37427 matches found
CVE-2026-20849
CVE-2026-20849 is a Windows Kerberos elevation of privilege vulnerability caused by reliance on untrusted inputs in a security decision. The description indicates an authorized attacker could elevate privileges over a network. The provided documents give a CVSS v3.1 base score of 7.5 (Network, Hi...
CVE-2026-20843
CVE-2026-20843 describes an Elevation of Privilege in Windows Routing and Remote Access Service (RRAS) due to improper access control. The CVE is confirmed by multiple feeds; affected is RRAS on Windows. The reported impact is local privilege escalation for an authorized attacker with low privile...
CVE-2026-20843 Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability
...
CVE-2026-20843
Improper access control in Windows Routing and Remote Access Service RRAS allows an authorized attacker to elevate privileges locally...
CVE-2026-20843 Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability
...
CVE-2026-21224 Azure Connected Machine Agent Elevation of Privilege Vulnerability
...
CVE-2026-21224 Azure Connected Machine Agent Elevation of Privilege Vulnerability
...
CVE-2026-21224
CVE-2026-21224 is a stack-based buffer overflow in the Microsoft Azure Connected Machine Agent that permits an authorized local attacker to elevate privileges on the host. The vulnerability is tied to the Azure Connected Machine Agent, with a CVSS v3.1 base score of 7.8 (HIGH) and LOCAL, LOW-Comp...
CVE-2026-20830 Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability
...
CVE-2026-20830
Concurrent execution using shared resource with improper synchronization 'race condition' in Capability Access Management Service camsvc allows an authorized attacker to elevate privileges locally...
CVE-2026-20830
CVE-2026-20830 describes a race condition in the Capability Access Management Service (camsvc) that allows an authorized local attacker to elevate privileges. The issue is tied to concurrent execution on a shared resource and improper synchronization. Public exploit activity is noted in linked ad...
CVE-2026-20830 Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability
...
CVE-2026-21221 Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability
...
EUVD-2026-2109
Concurrent execution using shared resource with improper synchronization 'race condition' in Capability Access Management Service camsvc allows an authorized attacker to elevate privileges locally...
CVE-2026-21221 Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability
...
CVE-2026-20943 Microsoft Office Click-To-Run Remote Code Execution Vulnerability
...
CVE-2026-20943 Microsoft Office Click-To-Run Remote Code Execution Vulnerability
...
CVE-2026-20943
CVE-2026-20943 is a Microsoft Office Click-To-Run remote code execution issue caused by an untrusted search path that could allow local code execution. Connected sources confirm affected Office variants and that Microsoft released security updates in January 2026 (e.g., KB5002828/KB5002822 for di...