37416 matches found
CVE-2026-21253 Mailslot File System Elevation of Privilege Vulnerability
...
CVE-2026-21253 Mailslot File System Elevation of Privilege Vulnerability
...
CVE-2026-21257 GitHub Copilot and Visual Studio Elevation of Privilege Vulnerability
...
CVE-2026-21257 GitHub Copilot and Visual Studio Elevation of Privilege Vulnerability
...
CVE-2026-21257
CVE-2026-21257 affects GitHub Copilot and Visual Studio. It involves improper neutralization of special elements used in a command (command injection), enabling an authorized attacker to elevate privileges over a network. Root cause: inadequate input handling in command construction. Impact per C...
CVE-2026-21508 Windows Storage Elevation of Privilege Vulnerability
...
CVE-2026-21508
CVE-2026-21508 concerns improper authentication in Windows Storage, enabling a locally authenticated attacker to elevate privileges. The CVSS v3.1 base score is 7.0 (HIGH), with LOCAL attack vector, HIGH impact on confidentiality, integrity, and availability, and a HIGH attack complexity requirin...
CVE-2026-21508 Windows Storage Elevation of Privilege Vulnerability
...
CVE-2026-21522 Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability
...
CVE-2026-21522
Improper neutralization of special elements used in a command 'command injection' in Azure Compute Gallery allows an authorized attacker to elevate privileges locally...
CVE-2026-21522 Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability
...
CVE-2026-21522
Azure Compute Gallery is affected by CVE-2026-21522 due to improper neutralization of special elements used in a command, enabling an authorized attacker to achieve local privilege escalation. The issue concerns command injection in the Azure Compute Gallery workflow, with a CVSS v3.1 base score ...
CVE-2026-21533 Windows Remote Desktop Services Elevation of Privilege Vulnerability
...
CVE-2026-21533 Windows Remote Desktop Services Elevation of Privilege Vulnerability
...
CVE-2026-21533
CVE-2026-21533 affects Windows Remote Desktop Services (RDS) and is caused by improper privilege management (CWE-269), allowing a local authenticated attacker with low privileges to elevate to SYSTEM. Multiple connected sources corroborate that the issue is a local EoP in RDS with CVSSv3 7.8 (HIG...
CVE-2026-21236
CVE-2026-21236 describes a heap-based buffer overflow in the Windows Ancillary Function Driver for WinSock (AFD) that enables an authenticated local attacker to obtain elevated privileges. The vulnerability is categorized as a local, privilege-escalation issue, with the affected component being t...
CVE-2026-21236 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
...
CVE-2026-21234 Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
...
CVE-2026-21234
CVE-2026-21234 concerns Windows Connected Devices Platform Service where a race condition due to improper synchronization enables local privilege escalation for an authorized attacker. The vulnerability affects the platform service's concurrent execution via a shared resource; impact includes con...