CVE-2026-59128 Windows Encrypting File System (EFS) Information Disclosure Vulnerability

...

EUVD-2026-56308

Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-59127 Windows Installer Elevation of Privilege Vulnerability

...

CVE-2026-59128

Out-of-bounds read in Windows Encrypting File System EFS allows an authorized attacker to disclose information locally...

CVE-2026-59127

Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally...

EUVD-2026-56309

Out-of-bounds read in Windows Encrypting File System EFS allows an authorized attacker to disclose information locally...

CVE-2026-59127

CVE-2026-59127: Affected software is Windows Installer; vulnerability is an integer overflow/wraparound in Windows Installer that enables a locally authenticated attacker to elevate privileges. The issue stems from the overflow in a Windows Installer component, with CVSS v3.1 base score 7.8 (High...

CVE-2026-59127 Windows Installer Elevation of Privilege Vulnerability

...

CVE-2026-59128

The CVE-2026-59128 entry documents an out-of-bounds read in Windows Encrypting File System (EFS) that can let an authorized local attacker disclose information. Affected component: Windows EFS. Root cause: out-of-bounds read leading to information disclosure. Impact: local disclosure of informati...

CVE-2026-59128 Windows Encrypting File System (EFS) Information Disclosure Vulnerability

...

CVE-2026-47299 Azure Monitor Agent Elevation of Privilege Vulnerability

...

CVE-2026-58612 PowerShell Information Disclosure Vulnerability

...

CVE-2026-58612

CVE-2026-58612 : Server-side request forgery in Microsoft PowerShell Core can allow an unauthenticated attacker to disclose information over a network. The NVD entry lists a CVSS v3.1 base score of 7.4 (High) with NETWORK attack vector, LOW attack complexity, no privileges required, user interact...

EUVD-2026-56302

Improper neutralization of special elements used in a command 'command injection' in Windows Active Directory allows an unauthorized attacker to execute code over a network...

CVE-2026-49179 Windows Active Directory Domain Services Remote Code Execution Vulnerability

...

CVE-2026-54984 Windows Imaging Component Remote Code Execution Vulnerability

...

CVE-2026-54984

Windows Imaging Component contains a heap-based buffer overflow that allows an unauthenticated user with local access to execute arbitrary code. This CVE-2026-54984 is described as a local, high-severity issue (CVSS 7.8). The documents provide no exploit details or remediation guidance; refer to ...

CVE-2026-54984

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code locally...

EUVD-2026-56301

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code locally...

CVE-2026-49179

Improper neutralization of special elements used in a command 'command injection' in Windows Active Directory allows an unauthorized attacker to execute code over a network...