CVE-2026-105727

Improper limitation of a pathname to a restricted directory 'path traversal' in Dynamics Business Central allows an authorized attacker to elevate privileges over a network...

CVE-2026-105004

Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...

CVE-2026-103578

Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack...

CVE-2026-103555

Heap-based buffer overflow in Virtual Hard Disk VHD Miniport Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-103565

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...

CVE-2026-102866

Improper verification of cryptographic signature in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-102861

Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

CVE-2026-102862

Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

CVE-2026-102216

Access of resource using incompatible type 'type confusion' in Windows StateRepository API allows an authorized attacker to elevate privileges locally...

CVE-2026-102218

Heap-based buffer overflow in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...

CVE-2026-102217

Improper resolution of path equivalence in WebDAV allows an authorized attacker to elevate privileges over a network...

CVE-2026-102220

Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally...

CVE-2026-102207

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-102208

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...

CVE-2026-102201

Use after free in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally...

CVE-2026-102202

Improper access control in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to elevate privileges locally...

CVE-2026-102204

Improper link resolution before file access 'link following' in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally...

CVE-2026-102205

Heap-based buffer overflow in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...

CVE-2026-102206

Heap-based buffer overflow in Windows Portable Device MTP Driver allows an unauthorized attacker to elevate privileges with a physical attack...

CVE-2026-102195

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...