37296 matches found
CVE-2026-32069 Windows Projected File System Elevation of Privilege Vulnerability
...
CVE-2026-32068
CVE-2026-32068 impacts Windows SSDP service, enabling local elevation of privilege via the Simple Search and Discovery Protocol. The issue is local, requires low privileges, and does not require user interaction. CVSS v3.1 base score 7.0 (HIGH) with HIGH impact on confidentiality, integrity, and ...
CVE-2026-32068 Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability
...
CVE-2026-32068 Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability
...
CVE-2026-27923 Desktop Window Manager Elevation of Privilege Vulnerability
...
CVE-2026-27923 Desktop Window Manager Elevation of Privilege Vulnerability
...
CVE-2026-27923
CVE-2026-27923 is a Windows Desktop Window Manager elevation-of-privilege vulnerability (CVSS 3.1 base 7.8, HIGH). Local attacker with low privileges and no user interaction could exploit in an UNPROVEN-exploit state to achieve high confidentiality, integrity, and availability impact. The entry l...
CVE-2026-27922
CVE-2026-27922 is a vulnerability described as a use-after-free in the Windows Ancillary Function Driver for WinSock that can allow an authorized local attacker to elevate privileges. The Red Hat/NVD entries confirm the same description. The connected documents do not enumerate affected product v...
CVE-2026-27922 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
...
CVE-2026-27920
CVE-2026-27920 is a Windows vulnerability in the UPnP Device Host that enables a local privilege escalation . The entry indicates a local attack vector with low required privileges and no user interaction, leading to high impact on confidentiality, integrity, and availability. The CVSS 3.1 base s...
CVE-2026-27920 Windows UPnP Device Host Elevation of Privilege Vulnerability
...
CVE-2026-27920 Windows UPnP Device Host Elevation of Privilege Vulnerability
...
CVE-2026-27916
CVE-2026-27916 describes a use-after-free in Windows Universal Plug and Play (UPnP) Device Host that could allow an authorized, local attacker to elevate privileges. The connected documents confirm this CVE is associated with the UPnP Device Host and that Microsoft has published updates to fix vu...
CVE-2026-27914
CVE-2026-27914 affects the Microsoft Management Console (MMC). It is an Elevation of Privilege vulnerability where a local attacker with low privileges and no user interaction can potentially gain high impact on confidentiality, integrity, and availability due to the underlying root cause describ...
CVE-2026-27914 Microsoft Management Console Elevation of Privilege Vulnerability
...
CVE-2026-27916 Windows UPnP Device Host Elevation of Privilege Vulnerability
...
CVE-2026-27916 Windows UPnP Device Host Elevation of Privilege Vulnerability
...
CVE-2026-27914 Microsoft Management Console Elevation of Privilege Vulnerability
...
CVE-2026-27912
CVE-2026-27912 is a Windows Kerberos elevation-of-privileges vulnerability described in connected sources as an improper authorization issue that allows an authorized attacker to obtain elevated entitlements over an adjacent network. The vulnerability is categorized under Windows Kerberos with an...