2999 matches found
PT-2026-24271
Use after free in Broadcast DVR allows an authorized attacker to elevate privileges locally...
PT-2026-24280
Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description A use-after-free condition exists in the Windows Win32K component. This allows a locally authorized attacker to gain elevated privileges. Recommendations At the moment, there is no...
PT-2026-24325
Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description Improper validation of a specified type of input in SQL Server can allow an authorized attacker to elevate privileges over a network. Recommendations At the moment, there is no information...
PT-2026-24306
Name of the Vulnerable Software and Affected Versions Windows versions affected versions not specified Description A flaw exists in the Windows Ancillary Function Driver for WinSock due to improper input validation. This allows a local attacker to gain elevated privileges. The issue affects all...
PT-2026-24274
šØ CVE-2026-23671 Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Bluetooth RFCOM Protocol Driver allows an authorized attacker to elevate privileges locally. š@cveNotify...
PT-2026-24331
Name of the Vulnerable Software and Affected Versions Windows 10 Version 1607 Windows Server 2025 Windows Server 2011 Description Improper authentication in the Windows SMB Server allows an authorized attacker to elevate privileges locally. The issue involves a Kerberos reflection bypass, which c...
PT-2026-24283
Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description A use-after-free condition exists in the Windows Kernel. Successful exploitation could allow an attacker to gain elevated privileges on a local system. Recommendations At the moment...
PT-2026-24288
Name of the Vulnerable Software and Affected Versions Windows Server 2025 Description Improper authentication in the Windows SMB Server allows an authorized attacker to elevate privileges locally. This issue involves an NTLM reflection bypass, which can enable an attacker to obtain SYSTEM...
EUVD-2026-9886
Permissive regular expression in Azure Compute Gallery allows an authorized attacker to elevate privileges locally...
CVE-2026-23651
Permissive regular expression in Azure Compute Gallery allows an authorized attacker to elevate privileges locally...
PT-2026-23570
Name of the Vulnerable Software and Affected Versions Azure Compute Gallery affected versions not specified Description A permissive regular expression within Azure Compute Gallery can allow an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no informati...
PT-2026-40155
Name of the Vulnerable Software and Affected Versions Windows DWM Core Library affected versions not specified Description A buffer over-read in the Windows DWM Core Library allows an authorized attacker to disclose sensitive information locally. Recommendations At the moment, there is no...
CVE-2026-26119
Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges over a network...
CVE-2026-26119
Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges over a network...
CVE-2026-21529
Improper neutralization of input during web page generation 'cross-site scripting' in Azure HDInsights allows an authorized attacker to perform spoofing over a network...
CVE-2026-21235
Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...
CVE-2026-21244
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally...
CVE-2026-21523
Time-of-check time-of-use toctou race condition in GitHub Copilot and Visual Studio allows an authorized attacker to execute code over a network...