232312 matches found
CVE-2026-62721
Technical details about CVE-2026-62721 are not publicly provided in the supplied documents. Monitor for updates.
CVE-2026-62711 Windows Win32k Elevation of Privilege Vulnerability
...
EUVD-2026-56634
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...
CVE-2026-62710 Windows Device Association Service Elevation of Privilege Vulnerability
...
CVE-2026-62708 Windows Kernel Elevation of Privilege Vulnerability
...
CVE-2026-62700
CVE-2026-62700 describes a heap-based buffer overflow in Windows NTFS that allows an authenticated, local attacker to elevate privileges. The vulnerability affects the NTFS component on Windows and is rated CVSSv3.1#3.1 with a base score of 7.8 (HIGH) and local attack vector/low complexity, requi...
CVE-2026-61938 Windows Installer Elevation of Privilege Vulnerability
...
CVE-2026-61938 Windows Installer Elevation of Privilege Vulnerability
...
CVE-2026-61926
CVE-2026-61926 : Heap-based buffer overflow in the Windows USB Driver allows an authorized local attacker to perform a local privilege escalation . Exploitation details are not provided beyond the CVSS metrics (LOCAL, LOW complexity, LOW privileges, NONE user interaction; high impact to confident...
CVE-2026-61349
Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-56610
Use after free in Virtual Hard Disk VHD Miniport Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-59119 PowerShell Elevation of Privilege Vulnerability
...
CVE-2026-42976
Missing authentication for critical function in Windows RPC API allows an authorized attacker to elevate privileges locally...
CVE-2026-70304
Windows DNS contains a heap-based buffer overflow exploitable by an authorized local attacker to elevate privileges. NVD rates it HIGH (7.8, PR:L); Microsoft's CVSS rates MEDIUM (6.7, PR:H). No in-the-wild exploitation reported. Patch via August 2026 Microsoft security updates (KB5121000, KB51202...
CVE-2026-68809
CVE-2026-68809 describes an information-disclosure flaw in Microsoft Office PowerPoint caused by incomplete cleanup. A local attacker could disclose information due to this cleanup issue. CVSS v3.1: 5.5 (Medium); Vector: Local; Privileges Required: None; User Interaction: Required; Scope: Unchang...
CVE-2026-68792
CVE-2026-68792 concerns a Microsoft Office command-injection vulnerability (improper neutralization of special elements used in a command) that allows an authorized, local attacker with low privileges and no user interaction to achieve local privilege elevation. Impacted aspects: confidentiality,...
CVE-2026-65788
CVE-2026-65788 is a use-after-free in Desktop Window Manager that enables local privilege escalation for an authorized user. Documented impact is elevation of privileges; CVSSv3.1 base score 7.0 (HIGH) with LOCAL attack, HIGH impact to confidentiality, integrity, and availability. Connected sourc...
EUVD-2026-56444
Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally...