37164 matches found
CVE-2026-61364 Windows Remote Desktop Services Elevation of Privilege Vulnerability
...
CVE-2026-61365
CVE-2026-61365: Windows Remote Desktop Services contains a missing-authentication flaw in a critical function that allows local privilege escalation by an authorized user. CVSS 3.1 baseline is 7.8 (HIGH); attack vector LOCAL, requires LOW privileges, no user interaction, and results in HIGH impac...
CVE-2026-61364
The CVE-2026-61364 entry concerns Windows Remote Desktop Services. A missing authentication flaw in a critical function enables a locally authenticated attacker with low privileges to elevate to higher privileges, as indicated by the CVSS 3.1 vector (L/L). Exploitation details or in-the-wild stat...
CVE-2026-61365 Windows Remote Desktop Services Elevation of Privilege Vulnerability
...
CVE-2026-61364 Windows Remote Desktop Services Elevation of Privilege Vulnerability
...
CVE-2026-61359 Windows Storage Elevation of Privilege Vulnerability
...
CVE-2026-61359
CVE-2026-61359 describes a heap-based buffer overflow in Windows Storage that enables an authorized, local attacker with low privileges and no user interaction to achieve elevation of privileges. The available documents (NVD, CVE listing) confirm the vulnerability and impact but do not provide ex...
CVE-2026-61355 Windows Sensor Data Service Elevation of Privilege Vulnerability
...
CVE-2026-61359 Windows Storage Elevation of Privilege Vulnerability
...
CVE-2026-61355 Windows Sensor Data Service Elevation of Privilege Vulnerability
...
CVE-2026-61355
A heap-based buffer overflow in Windows Sensor Data Service allows an authorized local attacker to elevate privileges. Affected component: Windows Sensor Data Service. Vulnerability type: heap-based overflow. Impact: elevated local privileges with high confidentiality, integrity, and availability...
CVE-2026-61349 Windows Work Folder Service Elevation of Privilege Vulnerability
...
CVE-2026-61349
CVE-2026-61349 is a Windows vulnerability in the Work Folder Service described as a use-after-free that allows an authorized attacker to elevate privileges locally. The NVD entries (and CVE records) corroborate a local-exploit scenario with a CVSS v3.1 base score of 7.8 (HIGH), requiring LOW priv...
CVE-2026-61349 Windows Work Folder Service Elevation of Privilege Vulnerability
...
CVE-2026-59126 Windows Event Logging Service Elevation of Privilege Vulnerability
...
CVE-2026-59126 Windows Event Logging Service Elevation of Privilege Vulnerability
...
CVE-2026-59125 Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability
...
CVE-2026-59125
Use-after-free in the Virtual Hard Disk (VHD) Miniport Driver can allow an authorized local attacker to elevate privileges. The vulnerability is described as a local privilege escalation with high impact to confidentiality, integrity, and availability. The CVSS vector indicates LOCAL access, user...
CVE-2026-59126
The CVE refers to a race condition in Windows Event Logging Service where concurrent execution on a shared resource with improper synchronization can enable a local, authorized user to elevate privileges. Affected component: Windows Event Logging Service; root cause: race condition due to insuffi...