37166 matches found
CVE-2026-70345 Windows Installer Elevation of Privilege Vulnerability
...
CVE-2026-70346 Windows Installer Elevation of Privilege Vulnerability
...
CVE-2026-70345
CVE-2026-70345 describes a heap-based buffer overflow in Windows Installer that enables a locally authenticated attacker to achieve elevation of privilege. The root cause is a heap-based overflow within the Windows Installer process, with an attacker requiring local access and no user interaction...
CVE-2026-70346
CVE-2026-70346 is a Windows Installer vulnerability: a stack-based buffer overflow could allow an authorized, local attacker to elevate privileges. The description indicates local execution with high impact, but the documents do not provide exploit details or a remediation/patch. Exploitation sta...
CVE-2026-70346 Windows Installer Elevation of Privilege Vulnerability
...
CVE-2026-70344 Windows Installer Elevation of Privilege Vulnerability
...
CVE-2026-70344 Windows Installer Elevation of Privilege Vulnerability
...
CVE-2026-66804 Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability
...
CVE-2026-70344
CVE-2026-70344 originates from a stack-based buffer overflow in Windows Installer. The vulnerability could allow an authorized attacker to perform local privilege escalation on affected systems. The CVSS 3.1 vector (L/L/P:L/U:N/S:U/C:H/I:H/A:H) indicates local attack vector, low attack complexity...
CVE-2026-66804 Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability
...
CVE-2026-66804
Technical details about CVE-2026-66804 are not publicly available in the provided documents. Monitor for updates from Microsoft and NVD for affected products, vulnerable component, impact, and remediation.
CVE-2026-65783
CVE-2026-65783 is a use-after-free vulnerability in Windows Autopilot that allows an authorized attacker to perform local privilege escalation. The available documents confirm the affected component (Windows Autopilot) and the underlying issue (use-after-free) with a local attacker requiring low ...
CVE-2026-65783 Windows Autopilot Elevation of Privilege Vulnerability
...
CVE-2026-65783 Windows Autopilot Elevation of Privilege Vulnerability
...
CVE-2026-70340 Azure CycleCloud Elevation of Privilege Vulnerability
...
CVE-2026-70340
Azure CycleCloud CVE-2026-70340: AMissing authorization vulnerability could allow an authenticated attacker to elevate privileges over a network. The issue affects Azure CycleCloud and is rated HIGH (CVSS 3.1: AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H). The root cause is insufficient access control, en...
CVE-2026-70340 Azure CycleCloud Elevation of Privilege Vulnerability
...
CVE-2026-57104 Azure Storage Explorer Elevation of Privilege Vulnerability
...
CVE-2026-57104
CVE-2026-57104 concerns Azure Storage Explorer, where improper neutralization of input during web page generation enables a cross-site scripting (XSS) vulnerability that can lead to elevation of privilege over a network. According to the CVSS 3.1 data, the issue has a base score of 8.8 (HIGH) wit...