37296 matches found
CVE-2026-32073
CVE-2026-32073 refers to a Local Privilege Escalation in the Windows Ancillary Function Driver for WinSock. The advisory notes a local attack vector with high impact (C:H/I:H/A:H) and a low-privilege, no-user-interaction requirement, under CVSS 3.1: base score 7.0, attack vector Local, attack com...
CVE-2026-32073 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
...
CVE-2026-32073 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
...
CVE-2026-27929 Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability
...
CVE-2026-27929
CVE-2026-27929 is a Time-of-check Time-of-use (toctou) race condition in Windows LUAFV (LUA File Virtualization Filter Driver) that enables a locally authenticated attacker to elevate privileges. Red Hat and NCSC advisories confirm the Windows LUAFV vulnerability and its local privilege-escalatio...
CVE-2026-27929 Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability
...
CVE-2026-27926 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
...
CVE-2026-27927
CVE-2026-27927 is a Windows Projected File System vulnerability described as a race condition due to concurrent execution on a shared resource, enabling an authorized local attacker to elevate privileges. Connected sources (Microsoft MSRC, Red Hat, Netherlands NCSC) corroborate the Windows Projec...
CVE-2026-27927 Windows Projected File System Elevation of Privilege Vulnerability
...
CVE-2026-27926 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
...
CVE-2026-27927 Windows Projected File System Elevation of Privilege Vulnerability
...
CVE-2026-27926
CVE-2026-27926 is a race-condition elevation-of-privilege vulnerability in the Windows Cloud Files Mini Filter Driver. The issue allows an authorized, locally positioned attacker to escalate privileges via concurrent access to a shared resource. Public details confirm impact as local, with the CV...
CVE-2026-27924 Desktop Window Manager Elevation of Privilege Vulnerability
...
CVE-2026-27924 Desktop Window Manager Elevation of Privilege Vulnerability
...
CVE-2026-27924
CVE-2026-27924 is a use-after-free vulnerability in the Desktop Window Manager that allows a locally authenticated attacker to escalate privileges. The issue is tied to Desktop Window Manager (dwm) components on Windows and is described as an elevation of privilege when memory is corrupted after ...
CVE-2026-27919 Windows UPnP Device Host Elevation of Privilege Vulnerability
...
CVE-2026-27921 Windows TDI Translation Driver (tdx.sys) Elevation of Privilege Vulnerability
...
CVE-2026-27919
CVE-2026-27919 is a Windows UPnP Device Host elevation-of-privilege vulnerability. It is a local attack with low privileges required and no user interaction, carrying a CVSS v3.1 base score of 7.8 (High). The impact spans confidentiality, integrity, and availability (all High). The exploitation m...