37215 matches found
CVE-2026-56155
Insufficient granularity of access control in Active Directory Federation Services AD FS allows an authorized attacker to elevate privileges locally...
CVE-2026-54986
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally...
CVE-2026-50338
Improper authentication in Azure Spring Apps allows an authorized attacker to elevate privileges over a network...
CVE-2026-50351
Improper access control in Windows Audio Compression Manager ACM allows an authorized attacker to elevate privileges locally...
CVE-2026-49805
Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally...
CVE-2026-49798
Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges locally...
CVE-2026-49790
Windows Universal Disk Format File System Driver UDFS Elevation of Privilege Vulnerability...
CVE-2026-49784
Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Windows App Store allows an authorized attacker to elevate privileges locally...
CVE-2026-49168
Integer overflow or wraparound in Windows Storage Spaces Direct allows an unauthorized attacker to elevate privileges with a physical attack...
CVE-2026-48572
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows App Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-44800
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Push Notifications allows an authorized attacker to elevate privileges locally...
CVE-2026-42982
Improper validation of consistency within input in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...
CVE-2026-58637 Windows Client-Side Caching Elevation of Privilege Vulnerability
...
CVE-2026-58634 Desktop Window Manager Elevation of Privilege Vulnerability
...
CVE-2026-58633
CVE-2026-58633 is a Desktop Window Manager (DWM) use-after-free vulnerability that enables a local attacker with low privileges to elevate privileges. Public sources collectively identify: impact as local privilege escalation; affected component is DWM; root cause described as use-after-free. Mic...
CVE-2026-58634
CVE-2026-58634 is a Windows vulnerability in the Desktop Window Manager (DWM) described as a use-after-free that enables an authorized attacker to achieve local Privilege Escalation . The CVSS 3.1 score is high (7.8) with a LOCAL attack vector, LOW attack complexity, and no user interaction requi...
CVE-2026-58637 Windows Client-Side Caching Elevation of Privilege Vulnerability
...
CVE-2026-58634 Desktop Window Manager Elevation of Privilege Vulnerability
...
CVE-2026-58637
CVE-2026-58637 affects Windows Client-Side Caching (CSC) Service. Description and sources confirm a use-after-free vulnerability that enables an authorized local attacker to elevate privileges. Metrics indicate local attack vector, low privileges required, and no user interaction, with high confi...