27120 matches found
CVE-2026-73027: External Control of System or Configuration Setting
External control of system or configuration setting in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally...
CVE-2026-85328: Weak Authentication
Weak authentication in Windows Projected File System allows an authorized attacker to elevate privileges locally...
CVE-2026-83640: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally...
CVE-2026-83695: Use of Uninitialized Resource
Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally...
CVE-2026-83566: Use After Free
Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally...
CVE-2026-83682: Use After Free
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally...
CVE-2026-83568: Missing Authorization
Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally...
PT-2026-112880
Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally...
CVE-2026-83567: Out-of-bounds Read
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally...
CVE-2026-88073: Use After Free
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-83582: Use After Free
Use after free in Windows Graphics Kernel allows an authorized attacker to disclose information locally...
CVE-2026-69673: Improper Link Resolution Before File Access
Improper link resolution before file access 'link following' in Windows Update allows an authorized attacker to elevate privileges locally...
CVE-2026-83689: Use After Free
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
CVE-2026-83845: Authentication Bypass by Spoofing
Improper privilege management in Windows Internet wininet.dll allows an authorized attacker to perform spoofing locally...
CVE-2026-83705: Exposure of Sensitive System Information to an Unauthorized Control Sphere
Exposure of sensitive system information to an unauthorized control sphere in Windows HTTP.sys allows an authorized attacker to disclose information locally...
CVE-2026-103567: Buffer Over-read
Buffer over-read in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally...
CVE-2026-83728: Improper Validation of Syntactic Correctness of Input
Improper validation of syntactic correctness of input in Windows Hyper-V allows an authorized attacker to perform spoofing locally...
CVE-2026-83765: Out-of-bounds Read
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally...