CVE-2026-50367 Windows Sensor Data Service Elevation of Privilege Vulnerability

...

CVE-2026-50367

CVE-2026-50367 describes an elevation of privilege in the Windows Sensor Data Service due to a logic flaw: incorrect access of an indexable resource (a range error). An authenticated local attacker could exploit this to escalate privileges on the affected system. The vulnerability’s CVSS 3.1 vect...

CVE-2026-50374

CVE-2026-50374 concerns the Windows Cloud Files Mini Filter Driver. The connected sources confirm a use-after-free condition in this driver that can be exploited by an authorized attacker to gain elevated privileges, with the exploitation described as requiring a physical attack. The impact is el...

CVE-2026-50374 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

...

CVE-2026-50374 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

...

CVE-2026-50421 Windows Connected User Experiences and Telemetry Elevation of Privilege Vulnerability

...

CVE-2026-50422 Windows NTFS Elevation of Privilege Vulnerability

...

CVE-2026-50422

CVE-2026-50422 is a Windows NTFS vulnerability described as an out-of-bounds read that could let an authenticated, local attacker gain elevated privileges. Affected component: Windows NTFS (NTFS subsystem). Root cause: out-of-bounds read in NTFS code path. Impact: local privilege escalation and p...

CVE-2026-50421

CVE-2026-50421 is a Windows vulnerability in Windows Connected User Experiences and Telemetry described as a local privilege escalation via a resource access type confusion. The CVE entry is supported by multiple records: NVD/NCSC/CIRCL indicate the issue and Microsoft has released updates to add...

CVE-2026-50422 Windows NTFS Elevation of Privilege Vulnerability

...

CVE-2026-50421 Windows Connected User Experiences and Telemetry Elevation of Privilege Vulnerability

...

CVE-2026-50427

CVE-2026-50427 affects Content Delivery Manager. Description: use-after-free vulnerability that allows an authorized attacker to elevate privileges locally. CVSS v3.1: 7.8 (Local, Low user interaction, Privilege Escalation, high impact on confidentiality, integrity, availability). Connected sourc...

CVE-2026-50413

CVE-2026-50413 is a Windows Runtime elevation-of-privilege vulnerability caused by a use-after-free condition. The NVD/NCSC entries describe an authorized local attacker exploiting a use-after-free in Windows Runtime to gain elevated privileges. The CVSSv3.1 base score is 8.8 (HIGH) with LOCAL at...

CVE-2026-50413 Windows Runtime Elevation of Privilege Vulnerability

...

CVE-2026-50427 Content Delivery Manager Elevation of Privilege Vulnerability

...

CVE-2026-50413 Windows Runtime Elevation of Privilege Vulnerability

...

CVE-2026-50427 Content Delivery Manager Elevation of Privilege Vulnerability

...

CVE-2026-50385 Windows Runtime Elevation of Privilege Vulnerability

...

CVE-2026-50385 Windows Runtime Elevation of Privilege Vulnerability

...

CVE-2026-50385

CVE-2026-50385 affects Windows Runtime. The issue is a race-condition in a shared resource during concurrent execution, enabling a locally authenticated attacker to elevate privileges. Public details in connected sources confirm the vulnerability, its local privilege-escalation impact, and the Wi...