CVE-2026-69385

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows TCP/IP allows an authorized attacker to elevate privileges locally...

CVE-2026-69368

Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...

CVE-2026-69359

Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to elevate privileges locally...

CVE-2026-69348

Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-69324

Access of resource using incompatible type 'type confusion' in Windows Performance Monitor allows an authorized attacker to elevate privileges locally...

CVE-2026-69307

Heap-based buffer overflow in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...

CVE-2026-69290

Stack-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally...

CVE-2026-69293

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69265

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally...

CVE-2026-68885

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally...

CVE-2026-68847

Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally...

CVE-2026-68848

Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...

CVE-2026-56198

Out-of-bounds read in Microsoft Trace Data Helper allows an authorized attacker to elevate privileges locally...

CVE-2026-56172

Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally...

CVE-2026-50349

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

CVE-2026-58941

CVE-2026-58941 affects multiple functions in iommu.c of the Android kernel . The root cause is an out-of-bounds read/write due to improper input validation, enabling local escalation of privilege with only low privileges required and no user interaction. The CVSS 3.1 score is 7.8 (HIGH) with high...

CVE-2026-58874

CVE-2026-58874 is a local privilege escalation vulnerability in Android's SmsController.java , caused by a missing permission check in multiple functions. An attacker with local access and low privileges can exploit it without user interaction to achieve full compromise of confidentiality, integr...

EUVD-2026-74026

In kvmiommumapsg of iommu.c, there is a possible use after free due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58839

CVE-2026-58839 affects Android (per the 2026-09-01 Android Security Bulletin). The flaw resides in forEachLine within MountRegistry.cpp , where a buffer overflow causes an out-of-bounds read , enabling local privilege escalation without user interaction or additional execution privileges. The CVS...

EUVD-2026-74025

In forEachLine of MountRegistry.cpp, there is a possible out of bounds read due to a buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...