CVE-2026-102226

A path traversal vulnerability exists in Dynamics Business Central due to an improper limitation of a pathname to a restricted directory. This flaw allows an authorized attacker to elevate privileges over a network. The vulnerability has a CVSS 3.1 base score of 8.8 (High), with impacts on confid...

CVE-2026-102217

A vulnerability exists in WebDAV due to improper resolution of path equivalence . This flaw allows an authorized attacker to achieve privilege elevation over a network. The vulnerability is associated with CWE-41 and has been assigned a HIGH base severity score of 8.8 under CVSS v3.1. No specific...

CVE-2026-103553

An out-of-bounds read vulnerability exists in the Windows Partition Management Driver . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-125 . While no specific exploit links or proof-of-concept code are provided in the docume...

EUVD-2026-100372

Improper resolution of path equivalence in WebDAV allows an authorized attacker to elevate privileges over a network...

CVE-2026-103555

A Heap-based buffer overflow exists in the Virtual Hard Disk (VHD) Miniport Driver . This vulnerability allows an authorized attacker to perform a local privilege escalation . While the CVSS score indicates a high impact on confidentiality, integrity, and availability, no specific exploit links o...

EUVD-2026-100366

Access of resource using incompatible type 'type confusion' in Windows StateRepository API allows an authorized attacker to elevate privileges locally...

CVE-2026-102207

A race condition vulnerability exists in the Windows Kernel due to concurrent execution using a shared resource with improper synchronization. This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit details or version-specific remediation steps are prov...

CVE-2026-102216

A type confusion vulnerability exists in the Windows StateRepository API , where an access of resource using an incompatible type allows an authorized attacker to achieve local privilege escalation . The vulnerability has a HIGH base severity score of 7.8. No specific exploitative details or patc...

CVE-2026-102208

A Use after free vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is assigned a CVSS 3.1 score of 7.0 (High) , with high impact on confidentiality, integrity, and availability. No specifi...

EUVD-2026-100370

Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally...

CVE-2026-102209

A heap-based buffer overflow exists in the Microsoft Graphics Component , which allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-122 . While the documents confirm the vulnerability type and impact, specific affected versions and exploi...

CVE-2026-102194

A Use after free vulnerability exists in the Windows Graphics Kernel . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is characterized by a high CVSS 3.1 base score of 7.0. No specific exploit code or version details are provided in the documents...

EUVD-2026-100358

Improper link resolution before file access 'link following' in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally...

CVE-2026-102195

A use after free vulnerability in the Windows Broadcast DVR User Service allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-416 and has a CVSS v3.1 base score of 7.0 . No specific exploit information or remediation details are provided in...

CVE-2026-102197

A Use after free vulnerability exists in the Windows Broadcast DVR User Service . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability has a CVSS v3.1 base score of 7.0 (High) . No specific exploit details or remediation steps are provided in the docum...

CVE-2026-102191

A heap-based buffer overflow exists in Windows Storage , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is assigned a CVSS 3.1 base score of 7.0 (HIGH) . While the documents do not provide specific exploit links or a detailed root cause analysis...

CVE-2026-96209

An out-of-bounds read vulnerability exists in the Windows Network File System . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is classified as CWE-125 and has been assigned a CVSS 3.1 base score of 7.0 (High) . No specific exploit links or techni...

CVE-2026-102188

The Windows Storage Port Driver is vulnerable to an untrusted pointer dereference (CWE-822). This flaw allows an unauthorized attacker to achieve privilege elevation through a physical attack . While the CVSS v3.1 score indicates a base severity of Medium (6.8) , the impact includes high confiden...

CVE-2026-102189

A heap-based buffer overflow vulnerability exists in Windows Storage . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability has a CVSS 3.1 score of 7.0 and is categorized under CWE-122 . No specific exploit information or technical remediation details ...

CVE-2026-100217

A vulnerability exists in Windows Group Policy due to improper privilege management . This flaw allows an authorized attacker to perform a local privilege escalation . The issue is associated with CWE-862 (Missing Authorization) . While the documents do not provide specific technical details on t...