CVE-2026-58628 Windows Wireless Network Manager Elevation of Privilege Vulnerability

...

CVE-2026-58617

CVE-2026-58617 affects Microsoft 365 Copilot for iOS. Connected sources describe an improper access control that allows an unauthorized attacker to elevate privileges over the network. Root cause reported as access control deficiencies in the iOS Copilot component; impact is privilege escalation ...

CVE-2026-58619

CVE-2026-58619 is a Windows Sensor Data Service vulnerability described as a use-after-free that enables an authorized attacker to locally elevate privileges. The vulnerability is reported with CVSS 3.1: LOCAL attack vector, HIGH impact (C, I, A), and low privileges required with no user interact...

CVE-2026-58617 M365 Copilot for iOS Elevation of Privilege Vulnerability

...

CVE-2026-58617 M365 Copilot for iOS Elevation of Privilege Vulnerability

...

CVE-2026-58619 Windows Sensor Data Service Elevation of Privilege Vulnerability

...

CVE-2026-58613

CVE-2026-58613 (Windows Cloud Files Mini Filter Driver) causes a local privilege escalation via a use-after-free in the driver. This is observed as an elevation of privileges by an authorized attacker who already has local access. Public sources in the connected documents identify the issue as a ...

CVE-2026-58613 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

...

CVE-2026-58613 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

...

CVE-2026-58543 Universal Print Management Service Elevation of Privilege Vulnerability

...

CVE-2026-58541 Microsoft DWM Core Library Elevation of Privilege Vulnerability

...

CVE-2026-58541

CVE-2026-58541 — Windows DWM Core Library Elevation of Privilege due to a type confusion in DWM. Affected component: Windows DWM Core Library/DWM (Windows OS). Description from sources: Access of resource using incompatible type ('type confusion') in Windows DWM allows an authorized attacker to e...

CVE-2026-58541 Microsoft DWM Core Library Elevation of Privilege Vulnerability

...

CVE-2026-58543 Universal Print Management Service Elevation of Privilege Vulnerability

...

CVE-2026-58543

CVE-2026-58543 corresponds to a race condition in the Windows USB Print Driver (shared resource synchronization) that can allow an authorized attacker with physical access to elevate privileges. The NVD entry states concurrent execution with improper synchronization in the Windows USB Print Drive...

CVE-2026-58544 Windows Management Services Elevation of Privilege Vulnerability

...

CVE-2026-58544

CVE-2026-58544 (Windows Management Services) is a use-after-free vulnerability that enables local privilege escalation by an authorized user. Public references in the initial data indicate an elevated-privilege impact (CVE-2026-58544) with a CVSS v3.1 base score of 7.0 (LOCAL, HIGH impact to conf...

CVE-2026-58544 Windows Management Services Elevation of Privilege Vulnerability

...

CVE-2026-58547 Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability

...

CVE-2026-58547

CVE-2026-58547 is a Windows UPnP Device Host vulnerability. The issue is a heap-based buffer overflow in upnp.dll that allows an authenticated local attacker to elevate privileges. The NVD entry and multiple advisories describe the root cause as a heap overflow in UPnP device host, with CVSS deta...