CVE-2026-61366

Double free in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally...

CVE-2026-61353

Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges locally...

CVE-2026-59122

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Telephony Service allows an authorized attacker to elevate privileges locally...

CVE-2026-59128

Out-of-bounds read in Windows Encrypting File System EFS allows an authorized attacker to disclose information locally...

UBUNTU-CVE-2026-62909

Uncaught exception in .NET allows an authorized attacker to elevate privileges locally...

DEBIAN-CVE-2026-20713

Always-incorrect control flow implementation in some firmware for some IntelR XeonR processors may allow an escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via...

CVE-2026-68817

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2026-65798 Windows DNS Elevation of Privilege Vulnerability

...

CVE-2026-65780 Windows Autopilot Elevation of Privilege Vulnerability

...

EUVD-2026-56730

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-65773

CVE-2026-65773 concerns improper access control in Windows Kernel, enabling a locally authenticated attacker to elevate privileges. Affected software/component: Windows Kernel (details not expanded in provided documents). Root cause: incorrect access control checks; impact: local privilege escala...

CVE-2026-64911

CVE-2026-64911 is an integer overflow/wraparound vulnerability in Microsoft Office that enables local code execution by an attacker with user interaction. The root cause is an overflow in a Microsoft Office component, enabling a privileged or unauthenticated user to run arbitrary code locally onc...

EUVD-2026-56695

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally...

EUVD-2026-56692

Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally...

EUVD-2026-56689

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally...

CVE-2026-62881

The CVE-2026-62881 entry describes a numeric truncation flaw in Windows DNS that allows an authenticated, local attacker to elevate privileges. Affected component is the Windows DNS service; root cause is a numeric truncation error. Exploitation is local with high privileges required and no user ...

CVE-2026-62803 Windows DHCP Server Elevation of Privilege Vulnerability

...

EUVD-2026-56660

Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges locally...

EUVD-2026-56658

Heap-based buffer overflow in Windows Shell allows an authorized attacker to elevate privileges locally...

EUVD-2026-56657

Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...