37428 matches found
CVE-2026-26131 .NET Elevation of Privilege Vulnerability
...
CVE-2026-26131
CVE-2026-26131 is a .NET Elevation of Privilege vulnerability with CVSS v3.1 base score 7.8 (HIGH). The entry indicates a LOCAL attacker with LOW privileges can exploit it without user interaction, potentially affecting confidentiality, integrity, and availability (all HIGH), under an UNCHANGED s...
CVE-2026-26128
CVE-2026-26128 concerns an elevation-of-privilege flaw in Windows SMB Server caused by improper authentication. The vulnerability affects Windows SMB Server and is described in connected sources as allowing an authorized local attacker to obtain higher privileges. Evidence from the connected docu...
CVE-2026-26128 Windows SMB Server Elevation of Privilege Vulnerability
...
CVE-2026-26128 Windows SMB Server Elevation of Privilege Vulnerability
...
CVE-2026-26115 SQL Server Elevation of Privilege Vulnerability
...
CVE-2026-26115 SQL Server Elevation of Privilege Vulnerability
...
CVE-2026-26115
CVE-2026-26115: Microsoft SQL Server Elevation of Privilege due to improper validation of input. Affects Microsoft SQL Server; vulnerability is exploitable over a network by an authorized attacker with LOW privileges; CVSS v3.1 base score 8.8 (High). Connected sources also reference related bugs ...
CVE-2026-26115
Improper validation of specified type of input in SQL Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-26116
CVE-2026-26116 is a SQL Server Elevation of Privilege vulnerability due to improper neutralization of special elements in SQL commands. Affected product: Microsoft SQL Server (SQL Server 2025 GDR) with potential network‑based exploitation and high impact (CVE-2026-26116). The issue is mitigated b...
CVE-2026-26116 SQL Server Elevation of Privilege Vulnerability
...
CVE-2026-26116 SQL Server Elevation of Privilege Vulnerability
...
CVE-2026-20967 System Center Operations Manager (SCOM) Elevation of Privilege Vulnerability
...
CVE-2026-20967
CVE-2026-20967 affects Microsoft System Center Operations Manager. The issue is due to improper input validation, enabling an authorized attacker to elevate privileges over the network. The CVSSv3.1 vector indicates a network-based, low-attack-complexity with low privileges required and high impa...
CVE-2026-20967 System Center Operations Manager (SCOM) Elevation of Privilege Vulnerability
...
CVE-2026-25189
The CVE-2026-25189 entry concerns a Use-after-Free in Windows DWM Core Library that allows an authorized attacker to locally elevate privileges. Affected component is Windows DWM Core Library; root cause is a use-after-free condition leading to privilege escalation. Microsoft and related advisori...
CVE-2026-25189 Windows DWM Core Library Elevation of Privilege Vulnerability
...
CVE-2026-25189 Windows DWM Core Library Elevation of Privilege Vulnerability
...