CVE-2026-55014

CVE-2026-55014 concerns Windows Remote Help Defense with an improper access control vulnerability that lets an authorized attacker locally elevate privileges. Documented CVSSv3.1: 7.8 (HIGH) — LOCAL, LOW complexity, LOW privileges required, NONE user interaction; impact to confidentiality, integr...

Windows Operating Systems Elevation of Privilege Vulnerability

Improper access control in Windows Operating Systems allows an authorized attacker to elevate privileges locally...

Windows System Secure Feature Bypass Vulnerability

Improper access control in Windows System allows an unauthorized attacker to bypass a security feature locally...

Microsoft SharePoint Server Spoofing Vulnerability

Improper access control in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

Windows DNS Client Tampering Vulnerability

Improper access control in Microsoft Windows DNS allows an authorized attacker to perform tampering locally...

Windows Kernel Elevation of Privilege Vulnerability

Improper access control in Windows Kernel allows an authorized attacker to elevate privileges locally...

Win32k Elevation of Privilege Vulnerability

Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally...

Win32k Elevation of Privilege Vulnerability

Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally...

M365 Copilot for iOS Elevation of Privilege Vulnerability

Improper access control in Microsoft 365 Copilot for iOS allows an unauthorized attacker to elevate privileges over a network...

Windows Kernel Security Feature Bypass Vulnerability

Improper access control in Windows Kernel allows an authorized attacker to bypass a security feature locally...

Extensible Storage Engine (ESENT) Elevation of Privilege Vulnerability

Improper access control in Extensible Storage Engine ESENT allows an authorized attacker to elevate privileges locally...

Windows Server Elevation of Privilege Vulnerability

Improper access control in Windows Server allows an authorized attacker to elevate privileges locally...

Windows Remote Help Defense Elevation of Privilege Vulnerability

Improper access control in Windows Remote Help Defense allows an authorized attacker to elevate privileges locally...

Win32k Elevation of Privilege Vulnerability

Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally...

Windows MIDI Service Module Elevation of Privileges Vulnerability

Improper access control in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

Configuration Manager Elevation of Privilege Vulnerability

Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network...

PT-2026-58195

Name of the Vulnerable Software and Affected Versions Windows Win32K affected versions not specified Description Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendations At the moment, there is...

PT-2026-58325

Name of the Vulnerable Software and Affected Versions Windows Operating Systems affected versions not specified Description Improper access control allows an authorized attacker to elevate privileges locally, potentially enabling a full system takeover. Recommendations At the moment, there is no...

PT-2026-58592

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Improper access control allows an authorized attacker to perform spoofing over a network, which enables them to affect the system. Recommendations At the moment, there is ...

PT-2026-58198

Name of the Vulnerable Software and Affected Versions Windows MIDI Service Module affected versions not specified Description Improper access control in the Windows MIDI Service Module allows an authorized attacker to elevate privileges locally, which can lead to full system compromise...