45808 matches found
CVE-2026-69945
The Windows AppX Deployment Extensions component is vulnerable to a local elevation of privilege due to missing authorization . An authorized attacker can exploit this flaw to obtain elevated privileges on the system. The vulnerability has a CVSS 3.1 score of 8.8 (HIGH) and is officially document...
CVE-2026-69963
A Heap-based buffer overflow exists in the Microsoft Streaming Service (specifically the Kernel Streaming Service Driver ). This vulnerability allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-122 and CWE-190 (Integer Overflow or Wraparo...
CVE-2026-69952
The Windows Overlay Filter component is vulnerable to an out-of-bounds read (CWE-125). This flaw allows an authorized attacker to perform a local privilege elevation . The severity is rated as HIGH with a CVSS 3.1 score of 7.8. No specific exploit details or in-the-wild exploitation information a...
CVE-2026-69795
A null pointer dereference vulnerability exists in the Windows Clipboard Server . This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploitation details or direct links are provided in the documentation, but the vulnerability is addressed via an official ...
CVE-2026-69840
A Use after free vulnerability in Windows Certificates allows an authorized attacker to achieve local privilege elevation . The vulnerability's base score is 7.0 (HIGH) . No specific affected versions, root causes, or exploitation details are provided in the documents beyond the general vulnerabi...
CVE-2026-69763
A Use after free vulnerability in Windows Storage allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-416 (Use After Free) and CWE-366 (Race Condition). Exploitation details and specific affected versions are not provided in the documen...
CVE-2026-61931
A use after free vulnerability exists in the Windows Perception Simulation Service . This flaw allows an authorized attacker to achieve local privilege escalation . While the specific component or root cause is not detailed beyond the memory corruption type, the impact includes potential high con...
CVE-2026-69363
A heap-based buffer overflow exists in Windows Error Reporting , which allows an authorized attacker to achieve privilege escalation over a network. The vulnerability is associated with CWE-122 and has a CVSS 3.1 base score of 8.0 (HIGH) . Remediation is available through an official fix .
CVE-2026-105732
A stack-based buffer overflow in SysInternals allows an authorized attacker to achieve local privilege escalation . The vulnerability has a HIGH base severity score of 7.3. No specific affected versions, root cause components, or exploit links are provided in the documents, though an official fix...
EUVD-2026-99079
Stack-based buffer overflow in SysInternals allows an authorized attacker to elevate privileges locally...
CVE-2026-105722
A Use after free vulnerability exists in the Windows Broadcast DVR User Service . This flaw allows an authorized attacker to achieve local privilege escalation . The official CVSS 3.1 score is 7.0, reflecting a high severity with significant impacts on confidentiality, integrity, and availability...
EUVD-2026-99046
Improper control of generation of code 'code injection' in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...
CVE-2026-102862
A vulnerability in Microsoft Office SharePoint (CVE-2026-102862) allows an authorized attacker to achieve privilege escalation over a network due to incorrect authorization (CWE-863). The issue has a CVSS 3.1 score of 8.8 (High) , with high impact on confidentiality, integrity, and availability. ...
CVE-2026-102866
A vulnerability in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network due to the improper verification of cryptographic signatures . The impact includes gaining elevated privileges with a CVSS score of 8.1 . Microsoft has released updates to address t...
EUVD-2026-99044
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...
EUVD-2026-99029
Improper limitation of a pathname to a restricted directory 'path traversal' in Dynamics Business Central allows an authorized attacker to elevate privileges over a network...
CVE-2026-105725
A Use after free vulnerability exists in the Windows Security App . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is categorized under CWE-416 and has a CVSS 3.1 base score of 7.0 (High). Remediation is available via an official fix provided by M...
Time-of-check Time-of-use (TOCTOU) Race Condition
Overview Affected versions of this package are vulnerable to Time-of-check Time-of-use TOCTOU Race Condition via the CommandLinker trust mechanism, where a command-link click triggers a trust dialog and, upon user approval, executes the associated trust command without verifying that the DOM...
Time-of-check Time-of-use (TOCTOU) Race Condition
Overview notebook is a web application that allows you to create and share documents that contain live code, equations, visualizations, and explanatory text. Affected versions of this package are vulnerable to Time-of-check Time-of-use TOCTOU Race Condition via the CommandLinker trust mechanism,...
