37155 matches found
CVE-2026-48572
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows App Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-44800
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Push Notifications allows an authorized attacker to elevate privileges locally...
CVE-2026-42982
Improper validation of consistency within input in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...
CVE-2026-58634 Desktop Window Manager Elevation of Privilege Vulnerability
...
CVE-2026-58633
CVE-2026-58633 is a Desktop Window Manager (DWM) use-after-free vulnerability that enables a local attacker with low privileges to elevate privileges. Public sources collectively identify: impact as local privilege escalation; affected component is DWM; root cause described as use-after-free. Mic...
CVE-2026-58637 Windows Client-Side Caching Elevation of Privilege Vulnerability
...
CVE-2026-58634
CVE-2026-58634 is a Windows vulnerability in the Desktop Window Manager (DWM) described as a use-after-free that enables an authorized attacker to achieve local Privilege Escalation . The CVSS 3.1 score is high (7.8) with a LOCAL attack vector, LOW attack complexity, and no user interaction requi...
CVE-2026-58637 Windows Client-Side Caching Elevation of Privilege Vulnerability
...
CVE-2026-58634 Desktop Window Manager Elevation of Privilege Vulnerability
...
CVE-2026-58637
CVE-2026-58637 affects Windows Client-Side Caching (CSC) Service. Description and sources confirm a use-after-free vulnerability that enables an authorized local attacker to elevate privileges. Metrics indicate local attack vector, low privileges required, and no user interaction, with high confi...
CVE-2026-58633 Desktop Window Manager Elevation of Privilege Vulnerability
...
CVE-2026-58633 Desktop Window Manager Elevation of Privilege Vulnerability
...
CVE-2026-58632 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
...
CVE-2026-58632
CVE-2026-58632 is a Windows Win32K use-after-free vulnerability in the Win32 Kernel Subsystem that could allow a locally authenticated attacker to escalate privileges. The CVE is described as a local elevation of privilege (no remote code execution). Public sources in the connected set consistent...
CVE-2026-58632 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
...
CVE-2026-58628 Windows Wireless Network Manager Elevation of Privilege Vulnerability
...
CVE-2026-58629
CVE-2026-58629 is a Windows DirectX vulnerability described as a use-after-free in the DirectX Graphics Kernel that allows a locally authenticated attacker to elevate privileges. The NVD entry notes a local attack vector with high impact (C/H/I/A all high) and the CVSSv3.1 score of 7.0 (Local, Pr...
CVE-2026-58628
CVE-2026-58628 affects Windows Wireless Networking and is described as a race condition in concurrent access to a shared resource, allowing an authenticated local attacker to elevate privileges. The underlying issue is improper synchronization that leads to elevation of privileges on Windows syst...