1650 matches found
CVE-2026-32219 Microsoft Brokering File System Elevation of Privilege Vulnerability
...
CVE-2026-32168 Azure Monitor Agent Elevation of Privilege Vulnerability
...
CVE-2026-32167 SQL Server Elevation of Privilege Vulnerability
...
CVE-2026-32090 Windows Speech Brokered Api Elevation of Privilege Vulnerability
...
CVE-2026-32090 Windows Speech Brokered Api Elevation of Privilege Vulnerability
...
CVE-2026-32089 Windows Speech Brokered Api Elevation of Privilege Vulnerability
...
CVE-2026-32090
CVE-2026-32090 affects the Windows Speech Brokered API. The vulnerability is an Elevation of Privilege with a CVSSv3.1 base score of 7.8 (HIGH). It is a LOCAL, LOW attack complexity, LOW privileges required, with no user interaction and UNCHANGED scope. The impact is HIGH for confidentiality, int...
CVE-2026-32083
CVE-2026-32083 pertains to Windows’ Simple Search and Discovery Protocol (SSDP) Service elevation of privilege. The vulnerability is local, with low privileges required and no user interaction, and yields a high impact on confidentiality, integrity, and availability. Microsoft lists an official f...
CVE-2026-32075
CVE-2026-32075 affects Windows that uses the UPnP Device Host; vulnerability is Elevation of Privilege via a local vector. Requires LOW privileges and no user interaction, with high impact on confidentiality, integrity, and availability. Exploit code maturity is UNPROVEN; remediation is an offici...
CVE-2026-27921 Windows TDI Translation Driver (tdx.sys) Elevation of Privilege Vulnerability
...
CVE-2026-27921 Windows TDI Translation Driver (tdx.sys) Elevation of Privilege Vulnerability
...
CVE-2026-27921
CVE-2026-27921 describes a race condition in the Windows TDI Translation Driver (tdx.sys) that can allow an authenticated attacker to elevate to SYSTEM privileges. The description in multiple sources confirms a concurrency flaw involving a shared resource, aligned with the CVE entry’s root cause ...
CVE-2026-27918
CVE-2026-27918 describes a race condition in the Windows Shell where concurrent execution over a shared resource allows an authorized local attacker to elevate privileges. The Red Hat and NC SC advisories reiterate the same description, confirming Windows Shell as the affected component and local...
CVE-2026-27918 Windows Shell Elevation of Privilege Vulnerability
...
CVE-2026-27915 Windows UPnP Device Host Elevation of Privilege Vulnerability
...
CVE-2026-26174 Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability
...
CVE-2026-26166 Windows Shell Elevation of Privilege Vulnerability
...
CVE-2026-26162
CVE-2026-26162 is a Windows OLE vulnerability described as a type-confusion in resource access that enables a locally authenticated attacker to elevate privileges. The Red Hat and NVD/NCSC entries confirm the same issue, with Microsoft’s MSRC entry associating it to Windows OLE and listing Window...
CVE-2026-26165
CVE-2026-26165 is a Windows Shell elevation-of-privilege vulnerability. The record shows local access required (attack vector: LOCAL), with low privileges required and no user interaction, and maintains the same security scope. The impact is high on confidentiality, integrity, and availability, w...