CVE-2026-62758 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

...

CVE-2026-62755 Windows DHCP Client Elevation of Privilege Vulnerability

...

CVE-2026-62758 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

...

CVE-2026-62755

CVE-2026-62755 affects the Windows DHCP Client. The vulnerability is a stack-based buffer overflow in the DHCP client component, leading to local privilege escalation for an authorized attacker. The CVSS 3.1 vector indicates Local attack, Low attack complexity, Low privileges required, with no us...

CVE-2026-62758

CVE-2026-62758 is a heap-based buffer overflow in Windows Remote Access Connection Manager that permits a locally authenticated attacker to elevate privileges. Affected component: RASMAN service on Windows. Root cause: heap overflow enabling arbitrary code execution with HIGH impact on confidenti...

CVE-2026-62754 Windows Kerberos Elevation of Privilege Vulnerability

...

CVE-2026-62783 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

...

CVE-2026-62754 Windows Kerberos Elevation of Privilege Vulnerability

...

CVE-2026-62783 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

...

CVE-2026-62754

CVE-2026-62754 describes a heap-based buffer overflow in Windows Kerberos that allows an authorized attacker to achieve local privilege escalation. The flaw is triggered within the Kerberos-related code path, enabling elevation of privileges on the affected system. The available documents confirm...

CVE-2026-62783

CVE-2026-62783 describes a heap-based buffer overflow in Windows Remote Access Connection Manager that allows an authenticated, local attacker to escalate privileges. Affected component: Windows Remote Access Connection Manager (RAS). Underlying issue: heap overflow leading to local code executio...

CVE-2026-62747 Windows Device Association Service Elevation of Privilege Vulnerability

...

CVE-2026-62747

CVE-2026-62747 is a heap-based buffer overflow in Windows Device Association Service that enables a locally authenticated attacker to elevate privileges. Exploit details are not provided in the connected documents, and no specific patch/version is listed here; CVSS v3.1 base score is 7.8 ( HIGH )...

CVE-2026-62747 Windows Device Association Service Elevation of Privilege Vulnerability

...

CVE-2026-62739 Windows HTTP.sys Elevation of Privilege Vulnerability

...

CVE-2026-62739 Windows HTTP.sys Elevation of Privilege Vulnerability

...

CVE-2026-62739

CVE-2026-62739 is a Windows component (HTTP.sys) vulnerability described as a heap-based buffer overflow that allows an authenticated, local attacker to achieve privilege escalation. The CVSS 3.1 assessment indicates local access with low attack complexity and low privileges required, but with hi...

CVE-2026-62737 Windows Kernel Elevation of Privilege Vulnerability

...

CVE-2026-62737

CVE-2026-62737 describes a local privilege escalation in Windows 11 kernel via untrusted pointer dereference in the ExecutionContext.sys path. Affected component: Windows kernel driver; vulnerability arises from insufficient validation of a kernel function pointer before dispatch to a worker thre...

CVE-2026-62735

CVE-2026-62735 is a Windows HTTP.sys vulnerability described as a heap-based buffer overflow that enables an authorized, locally interacting attacker to elevate privileges. Evidence across sources confirms a local-exploit path with high impact (C/H/I/A), CVSS 3.1 vector: LOCAL, LOW complexity, LO...