EUVD-2026-35659

Improper authorization in Microsoft PowerToys allows an authorized attacker to elevate privileges locally...

EUVD-2026-35655

Windows Universal Disk Format File System Driver UDFS Elevation of Privilege Vulnerability...

EUVD-2026-35656

Windows Universal Disk Format File System Driver UDFS Elevation of Privilege Vulnerability...

EUVD-2026-35657

Trust boundary violation in Windows Attestation allows an authorized attacker to elevate privileges locally...

CVE-2026-40639

Dell Client Platform BIOS contains a Weak Encoding for Password vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to Elevation of Privileges...

EUVD-2026-35789

Dell Client Platform BIOS contains a Weak Encoding for Password vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2026-50511 Microsoft PC Manager Elevation of Privilege Vulnerability

...

CVE-2026-50511

CVE-2026-50511 describes an elevation-of-privilege vulnerability in Microsoft PC Manager caused by improper link resolution before file access ("link following"). An authorized attacker can achieve local privilege escalation. The issue has a CVSS v3.1 base score of 7.8 (High) with Local attack ve...

CVE-2026-50512

CVE-2026-50512 involves a missing authentication flaw in Microsoft PC Manager that enables an authorized attacker to locally elevate privileges. The CVSS v3.1 score is 7.8 ( HIGH ), with local attack vector, low complexity, and privileges required: LOW; impact to confidentiality, integrity, and a...

CVE-2026-50512 Microsoft PC Manager Elevation of Privilege Vulnerability

...

CVE-2026-45640

Use after free in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-45601

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

CVE-2026-44811

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

CVE-2026-42980

Integer underflow wrap or wraparound in Windows NT OS Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-42916

Integer underflow wrap or wraparound in Windows NT OS Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-42910

Out-of-bounds write in Windows Hotpatch Monitoring Service allows an authorized attacker to elevate privileges locally...

CVE-2026-40404

Windows Universal Disk Format File System Driver UDFS Elevation of Privilege Vulnerability...

CVE-2026-40409

Windows Universal Disk Format File System Driver UDFS Elevation of Privilege Vulnerability...

CVE-2026-40371

Improper handling of insufficient permissions or privileges in Microsoft Dynamics 365 on-premises allows an authorized attacker to elevate privileges over a network...

CVE-2026-44804 Windows DWM Core Library Elevation of Privilege Vulnerability

...