CVE-2026-45638

CVE-2026-45638 relates to Windows’ Ancillary Function Driver for WinSock and is due to a use-after-free in that driver. This vulnerability allows an authorized attacker to escalate privileges locally. The available documents specify the affected component and the local-privilege-escalation impact...

EUVD-2026-35560

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

CVE-2026-45598

CVE-2026-45598 is a Windows vulnerability in the Windows Ancillary Function Driver for WinSock described as a use-after-free that enables a local, authorized attacker to achieve privilege elevation . The description is consistent across the NVD entry and the CVE record, noting a LOCAL attack vect...

EUVD-2026-35557

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

EUVD-2026-35558

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

EUVD-2026-35550

Integer overflow or wraparound in Windows Internet wininet.dll allows an authorized attacker to elevate privileges locally...

EUVD-2026-35546

Use after free in Linux MANA Driver allows an authorized attacker to elevate privileges locally...

EUVD-2026-35545

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

CVE-2026-45465

CVE-2026-45465 : The vulnerability affects Microsoft Office SharePoint Server and is due to improper neutralization of input during web page generation, resulting in a cross-site scripting (XSS) issue. An authorized attacker can perform network-based spoofing. According to the provided descriptio...

CVE-2026-45464

CVE-2026-45464 relates to a vulnerability in Microsoft Office SharePoint where improper neutralization of input during web page generation enables cross-site scripting. According to NVD/Microsoft, the issue could allow an authorized attacker to spoof content over a network, with a CVSS 3.1 base s...

CVE-2026-45462

The CVE-2026-45462 entry describes an XSS vulnerability in Microsoft Office SharePoint where improper neutralization of input during web page generation can enable spoofing over a network. According to the connected records, impact is limited to spoofing with Confidentiality/Integrity/Availabilit...

CVE-2026-48578

Improper access control in Windows Secure Boot allows an authorized attacker to elevate privileges locally...

CVE-2026-48578

CVE-2026-48578 describes a protection mechanism failure in Windows Secure Boot that can allow an authorized attacker to bypass a security feature locally. The available data indicate a local attack vector with high impact on confidentiality and integrity (CVSS 3.1: AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H...

CVE-2026-48576

No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...

CVE-2026-48575

CVE-2026-48575 describes a protection mechanism failure in Windows Secure Boot that allows an authorized, local attacker to bypass a security feature. The vulnerability enables a local escalation path with high impact on confidentiality and integrity (base score 7.9; AV:L/AC:L/PR:H/UI:N/S:C/C:H/I...

CVE-2026-48570

CVE-2026-48570 concerns a protection mechanism failure in Windows Secure Boot that could allow an authorized attacker with HIGH privileges to bypass a security feature locally (local attack, no user interaction). The CVSS 3.1 vector is AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N with a base score of 7.9 ...

CVE-2026-48573

CVE-2026-48573 describes a protection mechanism failure in Windows Secure Boot allowing an authorized attacker to bypass a security feature locally. The NVD entry notes a local attack vector with high impact on confidentiality and integrity (C:H/I:H) and a CVSS v3.1 base score of 7.9. Connected d...

CVE-2026-48568

CVE-2026-48568 concerns a protection mechanism failure in Windows Secure Boot that allows a local attacker to bypass a security feature. The connected sources indicate an in-scope vulnerability where an attacker with HIGH privileges and local access can bypass integrity and confidentiality protec...

CVE-2026-47652

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally...

CVE-2026-47641

CVE-2026-47641 concerns Microsoft Office SharePoint where improper neutralization of input during web page generation enables cross-site scripting. The underlying flaw is input not being properly sanitized, potentially allowing an authorized attacker to spoof content over a network. According to ...