CVE-2026-24294

CVE-2026-24294 affects Windows SMB Server. The core issue is improper authentication in the SMB component, enabling an authorized local attacker to elevate privileges. The CVE is rated high (CVSS 3.1 base 7.8) with local attack vector, low complexity, and no user interaction required, and the imp...

CVE-2026-24294 Windows SMB Server Elevation of Privilege Vulnerability

...

CVE-2026-24294 Windows SMB Server Elevation of Privilege Vulnerability

...

CVE-2026-24293 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

...

CVE-2026-24293 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

...

CVE-2026-24293

CVE-2026-24293 describes a null pointer dereference in the Windows Ancillary Function Driver for WinSock that enables an authorized, local attacker to elevate privileges. The vulnerability is identified in Microsoft’s advisory ecosystem and is tracked across multiple feeds (NVD/NCSC/ENISA EUVD) w...

CVE-2026-24292 Windows Connected Devices Platform Service Elevation of Privilege Vulnerability

...

CVE-2026-24292 Windows Connected Devices Platform Service Elevation of Privilege Vulnerability

...

CVE-2026-24292

CVE-2026-24292 is a Windows vulnerability in the Connected Devices Platform Service (Cdpsvc) described as a use-after-free that enables local privilege escalation for an authenticated, non-user interaction scenario. Connected documents corroborate the issue with Cdpsvc and list the CVE-2026-24292...

CVE-2026-24291

Incorrect permission assignment for critical resource in Windows Accessibility Infrastructure ATBroker.exe allows an authorized attacker to elevate privileges locally...

CVE-2026-24291 Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability

...

CVE-2026-24291 Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability

...

CVE-2026-24291

CVE-2026-24291 affects Windows Accessibility Infrastructure (ATBroker.exe). It is an Elevation of Privilege vulnerability with local attack vector, require low privileges and no user interaction, and it impacts confidentiality, integrity, and availability. Exploit code maturity is UNPROVEN; remed...

CVE-2026-24290 Windows Projected File System Elevation of Privilege Vulnerability

...

CVE-2026-24290

CVE-2026-24290 concerns the Windows Projected File System and is an Elevation of Privilege vulnerability. The CVE shows a LOCAL attack vector with LOW privileges required and NONE user interaction, with impacts on confidentiality, integrity, and availability rated as High. The metric set indicate...

CVE-2026-24289 Windows Kernel Elevation of Privilege Vulnerability

...

CVE-2026-24290 Windows Projected File System Elevation of Privilege Vulnerability

...

CVE-2026-24289 Windows Kernel Elevation of Privilege Vulnerability

...

CVE-2026-24289

Technical details about CVE-2026-24289 are not provided in the documents; no affected products, vulnerable components, impact, or remediation details are listed here. Monitor for updates.

CVE-2026-24287

CVE-2026-24287 is a Windows kernel elevation-of-privilege vulnerability with a local attack vector. The CVSS 3.1 metrics indicate high impact to confidentiality, integrity, and availability, requiring low privileges and no user interaction, with exploit code maturity marked as UNPROVEN. The issue...