248839 matches found
CVE-2026-77109: Incorrect Authorization
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain elevated access to restricted resources. Exploitation of this issue does not require user interaction. Scope is changed...
CVE-2026-80093: Use After Free
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...
PT-2026-87336
Improper link resolution before file access 'link following' in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally...
CVE-2026-70582: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally...
CVE-2026-70584: Access of Resource Using Incompatible Type
Access of resource using incompatible type 'type confusion' in Windows Core Messaging allows an authorized attacker to elevate privileges locally...
CVE-2026-77489: NULL Pointer Dereference
Null pointer dereference in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
PT-2026-88221
In setupLayout of PickActivity.java, there is a possible bypass of the "Install unknown apps" security restriction due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-69854: Improper Authentication
Improper authentication in Spring Cloud Azure allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-77654: Incorrect Privilege Assignment
Improper Privilege Management vulnerability in Horizon Security Analyzer formerly AlgoSec Firewall Analyzer on Linux, 64 bit allows Privilege Escalation and Parameter Injection. A local user with access to the command line may escalate their privileges by abusing the parameters of a command that ...
CVE-2026-58874: Improper Privilege Management
In multiple functions of SmsController.java, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-87604
Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges over a network...
PT-2026-88250
In tt face colr blend layer of ttcolr.c, there is a possible remote code execution due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-87765
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...
PT-2026-87596
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69592: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...
PT-2026-88131
🚨 CVE-2026-83983 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. 🎖@cveNotify...
CVE-2026-68841: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally...
PT-2026-87352
Heap-based buffer overflow in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...
CVE-2026-28613: Improper Input Validation
In initAppLinkTypeAndIntent of ChannelImpl.java, there is a possible launch an arbitrary intent due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...