45807 matches found
CVE-2026-72963: Use After Free
Use after free in Windows Modern Execution Server allows an authorized attacker to elevate privileges locally...
PT-2026-88051
Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network...
CVE-2026-69277: Stack-based Buffer Overflow
Stack-based buffer overflow in Microsoft Local Security Authority Server lsasrv allows an authorized attacker to elevate privileges locally...
CVE-2026-69516: Use After Free
Use after free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...
CVE-2026-83990: Stack-based Buffer Overflow
Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...
CVE-2026-69440: Time-of-check Time-of-use (TOCTOU) Race Condition
Time-of-check time-of-use toctou race condition in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...
CVE-2026-68878: Stack-based Buffer Overflow
Stack-based buffer overflow in Windows Fast FAT Driver allows an authorized attacker to elevate privileges over a network...
CVE-2026-73024: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-69488: Use After Free
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69602: Use After Free
Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges over a network...
CVE-2026-68876: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges over a network...
CVE-2026-69305: Use After Free
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network...
CVE-2026-67370: Improper Neutralization of Special Elements used in an SQL Command
Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-68837: Use After Free
Use after free in Windows File History Service allows an authorized attacker to elevate privileges locally...
PT-2026-87320
Name of the Vulnerable Software and Affected Versions Microsoft Standard XPS affected versions not specified Description A heap-based buffer overflow occurs in Microsoft Standard XPS, which allows an authorized attacker to elevate privileges over a network. A heap-based buffer overflow is a memor...
CVE-2026-69563: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69299: Use After Free
Use after free in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally...
CVE-2026-69617: Out-of-bounds Read
Out-of-bounds read in Windows Resilient File System ReFS allows an authorized attacker to elevate privileges locally...