CVE-2026-103554

A Use after free vulnerability exists in the Windows Broadcast DVR User Service . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-416 and has a CVSS 3.1 base score of 7.0 . No specific exploit code or detailed remediation ste...

CVE-2026-109453

A heap-based buffer overflow exists in the Virtual Hard Disk (VHD) Miniport Driver , which could allow an authorized attacker to perform a local elevation of privilege . The vulnerability is rated with a high base severity score of 7.0. No specific exploit details or remediation steps are provide...

EUVD-2026-100375

Improper limitation of a pathname to a restricted directory 'path traversal' in Dynamics Business Central allows an authorized attacker to elevate privileges over a network...

EUVD-2026-100376

Access of resource using incompatible type 'type confusion' in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network...

EUVD-2026-100368

Heap-based buffer overflow in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...

CVE-2026-102220

A use after free vulnerability in the Windows VHD miniport driver allows an authorized attacker to achieve local privilege elevation . While the technical details of the root cause are limited to the vulnerability type, the impact includes high confidentiality, integrity, and availability consequ...

CVE-2026-102218

A heap-based buffer overflow exists in the Windows Universal Disk Format File System Driver (UDFS) . This vulnerability allows an authorized attacker to perform a local privilege elevation . The documents do not provide specific version numbers, underlying root causes, or direct links to exploits...

CVE-2026-102211

A use after free vulnerability exists in the Windows Virtualization-Based Security (VBS) Enclave . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-416 (Use After Free) and CWE-362 (Race Condition). No specific exploit detail...

CVE-2026-102205

A heap-based buffer overflow exists in the Windows Universal Disk Format File System Driver (UDFS) . This vulnerability allows an authorized attacker to achieve local privilege elevation . No specific exploit details or patch versions are provided in the documents.

CVE-2026-102215

A heap-based buffer overflow exists in the Windows Universal Disk Format File System Driver (UDFS) . This vulnerability allows an authorized attacker to achieve local privilege elevation . No specific exploit details or remediation steps are provided in the documents.

EUVD-2026-100367

Heap-based buffer overflow in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...

CVE-2026-102196

A use after free vulnerability exists in the Windows Broadcast DVR User Service . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-416 and has a CVSS 3.1 base score of 7.8 . No specific software versions, root cause details, ...

CVE-2026-102201

A Use after free vulnerability in Microsoft Windows Media Foundation allows an authorized attacker to achieve local privilege escalation . The vulnerability is classified as HIGH severity with a CVSS 3.1 score of 7.8. Exploitation details and specific affected versions are not provided in the doc...

CVE-2026-102206

A heap-based buffer overflow exists in the Windows Portable Device MTP Driver . This vulnerability allows an unauthorized attacker to achieve privilege escalation via a physical attack . The CVSS 3.1 score is 6.8 (Medium) , with a physical attack vector and no user interaction required. No specif...

CVE-2026-102193

A use after free vulnerability exists in the Windows Broadcast DVR User Service . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability has a CVSS 3.1 base score of 7.0 (High) . No specific exploit details or patch versions are provided in the documents,...

CVE-2026-102202

A vulnerability exists in the Windows Container Isolation FS Filter Driver (unionfs.sys) due to improper access control . This flaw allows an authorized attacker to perform a local privilege elevation . The vulnerability is associated with CWE-59 (Improper Link Resolution Before File Access). No ...

CVE-2026-102204

A vulnerability in Microsoft Defender for Endpoint (CVE-2026-102204) arises from improper link resolution before file access (link following). This flaw allows an authorized attacker to achieve local privilege elevation . According to NCSC documentation, this could potentially lead to the access ...

CVE-2026-70212

The Windows Security Center is affected by a vulnerability involving the improper restriction of communication channels to intended endpoints. This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-923 . While the impact is high ...

CVE-2026-100225

A heap-based buffer overflow vulnerability exists in Windows Storage . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is classified as HIGH severity with an official fix available via Microsoft. No specific exploit details or in-the-wild exploitat...

CVE-2026-100205

An untrusted pointer dereference vulnerability in SysInternals allows an authorized attacker to achieve local privilege escalation . This vulnerability is associated with CWE-822 and has been assigned a CVSS 3.1 base score of 7.1 (High) . No specific exploit details or in-the-wild exploitation in...