CVE-2026-96916

A heap-based buffer overflow exists in the Windows NTFS file system. This vulnerability allows an authorized attacker to perform a local privilege escalation . The severity is rated as HIGH with a CVSS 3.1 score of 7.8. No specific exploitations are mentioned in the provided documents. Remediatio...

CVE-2026-96847

A vulnerability in WebDAV involves an untrusted pointer dereference that allows an authorized attacker to perform a local privilege elevation . The issue is associated with CWE-822 and has a CVSS 3.1 base score of 7.8 (High) . No specific affected versions, root causes, or exploit links are provi...

CVE-2026-96843

A heap-based buffer overflow vulnerability exists in WebDAV that allows an authorized attacker to achieve local privilege elevation . The vulnerability is assigned a High severity rating (CVSS 3.1 score of 7.8). No specific affected versions, root cause details, or remediation steps are provided ...

CVE-2026-96852

A Use after free vulnerability exists in Windows TCP/IP that allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-416 . While the CVSS 3.1 score indicates a High severity (7.0), specific technical details regarding the vulnerable component ...

CVE-2026-96323

A Use after free vulnerability in Windows Update allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-416 and has a High base severity score of 7.0. No specific exploit links or remediation details are provided in the documents beyond the m...

EUVD-2026-100201

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...

CVE-2026-96243

A local elevation of privilege vulnerability exists in the Windows WalletService due to improper link resolution before file access (link following ). An authorized attacker can exploit this flaw to gain higher privileges on the local system. While the CVSS score indicates a High severity (7.8) w...

CVE-2026-96225

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...

CVE-2026-85363

The .NET Framework is affected by a vulnerability involving an integer overflow or wraparound (CWE-190). This flaw allows an unauthorized attacker to elevate privileges over a network. The vulnerability has been assigned a High severity score of 8.80 . Remediation is available via an official fix...

CVE-2026-96044

A Privilege Escalation vulnerability exists in Microsoft Office SharePoint . This issue allows an authorized attacker to elevate their privileges over a network. The vulnerability has a High base severity with a CVSS score of 8.8 . Microsoft has released updates to address this issue; users are r...

CVE-2026-85363

Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-88206

A Server-side request forgery (SSRF) vulnerability exists in Microsoft Office SharePoint , which allows an authorized attacker to elevate privileges over a network. The vulnerability is confirmed with a CVSS 3.1 base score of 7.5 (High) . Microsoft has released official updates to address this is...

CVE-2026-85340

A Use after free vulnerability exists in Microsoft Office Click-To-Run , which could allow an authorized attacker to elevate privileges locally . The vulnerability impacts the Click-To-Run subcomponent of various Office products. Microsoft has released updates to address this issue, and users are...

EUVD-2026-100142

Improper authorization in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network...

EUVD-2026-100144

Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally...

EUVD-2026-100145

Improper verification of cryptographic signature in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...

EUVD-2026-100143

Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally...

CVE-2026-83746

An Absolute path traversal vulnerability exists in Skype for Business and Microsoft Lync . This flaw allows an authorized attacker to achieve privilege escalation over a network. The vulnerability is classified with a CVSS 3.1 score of 8.1 (High). Microsoft has released updates to address this is...

CVE-2026-85873

An improper authorization vulnerability in Skype for Business and Microsoft Lync allows an authorized attacker to achieve privilege escalation over a network. The issue is associated with CWE-639 (Authorization Bypass Through User-Controlled Key). Microsoft has released updates to address this vu...

CVE-2026-87695

A vulnerability in Microsoft Exchange Server involves the inclusion of functionality from an untrusted control sphere, which allows an authorized attacker to achieve local privilege escalation . The vulnerability has a base score of 7.8 (High) . Microsoft has released updates to address this issu...