240033 matches found
PT-2026-87880
Use after free in Windows WebClient Service allows an authorized attacker to elevate privileges locally...
CVE-2026-70577: Use After Free
Use after free in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...
CVE-2026-77654: Incorrect Privilege Assignment
Improper Privilege Management vulnerability in Horizon Security Analyzer formerly AlgoSec Firewall Analyzer on Linux, 64 bit allows Privilege Escalation and Parameter Injection. A local user with access to the command line may escalate their privileges by abusing the parameters of a command that ...
CVE-2026-69891: Use After Free
Use after free in Windows Media allows an authorized attacker to elevate privileges locally...
CVE-2026-28616: Unintended Proxy or Intermediary
In Setup Wizard, there is a possible way to force connection to a malicious network due to confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-28603: Unintended Proxy or Intermediary
In assertSafeToStartCustomActivity of AppRestrictionsFragment.java, there is a possible read/write access to private files due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-28653: Out-of-bounds Write
In multiple functions of rwt3t.cc, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-77905: Use After Free
Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally...
CVE-2026-80075: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Work Folders allows an authorized attacker to elevate privileges locally...
CVE-2026-77109: Incorrect Authorization
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain elevated access to restricted resources. Exploitation of this issue does not require user interaction. Scope is changed...
CVE-2026-58874: Improper Privilege Management
In multiple functions of SmsController.java, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-58820: Heap-based Buffer Overflow
In multiple locations, there is a possible memory safety issue due to integer overflow. This could lead to local escalation of privilege with no additional execution privileges required...
CVE-2026-73015: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69784: Use After Free
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...
CVE-2026-70567: Double Free
Double free in Windows Display Enhancement Service allows an authorized attacker to elevate privileges locally...
CVE-2026-70581: Integer Overflow or Wraparound
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-68889: Heap-based Buffer Overflow
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network...
CVE-2026-80093: Use After Free
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...