37417 matches found
CVE-2026-21234 Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
...
CVE-2026-21235 Windows Graphics Component Elevation of Privilege Vulnerability
...
CVE-2026-21235 Windows Graphics Component Elevation of Privilege Vulnerability
...
CVE-2026-21235
CVE-2026-21235 describes a use-after-free vulnerability in Microsoft Graphics Component that can allow an authorized attacker to elevate privileges locally. Reported CVSS v3.1Base score 7.3 (HIGH) with LOCAL attack vector, low attack complexity, requiring user interaction and low privileges. Impa...
CVE-2026-21242 Windows Subsystem for Linux Elevation of Privilege Vulnerability
...
CVE-2026-21242 Windows Subsystem for Linux Elevation of Privilege Vulnerability
...
CVE-2026-21246
CVE-2026-21246 is a heap-based buffer overflow in the Microsoft Graphics Component that enables local privilege escalation for an authorized attacker. The CVSS 3.1 vector (LOCAL, LOW complexity, LOW privileges, NONE user interaction) yields a base score of 7.8 (HIGH impact on confidentiality, int...
CVE-2026-21246 Windows Graphics Component Elevation of Privilege Vulnerability
...
CVE-2026-21246 Windows Graphics Component Elevation of Privilege Vulnerability
...
CVE-2026-21246
Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...
CVE-2026-21259 Microsoft Excel Elevation of Privilege Vulnerability
...
CVE-2026-21259 Microsoft Excel Elevation of Privilege Vulnerability
...
CVE-2026-21259
CVE-2026-21259 is a heap-based buffer overflow in Microsoft Excel (Office) that enables local privilege escalation. Multiple sources (MSRC advisory, CNVD, CIRCL sightings, KB entries) confirm Excel as the affected product and indicate that Microsoft released February 2026 security updates (e.g., ...
CVE-2026-21517 Windows App for Mac Installer Elevation of Privilege Vulnerability
...
CVE-2026-21517
CVE-2026-21517 affectancy: Windows App for Mac is impacted by an improper link resolution before file access ("link following"). The underlying issue allows an authorized local attacker to escalate privileges. The CVSS 3.1 base metrics indicate Local attack vector, high impact on confidentiality,...
CVE-2026-21517
Improper link resolution before file access 'link following' in Windows App for Mac allows an authorized attacker to elevate privileges locally...
CVE-2026-21517 Windows App for Mac Installer Elevation of Privilege Vulnerability
...
CVE-2026-21519 Desktop Window Manager Elevation of Privilege Vulnerability
...
CVE-2026-21519
CVE-2026-21519 is a local elevation-of-privilege flaw in Windows Desktop Window Manager caused by type confusion. An authenticated, low-privilege attacker can overwhelm DWM locally to gain SYSTEM rights, with no user interaction required. It has been identified as exploited in the wild by multipl...