45731 matches found
CVE-2026-96928
An out-of-bounds read vulnerability exists in Windows NTFS that allows an authorized attacker to achieve local privilege elevation . The vulnerability impacts the NTFS file system component. While the specific root cause is not detailed in the provided documents, the impact includes high confiden...
CVE-2026-96856
A heap-based buffer overflow exists in Windows Management Instrumentation , which allows an authorized attacker to achieve local privilege elevation . The vulnerability is categorized as HIGH severity with a CVSS 3.1 score of 7.8 . No specific exploit details or evidence of in-the-wild exploitati...
CVE-2026-96863
A heap-based buffer overflow vulnerability exists in the Windows Storage Port Driver . This flaw allows an unauthorized attacker to elevate privileges via a physical attack . The provided documents do not specify the exact affected versions or the specific function/file involved. No information r...
CVE-2026-96868
A heap-based buffer overflow exists in the Windows Kernel , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is characterized by high complexity and requires local access. No specific exploit details or information regarding in-the-wild exploitati...
CVE-2026-96318
A Heap-based buffer overflow in Windows Resume allows an authorized attacker to elevate privileges locally . The vulnerability has a CVSS 3.1 base score of 7.8 (High) and is categorized under CWE-122 . While the specific component or file is not detailed, the impact includes high levels of confid...
CVE-2026-96307
A Use after free vulnerability exists in Windows Installer . This flaw allows an authorized attacker to achieve local privilege elevation . The CVSS 3.1 base score is 7.0 (High) , reflecting impacts on confidentiality, integrity, and availability. No specific exploit code or detailed remediation ...
CVE-2026-70049
A SQL injection vulnerability exists in Microsoft Configuration Manager due to the improper neutralization of special elements used in an SQL command. This flaw allows an authorized attacker to elevate privileges over an adjacent network. The vulnerability is assigned a High base severity score. ...
CVE-2026-96220
The Windows Assigned Access feature contains an improper control of generation of code (code injection) vulnerability. This flaw allows an authorized attacker to perform a local privilege escalation . The vulnerability is associated with CWE-94 . No specific exploit links or exploit details are p...
EUVD-2026-99743
Server-side request forgery ssrf in Azure Arc allows an authorized attacker to elevate privileges over a network...
CVE-2026-96217
A heap-based buffer overflow exists in Windows NTFS that allows an authorized attacker to elevate privileges locally . The vulnerability is associated with CWE-122 (Heap-based Buffer Overflow) and CWE-190 (Integer Overflow or Wraparound). No specific exploit information or details on in-the-wild ...
CVE-2026-96204
A Server-side request forgery (SSRF) vulnerability exists in Azure Arc . This flaw allows an authorized attacker to achieve privilege escalation over a network. The vulnerability is associated with CWE-918 . Microsoft has provided updates to address this issue, and users are encouraged to install...
CVE-2026-70276
A Use after free vulnerability exists in Microsoft Office Click-To-Run , which may allow an authorized attacker to elevate privileges locally . This vulnerability is categorized with a CVSS 3.1 score of 7.0 (High) . Microsoft has released updates to address this issue; users are recommended to in...
CVE-2026-70251
A Server-side request forgery (SSRF) vulnerability exists in Microsoft Office SharePoint , as detailed in CVE-2026-70251 . This flaw allows an authorized attacker to achieve privilege escalation over a network. Microsoft has released official updates to address this issue; users are encouraged to...
CVE-2026-70161
Improper limitation of a pathname to a restricted directory 'path traversal' in .NET allows an authorized attacker to elevate privileges locally...
CVE-2026-70179
Authentication bypass by spoofing in ASP.NET Core allows an authorized attacker to elevate privileges over a network...
CVE-2026-70183
Concurrent execution using shared resource with improper synchronization 'race condition' in ASP.NET Core allows an authorized attacker to elevate privileges over a network...
CVE-2026-70175
Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-70179
Authentication bypass by spoofing in ASP.NET Core allows an authorized attacker to elevate privileges over a network...