CVE-2026-50351

Improper access control in Windows Audio Compression Manager ACM allows an authorized attacker to elevate privileges locally...

CVE-2026-49805

Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-49798

Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges locally...

CVE-2026-49790

Windows Universal Disk Format File System Driver UDFS Elevation of Privilege Vulnerability...

CVE-2026-49784

Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Windows App Store allows an authorized attacker to elevate privileges locally...

CVE-2026-49168

Integer overflow or wraparound in Windows Storage Spaces Direct allows an unauthorized attacker to elevate privileges with a physical attack...

CVE-2026-48572

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows App Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-44800

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

CVE-2026-42982

Improper validation of consistency within input in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...

CVE-2026-58634 Desktop Window Manager Elevation of Privilege Vulnerability

...

CVE-2026-58637 Windows Client-Side Caching Elevation of Privilege Vulnerability

...

CVE-2026-58634

CVE-2026-58634 is a Windows vulnerability in the Desktop Window Manager (DWM) described as a use-after-free that enables an authorized attacker to achieve local Privilege Escalation . The CVSS 3.1 score is high (7.8) with a LOCAL attack vector, LOW attack complexity, and no user interaction requi...

CVE-2026-58633

CVE-2026-58633 is a Desktop Window Manager (DWM) use-after-free vulnerability that enables a local attacker with low privileges to elevate privileges. Public sources collectively identify: impact as local privilege escalation; affected component is DWM; root cause described as use-after-free. Mic...

CVE-2026-58637

CVE-2026-58637 affects Windows Client-Side Caching (CSC) Service. Description and sources confirm a use-after-free vulnerability that enables an authorized local attacker to elevate privileges. Metrics indicate local attack vector, low privileges required, and no user interaction, with high confi...

CVE-2026-58637 Windows Client-Side Caching Elevation of Privilege Vulnerability

...

CVE-2026-58634 Desktop Window Manager Elevation of Privilege Vulnerability

...

CVE-2026-58633 Desktop Window Manager Elevation of Privilege Vulnerability

...

CVE-2026-58633 Desktop Window Manager Elevation of Privilege Vulnerability

...

CVE-2026-58632 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

...

CVE-2026-58632

CVE-2026-58632 is a Windows Win32K use-after-free vulnerability in the Win32 Kernel Subsystem that could allow a locally authenticated attacker to escalate privileges. The CVE is described as a local elevation of privilege (no remote code execution). Public sources in the connected set consistent...