2999 matches found
CVE-2026-26165
Use after free in Windows Shell allows an authorized attacker to elevate privileges locally...
CVE-2026-26159
Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges locally...
CVE-2026-20945
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
CVE-2026-0390
Reliance on untrusted inputs in a security decision in Windows Boot Loader allows an authorized attacker to bypass a security feature locally...
CVE-2026-33100
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...
CVE-2026-32171
Insufficiently protected credentials in Azure Logic Apps allows an authorized attacker to elevate privileges over a network...
CVE-2026-32153
Use after free in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally...
CVE-2026-33826
Improper input validation in Windows Active Directory allows an authorized attacker to execute code over an adjacent network...
CVE-2026-32219
Double free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...
CVE-2026-32220
Improper access control in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to bypass a security feature locally...
CVE-2026-32218
Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information locally...
CVE-2026-32181
Improper privilege management in Microsoft Windows allows an authorized attacker to deny service locally...
CVE-2026-32168
Improper input validation in Azure Monitor Agent allows an authorized attacker to elevate privileges locally...
CVE-2026-32160
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Push Notifications allows an authorized attacker to elevate privileges locally...
CVE-2026-32159
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Push Notifications allows an authorized attacker to elevate privileges locally...
CVE-2026-32154
Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-32152
Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-32087
Heap-based buffer overflow in Function Discovery Service fdwsd.dll allows an authorized attacker to elevate privileges locally...
