EUVD-2026-35733

Use of uninitialized resource in Windows Push Notifications allows an authorized attacker to disclose information locally...

CVE-2026-42984

CVE-2026-42984 relates to a use-after-free in the Windows Kernel enabling an authorized local attacker to elevate privileges. Affected component: Windows Kernel. Underlying cause: use-after-free (exact technical details not provided here). Impact: local privilege elevation with high confidentiali...

CVE-2026-42970

CVE-2026-42970 involves Windows Push Notifications and is caused by the use of an uninitialized resource , enabling an authorized attacker to locally disclose information. The CVSS 3.1 vector (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) yields a base score of 5.5 (Medium) with high confidentiality impac...

EUVD-2026-35730

Use of uninitialized resource in Windows Push Notifications allows an authorized attacker to disclose information locally...

EUVD-2026-35725

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Telephony Service allows an authorized attacker to elevate privileges locally...

CVE-2026-42912

The CVE-2026-42912 entry concerns a race condition in the Windows Telephony Service caused by improper synchronization. A local, low-privilege attacker could exploit this vulnerability to elevate privileges on the host (CVSSv3.1: 7.0, HIGH). Affected component: Windows Telephony Service. Root cau...

EUVD-2026-35723

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

EUVD-2026-35598

Integer underflow wrap or wraparound in Windows NT OS Kernel allows an authorized attacker to elevate privileges locally...

EUVD-2026-35594

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

EUVD-2026-35585

Untrusted search path in Windows Narrator Braille allows an authorized attacker to elevate privileges locally...

CVE-2026-48562

Summary: CVE-2026-48562 affects Microsoft Office SharePoint Server. It describes improper neutralization of input during web page generation, causing cross-site scripting that could enable an authorized attacker to perform spoofing over a network. The associated metrics assign a CVSS v3.1 base sc...

EUVD-2026-35584

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

CVE-2026-47656

CVE-2026-47656 involves a vulnerability in Windows Boot Manager described as a protection mechanism failure that allows an authorized attacker to locally bypass a security feature. The associated CVSS 3.1 metrics indicate: Local attack vector, Low attack complexity, High privileges required, No u...

CVE-2026-45484

This CVE involves deserialization of untrusted data in Microsoft Office SharePoint, enabling an authorized attacker to elevate privileges over a network. Affected component: SharePoint (deserialization vulnerability cited in multiple sources). Root cause: improper handling of deserialized input l...

CVE-2026-45481

CVE-2026-45481 is a cross-site scripting vulnerability in Microsoft Office SharePoint arising from improper input neutralization during web page generation. The issue can allow an authorized attacker to perform spoofing over a network. According to the available records, the affected component is...

CVE-2026-47640

CVE-2026-47640 – Details : Affects Microsoft Office SharePoint (SharePoint Server). The vulnerability is an improper neutralization of input during web page generation (XSS), enabling an authorized attacker to perform spoofing over a network. The connected documents do not specify affected versio...

EUVD-2026-35578

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

CVE-2026-47634

Microsoft Office SharePoint is affected by CVE-2026-47634, a cross-site scripting (XSS) vulnerability due to improper neutralization of input during web page generation. The vulnerability allows an authorized attacker to spoof users over a network. According to the sources, the issue impacts Shar...

CVE-2026-42910

CVE-2026-42910 describes an out-of-bounds write in Windows Hotpatch Monitoring Service that enables a locally authenticated attacker to elevate privileges. According to the records, the impact is local with high severity (CVSS v3.1: AVLOCAL, ACLOW, PRLOW, UI NONE, S U, C I A H). The exploitation ...

CVE-2026-47293

CVE-2026-47293 describes a use-after-free vulnerability in Microsoft Office Click-To-Run that could allow an authorized, local attacker to elevate privileges. Affected component is Microsoft Office Click-To-Run; root cause is use-after-free. The published metrics indicate a high-severity impact (...