37296 matches found
CVE-2026-26128
CVE-2026-26128 concerns an elevation-of-privilege flaw in Windows SMB Server caused by improper authentication. The vulnerability affects Windows SMB Server and is described in connected sources as allowing an authorized local attacker to obtain higher privileges. Evidence from the connected docu...
CVE-2026-26128 Windows SMB Server Elevation of Privilege Vulnerability
...
CVE-2026-26115 SQL Server Elevation of Privilege Vulnerability
...
CVE-2026-26115 SQL Server Elevation of Privilege Vulnerability
...
CVE-2026-26115
CVE-2026-26115: Microsoft SQL Server Elevation of Privilege due to improper validation of input. Affects Microsoft SQL Server; vulnerability is exploitable over a network by an authorized attacker with LOW privileges; CVSS v3.1 base score 8.8 (High). Connected sources also reference related bugs ...
CVE-2026-26115
Improper validation of specified type of input in SQL Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-26116
CVE-2026-26116 is a SQL Server Elevation of Privilege vulnerability due to improper neutralization of special elements in SQL commands. Affected product: Microsoft SQL Server (SQL Server 2025 GDR) with potential network‑based exploitation and high impact (CVE-2026-26116). The issue is mitigated b...
CVE-2026-26116 SQL Server Elevation of Privilege Vulnerability
...
CVE-2026-26116 SQL Server Elevation of Privilege Vulnerability
...
CVE-2026-20967 System Center Operations Manager (SCOM) Elevation of Privilege Vulnerability
...
CVE-2026-20967
CVE-2026-20967 affects Microsoft System Center Operations Manager. The issue is due to improper input validation, enabling an authorized attacker to elevate privileges over the network. The CVSSv3.1 vector indicates a network-based, low-attack-complexity with low privileges required and high impa...
CVE-2026-20967 System Center Operations Manager (SCOM) Elevation of Privilege Vulnerability
...
CVE-2026-25189
The CVE-2026-25189 entry concerns a Use-after-Free in Windows DWM Core Library that allows an authorized attacker to locally elevate privileges. Affected component is Windows DWM Core Library; root cause is a use-after-free condition leading to privilege escalation. Microsoft and related advisori...
CVE-2026-25189 Windows DWM Core Library Elevation of Privilege Vulnerability
...
CVE-2026-25189 Windows DWM Core Library Elevation of Privilege Vulnerability
...
CVE-2026-25189
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
CVE-2026-25188 Windows Telephony Service Elevation of Privilege Vulnerability
...
CVE-2026-25188 Windows Telephony Service Elevation of Privilege Vulnerability
...
CVE-2026-25188
CVE-2026-25188 is a Windows Telephony Service heap-based buffer overflow that allows an attacker on an adjacent network to elevate privileges. The CVE entry cites an adjacent-network attack vector, low exploit complexity, and no user interaction, with high impact on confidentiality, integrity, an...