2998 matches found
CVE-2026-42905
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
CVE-2026-42916
Integer underflow wrap or wraparound in Windows NT OS Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-41092
Improper access control in Microsoft Kinect allows an authorized attacker to elevate privileges locally...
CVE-2026-40371
Improper handling of insufficient permissions or privileges in Microsoft Dynamics 365 on-premises allows an authorized attacker to elevate privileges over a network...
CVE-2026-33828
Trust boundary violation in Windows Attestation allows an authorized attacker to elevate privileges locally...
CVE-2026-32193
Improper limitation of a pathname to a restricted directory 'path traversal' in Microsoft Azure Kubernetes Service allows an authorized attacker to execute code locally...
EUVD-2026-35528
Improper access control in Microsoft PC Manager allows an authorized attacker to bypass a security feature locally...
EUVD-2026-35526
Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...
EUVD-2026-35520
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally...
EUVD-2026-35521
Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...
EUVD-2026-35523
Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...
EUVD-2026-35525
Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...
EUVD-2026-35512
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
EUVD-2026-35515
Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally...
EUVD-2026-35505
Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
EUVD-2026-35509
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
EUVD-2026-35696
Protection mechanism failure in Windows UEFI allows an authorized attacker to bypass a security feature locally...
EUVD-2026-35692
Stack-based buffer overflow in Active Directory Domain Services allows an authorized attacker to execute code over a network...