37296 matches found
CVE-2026-24295 Windows Device Association Service Elevation of Privilege Vulnerability
...
CVE-2026-24295
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Device Association Service allows an authorized attacker to elevate privileges locally...
CVE-2026-24294
CVE-2026-24294 affects Windows SMB Server. The core issue is improper authentication in the SMB component, enabling an authorized local attacker to elevate privileges. The CVE is rated high (CVSS 3.1 base 7.8) with local attack vector, low complexity, and no user interaction required, and the imp...
CVE-2026-24294 Windows SMB Server Elevation of Privilege Vulnerability
...
CVE-2026-24294 Windows SMB Server Elevation of Privilege Vulnerability
...
CVE-2026-24293 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
...
CVE-2026-24293 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
...
CVE-2026-24293
CVE-2026-24293 describes a null pointer dereference in the Windows Ancillary Function Driver for WinSock that enables an authorized, local attacker to elevate privileges. The vulnerability is identified in Microsoft’s advisory ecosystem and is tracked across multiple feeds (NVD/NCSC/ENISA EUVD) w...
CVE-2026-24291 Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability
...
CVE-2026-24292 Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
...
CVE-2026-24292 Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
...
CVE-2026-24291 Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability
...
CVE-2026-24291
Incorrect permission assignment for critical resource in Windows Accessibility Infrastructure ATBroker.exe allows an authorized attacker to elevate privileges locally...
CVE-2026-24292
CVE-2026-24292 is a Windows vulnerability in the Connected Devices Platform Service (Cdpsvc) described as a use-after-free that enables local privilege escalation for an authenticated, non-user interaction scenario. Connected documents corroborate the issue with Cdpsvc and list the CVE-2026-24292...
CVE-2026-24291
CVE-2026-24291 affects Windows Accessibility Infrastructure (ATBroker.exe). It is an Elevation of Privilege vulnerability with local attack vector, require low privileges and no user interaction, and it impacts confidentiality, integrity, and availability. Exploit code maturity is UNPROVEN; remed...
CVE-2026-24290 Windows Projected File System Elevation of Privilege Vulnerability
...
CVE-2026-24290
CVE-2026-24290 concerns the Windows Projected File System and is an Elevation of Privilege vulnerability. The CVE shows a LOCAL attack vector with LOW privileges required and NONE user interaction, with impacts on confidentiality, integrity, and availability rated as High. The metric set indicate...
CVE-2026-24289 Windows Kernel Elevation of Privilege Vulnerability
...