37414 matches found
GHSA-436V-JG82-P533 Azure AI Language Authoring Elevation of Privilege Vulnerability can Lead to RCE
Deserialization of untrusted data in the Azure AI Language Conversations Authoring client library for Python allows an unauthorized attacker to execute code over a network...
Azure AI Language Authoring Elevation of Privilege Vulnerability can Lead to RCE
Deserialization of untrusted data in the Azure AI Language Conversations Authoring client library for Python allows an unauthorized attacker to execute code over a network...
CVE-2026-21259
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to elevate privileges locally...
CVE-2026-21241
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...
CVE-2026-21234
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally...
CVE-2026-21231
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-21231 Windows Kernel Elevation of Privilege Vulnerability
...
CVE-2026-21231 Windows Kernel Elevation of Privilege Vulnerability
...
CVE-2026-21231
CVE-2026-21231 describes a race condition in the Windows Kernel involving concurrent execution on a shared resource with improper synchronization, enabling local privilege escalation for an authorized attacker. The vulnerability impact is: local attack vector, requiring low privileges, no user in...
CVE-2026-21232
CVE-2026-21232 describes an untrusted pointer dereference in Windows HTTP.sys that enables local privilege escalation for an authorized user. Affected: Windows HTTP.sys component; root cause is a dereference of an untrusted pointer leading to elevation of privileges. Impact is high across confide...
CVE-2026-21232 Windows HTTP.sys Elevation of Privilege Vulnerability
...
CVE-2026-21237 Windows Subsystem for Linux Elevation of Privilege Vulnerability
...
CVE-2026-21232 Windows HTTP.sys Elevation of Privilege Vulnerability
...
CVE-2026-21237
Technical details of CVE-2026-21237 are not publicly provided in the supplied documents; no affected products, vulnerable components, or fixes are described here. Monitor for updates from official sources.
CVE-2026-21237 Windows Subsystem for Linux Elevation of Privilege Vulnerability
...
CVE-2026-21238 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
...
CVE-2026-21238
Improper access control in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...
CVE-2026-21238
CVE-2026-21238 concerns an improper access control vulnerability in Windows Ancillary Function Driver for WinSock that enables local privilege escalation by an authorized attacker. The CVSSv3.1 vector indicates a high-severity impact (C/H, I/H, A/H) with local attack, low complexity, and a low pr...