EUVD-2026-56353

Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-62705 Microsoft Brokering File System Elevation of Privilege Vulnerability

...

EUVD-2026-56339

Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-61932 Windows DWM Core Library Elevation of Privilege Vulnerability

...

EUVD-2026-56336

Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...

EUVD-2026-56334

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...

EUVD-2026-56328

Double free in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally...

EUVD-2026-56325

Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...

CVE-2026-61353

Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-56308

Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally...

EUVD-2026-56288

Untrusted search path in Windows Narrator Braille allows an authorized attacker to elevate privileges locally...

EUVD-2026-56287

Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally...

CVE-2025-61970

Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to create arbitrary code, potentially resulting in binary hijacking...

CVE-2026-68202

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture sequencer component. An unprivileged local user with access to the sound device can exploit a timing window during the cleanup of a queue timer. This allows the user to re-open a timer that has already been closed,...

CVE-2026-73070

Vim is an open source, command line text editor. Prior to 9.2.0842, the socket server backend in src/socketserver.c accepts unbounded client connections in socketserveraccept, causing descriptors to overflow fdset structures in src/channel.c and fixed-size struct pollfd arrays in src/osunix.c,...

CVE-2026-68288

A flaw was found in the Linux kernel's dropmonitor module. This vulnerability allows for information disclosure due to uninitialized padding bytes in the NETDMATTRPAYLOAD attribute. When the packet payload length is not a multiple of four, these uninitialized bytes are leaked to user space. A loc...

CVE-2026-68206

A flaw was found in the Linux kernel's V4L2 controls for High Efficiency Video Coding HEVC. The common validation path for HEVC slice parameters does not properly verify the active L0/L1 reference counts before driver-specific code processes them. This lack of validation could allow a local user ...

CVE-2026-19139

A flaw was found in Google Chrome's CredentialProvider on Windows. This race condition vulnerability allows a local attacker to execute code with elevated operating system OS privileges. The attacker can achieve this by exploiting the flaw with a specially crafted malicious file, leading to...

CVE-2026-73070

Vim prior to version 9.2.0842 is affected by a local vulnerability in the socket server backend (src/socketserver.c). The socketserver_accept() function accepts unbounded client connections, which can cause descriptors to overflow fd_set structures (src/channel.c) and fixed-size struct pollfd arr...

Microsoft Office Elevation of Privilege Vulnerability

Improper neutralization of special elements used in a command 'command injection' in Microsoft Office allows an authorized attacker to elevate privileges locally...