4936 matches found
CVE-2026-41098
Improper neutralization of input during web page generation 'cross-site scripting' in Azure Stack Edge allows an authorized attacker to perform spoofing over a network...
CVE-2026-40371
Improper handling of insufficient permissions or privileges in Microsoft Dynamics 365 on-premises allows an authorized attacker to elevate privileges over a network...
EUVD-2026-35761
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
CVE-2026-44813
CVE-2026-44813 is a Windows vulnerability described as a use-after-free in the Windows DWM Core Library that enables an authorized local attacker to elevate privileges. The NVD/MSRC entries identify the affected component as the Windows DWM Core Library with an impact profile including local priv...
CVE-2026-44808
Affects: Windows DWM Core Library. Issue: Use-after-free in DWM Core Library leading to local privilege escalation by an authorized attacker. Impact: CVSS 3.1 base score 7.8 (HIGH) with LOCAL exploit, low attack complexity, and privileges required. Root cause: use-after-free vulnerability. Exploi...
CVE-2026-44811
Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
CVE-2026-44808
Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
CVE-2026-44809
The vulnerability CVE-2026-44809 involves use-after-free in the Windows Common Log File System (CLFS) Driver. An authorized local attacker can elevate privileges. The data provided does not specify affected Windows versions, patch details, or remediation steps. No exploit specifics are documented...
EUVD-2026-35741
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Push Notifications allows an authorized attacker to elevate privileges locally...
CVE-2026-42979
CVE-2026-42979 describes a race condition in Windows Push Notifications due to improper synchronization on a shared resource, enabling a locally authenticated attacker to elevate privileges. The vulnerability is characterized by local access, high impact on confidentiality, integrity, and availab...
EUVD-2026-35739
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Push Notifications allows an authorized attacker to elevate privileges locally...
CVE-2026-42978
CVE-2026-42978: A race condition due to improper synchronization in Windows Push Notifications leads to local privilege escalation for an authorized attacker. The CVSSv3.1 base score is 7.8 (LOCAL, HIGH impact on confidentiality, integrity, and availability) with HIGH attack complexity and LOW pr...
EUVD-2026-35737
Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...
CVE-2026-42984
CVE-2026-42984 relates to a use-after-free in the Windows Kernel enabling an authorized local attacker to elevate privileges. Affected component: Windows Kernel. Underlying cause: use-after-free (exact technical details not provided here). Impact: local privilege elevation with high confidentiali...
EUVD-2026-35733
Use of uninitialized resource in Windows Push Notifications allows an authorized attacker to disclose information locally...
EUVD-2026-35734
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-42970
CVE-2026-42970 involves Windows Push Notifications and is caused by the use of an uninitialized resource , enabling an authorized attacker to locally disclose information. The CVSS 3.1 vector (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) yields a base score of 5.5 (Medium) with high confidentiality impac...
CVE-2026-42970
Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally...