37416 matches found
CVE-2026-21238 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
...
CVE-2026-21239 Windows Kernel Elevation of Privilege Vulnerability
...
CVE-2026-21241
The CVE-2026-21241 entry identifies a use-after-free in the Windows Ancillary Function Driver for WinSock that enables a locally authenticated attacker to achieve privilege escalation . According to the description, exploitation is local with high impact to confidentiality, integrity, and availab...
CVE-2026-21241 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
...
CVE-2026-21241 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
...
CVE-2026-21239
CVE-2026-21239 describes a heap-based buffer overflow in the Windows Kernel. An authorized attacker can achieve local privilege escalation. The vulnerability is rated CVSS v3.1 base score 7.8 (HIGH) with LOCAL, low complexity, and no user interaction required beyond initial access, and it has hig...
CVE-2026-21239 Windows Kernel Elevation of Privilege Vulnerability
...
CVE-2026-21240
CVE-2026-21240 describes a local, authenticated TOCTOU race in Windows HTTP.sys that can allow privilege escalation. Affected component: Windows HTTP.sys. Root cause: time-of-check/time-of-use race condition. Impact: high (local escalation of privileges, potential confidentiality, integrity, and ...
CVE-2026-21240 Windows HTTP.sys Elevation of Privilege Vulnerability
...
CVE-2026-21240 Windows HTTP.sys Elevation of Privilege Vulnerability
...
CVE-2026-21245 Windows Kernel Elevation of Privilege Vulnerability
...
CVE-2026-21245 Windows Kernel Elevation of Privilege Vulnerability
...
CVE-2026-21245
CVE-2026-21245 describes a heap-based buffer overflow in the Windows Kernel that enables an authorized local attacker to escalate privileges. The CVSS v3.1 base score is 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, and LOW privileges required, and no user interaction. Impact is HIG...
CVE-2026-21250
CVE-2026-21250 : Untrusted pointer dereference in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. The CVSS 3.1 vector (Local, Low attack complexity, Low privileges required, No user interaction) yields a base score of 7.8 (HIGH). Documented impact is local privilege ...
CVE-2026-21250 Windows HTTP.sys Elevation of Privilege Vulnerability
...
CVE-2026-21250 Windows HTTP.sys Elevation of Privilege Vulnerability
...
CVE-2026-21251 Cluster Client Failover (CCF) Elevation of Privilege Vulnerability
...
CVE-2026-21251 Cluster Client Failover (CCF) Elevation of Privilege Vulnerability
...
CVE-2026-21251
CVE-2026-21251 describes a use-after-free in the Windows Cluster Client Failover, enabling a locally authenticated attacker to achieve privilege elevation. The CVSS 3.1 base score is 7.8 (HIGH) with local attack vector, low complexity, and low privileges required; confidentiality, integrity, and ...
CVE-2026-21253
CVE-2026-21253 is a Windows vulnerability in the Mailslot File System described as a use-after-free issue that can enable local privilege escalation. The CVE’s CVSS 3.1 score is 7.0 (HIGH) with a local attack vector, high attack complexity, and requires low privileges and no user interaction. The...