37429 matches found
CVE-2026-21238 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
...
CVE-2026-21238
Improper access control in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...
CVE-2026-21238
CVE-2026-21238 concerns an improper access control vulnerability in Windows Ancillary Function Driver for WinSock that enables local privilege escalation by an authorized attacker. The CVSSv3.1 vector indicates a high-severity impact (C/H, I/H, A/H) with local attack, low complexity, and a low pr...
CVE-2026-21238 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
...
CVE-2026-21239 Windows Kernel Elevation of Privilege Vulnerability
...
CVE-2026-21241
The CVE-2026-21241 entry identifies a use-after-free in the Windows Ancillary Function Driver for WinSock that enables a locally authenticated attacker to achieve privilege escalation . According to the description, exploitation is local with high impact to confidentiality, integrity, and availab...
CVE-2026-21241 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
...
CVE-2026-21239
CVE-2026-21239 describes a heap-based buffer overflow in the Windows Kernel. An authorized attacker can achieve local privilege escalation. The vulnerability is rated CVSS v3.1 base score 7.8 (HIGH) with LOCAL, low complexity, and no user interaction required beyond initial access, and it has hig...
CVE-2026-21241 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
...
CVE-2026-21239 Windows Kernel Elevation of Privilege Vulnerability
...
CVE-2026-21240
CVE-2026-21240 describes a local, authenticated TOCTOU race in Windows HTTP.sys that can allow privilege escalation. Affected component: Windows HTTP.sys. Root cause: time-of-check/time-of-use race condition. Impact: high (local escalation of privileges, potential confidentiality, integrity, and ...
CVE-2026-21240 Windows HTTP.sys Elevation of Privilege Vulnerability
...
CVE-2026-21240 Windows HTTP.sys Elevation of Privilege Vulnerability
...
CVE-2026-21245 Windows Kernel Elevation of Privilege Vulnerability
...
CVE-2026-21245 Windows Kernel Elevation of Privilege Vulnerability
...
CVE-2026-21245
CVE-2026-21245 describes a heap-based buffer overflow in the Windows Kernel that enables an authorized local attacker to escalate privileges. The CVSS v3.1 base score is 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, and LOW privileges required, and no user interaction. Impact is HIG...
CVE-2026-21250 Windows HTTP.sys Elevation of Privilege Vulnerability
...
CVE-2026-21250
CVE-2026-21250 : Untrusted pointer dereference in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. The CVSS 3.1 vector (Local, Low attack complexity, Low privileges required, No user interaction) yields a base score of 7.8 (HIGH). Documented impact is local privilege ...