249589 matches found
CVE-2026-61928 Windows Hello Tampering Vulnerability
...
CVE-2026-61928
An issue affecting Windows Hello : sensitive information is stored in cleartext, allowing an authorized local attacker to tamper with the system. The CVSSv3.1 vector indicates a local, low-complexity attack requiring low privileges with a high integrity impact (I:H). Base score 5.5 (Medium). No e...
CVE-2026-61925
CVE-2026-61925 describes an elevation of privilege vulnerability in Windows Installer caused by incorrect authorization checks. An authenticated local attacker can exploit this to gain higher privileges on the host. CVSS v3.1 metrics indicate a HIGH-severity, local attacker, no user interaction, ...
CVE-2026-61927
CVE-2026-61927 documents a use-after-free in Windows Bind Filter Driver that enables an authorized local attacker to elevate privileges. The description specifies local elevation of privilege with high impact across confidentiality, integrity, and availability. The CVSSv3.1 data indicates Local a...
EUVD-2026-56331
Incorrect authorization in Windows Installer allows an authorized attacker to elevate privileges locally...
EUVD-2026-56332
Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-61927 Windows Bind Filter Driver Elevation of Privilege Vulnerability
...
CVE-2026-61925 Windows Installer Elevation of Privilege Vulnerability
...
CVE-2026-61927 Windows Bind Filter Driver Elevation of Privilege Vulnerability
...
CVE-2026-61925 Windows Installer Elevation of Privilege Vulnerability
...
CVE-2026-61924 Windows Remote Desktop Client Information Disclosure Vulnerability
...
CVE-2026-61924 Windows Remote Desktop Client Information Disclosure Vulnerability
...
CVE-2026-61924
Technical details about CVE-2026-61924 are not publicly provided in the supplied documents; monitor official advisories from Microsoft and NVD for updates, affected products, and remediations.
CVE-2026-61368
CVE-2026-61368 is a Windows Hyper-V heap-based buffer overflow that enables a locally authenticated attacker (low privileges, user interaction required) to disclose information. Affected component: Hyper-V; root cause is a heap overflow leading to information disclosure. CVSS 3.1 base score 5.0 (...
CVE-2026-61366
Affected component: Windows Network Connection Broker. Vulnerability: double free allows local privilege escalation by an authorized user. Root cause: double-free in the broker when handling network connection objects. Impact: high; local attacker with low privileges and no user interaction can e...
EUVD-2026-56328
Double free in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally...
EUVD-2026-56329
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information locally...
CVE-2026-61366 Windows Network Connection Broker Elevation of Privilege Vulnerability
...