource in Windows Imaging Component allows an authorized attacker to disclose information locally...
EUVD-2026-56363
Buffer over-read in Windows Win32K allows an authorized attacker to disclose information locally...
CVE-2026-62729 Windows Telephony Service Elevation of Privilege Vulnerability
...
CVE-2026-62746
CVE-2026-62746 is a Windows Win32k information-disclosure vulnerability described as a buffer over-read that allows an authorized, local attacker to disclose information. Affected component: Win32k (Windows). Impact per provided metrics: confidentiality impact High; attack vector Local; attack co...
CVE-2026-62746 Win32k Information Disclosure Vulnerability
...
CVE-2026-62729 Windows Telephony Service Elevation of Privilege Vulnerability
...
CVE-2026-62729
CVE-2026-62729 describes a race condition in Windows Telephony Service caused by concurrent execution on a shared resource with improper synchronization. This allows an authorized, local attacker to elevate privileges. The entry notes a local attack vector with high impact on confidentiality, int...
EUVD-2026-56362
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Telephony Service allows an authorized attacker to elevate privileges locally...