37166 matches found
CVE-2026-70335 GitHub Copilot and Visual Studio Code Elevation of Privilege Vulnerability
...
CVE-2026-70335
The CVE-2026-70335 entry concerns an os command injection in GitHub Copilot and Visual Studio Code due to improper neutralization of special elements. This allows a local attacker to achieve elevation of privileges. The public records identify affected products (GitHub Copilot and VS Code) and de...
CVE-2026-70335 GitHub Copilot and Visual Studio Code Elevation of Privilege Vulnerability
...
CVE-2026-70304 Windows DNS Elevation of Privilege Vulnerability
...
CVE-2026-70330 Windows DNS Elevation of Privilege Vulnerability
...
CVE-2026-70304 Windows DNS Elevation of Privilege Vulnerability
...
CVE-2026-70330 Windows DNS Elevation of Privilege Vulnerability
...
CVE-2026-70330
CVE-2026-70330 describes a heap-based buffer overflow in Windows DNS that allows an authorized, local attacker to elevate privileges. The available sources confirm the vulnerability occurs in the Windows DNS component and enables local privilege escalation with a high impact on confidentiality, i...
CVE-2026-70324 Microsoft SharePoint Elevation of Privilege Vulnerability
...
CVE-2026-70324 Microsoft SharePoint Elevation of Privilege Vulnerability
...
CVE-2026-70324
CVE-2026-70324 describes a server-side request forgery (SSRF) in Microsoft Office SharePoint that allows an authorized attacker to elevate privileges over a network. Affected product: SharePoint server components; root cause is SSRF enabling privilege escalation. The CVSSv3.1 score is 8.8 (HIGH) ...
CVE-2026-70307 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
...
CVE-2026-70307
CVE-2026-70307 describes a use-after-free flaw in the Windows Ancillary Function Driver for WinSock that can allow an authorized local attacker to elevate privileges. Affected component is the Windows network stack’s Ancillary Function Driver used by WinSock; root cause is a use-after-free bug in...
CVE-2026-70307 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
...
CVE-2026-68821
The CVE-2026-68821 entry concerns Windows Package Manager with an issue in privilege management that allows an authorized local attacker to elevate privileges. Affected software is Windows Package Manager; the underlying cause is improper privilege handling, enabling local privilege escalation wi...
CVE-2026-68821 Windows Package Manager Elevation of Privilege Vulnerability
...
CVE-2026-68821 Windows Package Manager Elevation of Privilege Vulnerability
...
CVE-2026-68820 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
...
CVE-2026-68820
CVE-2026-68820 is a local privilege escalation caused by a use-after-free in the Windows Ancillary Function Driver for WinSock (afd.sys). The vulnerability allows an attacker with code execution on the target to elevate to SYSTEM, as described in NVD/NVD-derived entries and echoed by Krebs/Automo...