37232 matches found
CVE-2026-70345 Windows Installer Elevation of Privilege Vulnerability
...
CVE-2026-70346 Windows Installer Elevation of Privilege Vulnerability
...
CVE-2026-70346
CVE-2026-70346 is a Windows Installer vulnerability: a stack-based buffer overflow could allow an authorized, local attacker to elevate privileges. The description indicates local execution with high impact, but the documents do not provide exploit details or a remediation/patch. Exploitation sta...
CVE-2026-70344 Windows Installer Elevation of Privilege Vulnerability
...
CVE-2026-70344
CVE-2026-70344 originates from a stack-based buffer overflow in Windows Installer. The vulnerability could allow an authorized attacker to perform local privilege escalation on affected systems. The CVSS 3.1 vector (L/L/P:L/U:N/S:U/C:H/I:H/A:H) indicates local attack vector, low attack complexity...
CVE-2026-70344 Windows Installer Elevation of Privilege Vulnerability
...
CVE-2026-66804 Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability
...
CVE-2026-66804 Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability
...
CVE-2026-66804
Technical details about CVE-2026-66804 are not publicly available in the provided documents. Monitor for updates from Microsoft and NVD for affected products, vulnerable component, impact, and remediation.
CVE-2026-65783
CVE-2026-65783 is a use-after-free vulnerability in Windows Autopilot that allows an authorized attacker to perform local privilege escalation. The available documents confirm the affected component (Windows Autopilot) and the underlying issue (use-after-free) with a local attacker requiring low ...
CVE-2026-65783 Windows Autopilot Elevation of Privilege Vulnerability
...
CVE-2026-65783 Windows Autopilot Elevation of Privilege Vulnerability
...
CVE-2026-70340 Azure CycleCloud Elevation of Privilege Vulnerability
...
CVE-2026-70340
Azure CycleCloud CVE-2026-70340: AMissing authorization vulnerability could allow an authenticated attacker to elevate privileges over a network. The issue affects Azure CycleCloud and is rated HIGH (CVSS 3.1: AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H). The root cause is insufficient access control, en...
CVE-2026-57104 Azure Storage Explorer Elevation of Privilege Vulnerability
...
CVE-2026-70340 Azure CycleCloud Elevation of Privilege Vulnerability
...
CVE-2026-57104
CVE-2026-57104 is a cross-site scripting (XSS) flaw in Azure Storage Explorer where improper input neutralization during web page generation enables an unauthenticated remote attacker to elevate privileges over a network. Microsoft's MSRC update guide lists a fix; CISA's SSVC assessment shows no ...
CVE-2026-57104 Azure Storage Explorer Elevation of Privilege Vulnerability
...