312605 matches found
CVE-2026-70165: Improper Link Resolution Before File Access
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...
CVE-2026-85935: Buffer Over-read
Buffer over-read in Windows USB Driver allows an authorized attacker to disclose information locally...
CVE-2026-88080: Use After Free
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-85852: Out-of-bounds Read
Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally...
CVE-2026-85851: Use After Free
Use after free in Windows SmartScreen allows an authorized attacker to elevate privileges locally...
CVE-2026-85835: Buffer Over-read
Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally...
CVE-2026-85830: Out-of-bounds Read
Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally...
CVE-2026-85794: Out-of-bounds Read
Out-of-bounds read in Windows Routing and Remote Access Service RRAS allows an authorized attacker to disclose information locally...
CVE-2026-85374: Out-of-bounds Read
Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally...
CVE-2026-85361: Use After Free
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-85328: Weak Authentication
Weak authentication in Windows Projected File System allows an authorized attacker to elevate privileges locally...
CVE-2026-83929: Out-of-bounds Write
Out-of-bounds write in Windows GDI allows an unauthorized attacker to execute code over a network...
CVE-2026-83917: Use After Free
Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally...
CVE-2026-83879: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...
CVE-2026-83854: Missing Authentication for Critical Function
Improper access control in Windows Notification allows an authorized attacker to disclose information locally...
CVE-2026-83842: Double Free
Double free in Windows TCP/IP allows an authorized attacker to elevate privileges locally...
CVE-2026-83839: Time-of-check Time-of-use (TOCTOU) Race Condition
Time-of-check time-of-use toctou race condition in Windows Hyper-V allows an authorized attacker to elevate privileges locally...
CVE-2026-83787: Authentication Bypass Using an Alternate Path or Channel
Insufficient verification of data authenticity in Windows DHCP Server allows an authorized attacker to bypass a security feature locally...