26144 matches found
Microsoft Windows: CVE-2026-70222: Windows Shell Elevation of Privilege Vulnerability
Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-96916: Windows NTFS Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-83639: Windows Sensor Data Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally...
CVE-2026-100200: Use After Free
Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally...
CVE-2026-100207: Improper Neutralization of Special Elements used in an OS Command
Improper neutralization of special elements used in an os command 'os command injection' in Azure CycleCloud allows an authorized attacker to execute code locally...
CVE-2026-102202: Improper Link Resolution Before File Access
Improper access control in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to elevate privileges locally...
CVE-2026-102191: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally...
CVE-2026-102186: Untrusted Pointer Dereference
Untrusted pointer dereference in Windows Network File System allows an authorized attacker to disclose information locally...
CVE-2026-105004: Out-of-bounds Read
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...
CVE-2026-102207: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-102204: Improper Link Resolution Before File Access
Improper link resolution before file access 'link following' in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally...
CVE-2026-100225: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally...
CVE-2026-105729: Untrusted Pointer Dereference
Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally...
CVE-2026-105007: Out-of-bounds Read
An elevation of privilege vulnerability exists in the Network Driver Interface Specification NDIS when ndis.sys fails to check the length of a buffer prior to copying memory to it. To exploit the vulnerability, in a local attack scenario, an attacker could run a specially crafted application to...
CVE-2026-103567: Buffer Over-read
Buffer over-read in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally...
CVE-2026-110036: Integer Overflow or Wraparound
A flaw was found in device-mapper-persistent-data. A local attacker can cause a Denial of Service DoS by inducing a user or system tool to process crafted device metadata containing an excessively large block index. An arithmetic error in the synchronous block reading logic causes the application...
CVE-2026-105009: Incorrect Default Permissions
Incorrect default permissions in Windows Server Update Service allows an authorized attacker to elevate privileges locally...
CVE-2026-108132: Double Free
Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally...
CVE-2026-108133: Release of Invalid Pointer or Reference
Release of invalid pointer or reference in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...