45680 matches found
CVE-2026-102189
A heap-based buffer overflow vulnerability exists in Windows Storage . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability has a CVSS 3.1 score of 7.0 and is categorized under CWE-122 . No specific exploit information or technical remediation details ...
CVE-2026-100216
A stack-based buffer overflow exists in Windows Storage , which could allow an authorized attacker to achieve local privilege elevation . The vulnerability is characterized by a high level of attack complexity and impacts confidentiality, integrity, and availability. An official fix is available;...
CVE-2026-100217
A vulnerability exists in Windows Group Policy due to improper privilege management . This flaw allows an authorized attacker to perform a local privilege escalation . The issue is associated with CWE-862 (Missing Authorization) . While the documents do not provide specific technical details on t...
CVE-2026-108396
A Time-of-check time-of-use (TOCTOU) race condition exists in Windows Modern Device Management (MDM) . This vulnerability allows an authorized attacker to achieve local privilege elevation . While the documents confirm the vulnerability's existence and its classification under CWE-367 , specific ...
CVE-2026-70023
A use after free vulnerability in Windows Hyper-V allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-416 . While the specific component and root cause are not detailed in the provided documents, the impact includes high confidentiality, i...
EUVD-2026-100309
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to elevate privileges locally...
CVE-2026-97793
A vulnerability in Windows Setup and Deployment arises from missing authentication for a critical function . This flaw allows an authorized attacker to perform a local privilege escalation . The vulnerability is associated with CWE-306 . While a CVSS v3.1 score of 7.0 is provided, specific detail...
EUVD-2026-100312
Missing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally...
CVE-2026-96118
A vulnerability in the Windows Graphics Kernel involving an out-of-bounds read (CWE-125) and integer overflow or wraparound (CWE-190) allows an authorized attacker to achieve local privilege escalation . The security impact is rated as High with an official fix available. No specific exploit code...
CVE-2026-97792
An improper access control vulnerability exists in the Windows Container Isolation FS Filter Driver (unionfs.sys) . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-732 (Incorrect Permission Assignment for Critical Resource) a...
CVE-2026-96949
A use after free vulnerability exists in the Windows Universal Disk Format File System Driver (UDFS) . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-362 (Race Condition). While the impact includes high levels of confiden...
CVE-2026-88094
The Azure Storage Library is affected by a vulnerability involving the improper neutralization of special elements in output used by a downstream component (injection). This flaw allows an authorized attacker to elevate privileges over a network. The vulnerability has been addressed by Microsoft;...
EUVD-2026-100273
Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...
EUVD-2026-100265
Improper neutralization of special elements in output used by a downstream component 'injection' in Azure Storage Library allows an authorized attacker to elevate privileges over a network...
EUVD-2026-100258
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-96931
A vulnerability exists in Windows NTFS involving an untrusted pointer dereference . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is assigned CWE-822 and has a CVSS 3.1 base score of 7.8 (High) . Official remediation is available via a patch fro...
EUVD-2026-100262
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
CVE-2026-96916
A heap-based buffer overflow exists in the Windows NTFS file system. This vulnerability allows an authorized attacker to perform a local privilege escalation . The severity is rated as HIGH with a CVSS 3.1 score of 7.8. No specific exploitations are mentioned in the provided documents. Remediatio...
CVE-2026-96913
A heap-based buffer overflow exists in the Windows Kernel , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is assigned a CVSS 3.1 score of 8.8 (High) , indicating significant impact on confidentiality, integrity, and availability. No specific so...