27291 matches found
CVE-2026-85854: Use After Free
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
CVE-2026-85857: Insertion of Sensitive Information into Log File
Insertion of sensitive information into log file in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally...
CVE-2026-83747: Out-of-bounds Read
Out-of-bounds read in Windows Error Reporting allows an authorized attacker to disclose information locally...
CVE-2026-87695: Inclusion of Functionality from Untrusted Control Sphere
Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally...
CVE-2026-69931: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Storage allows an authorized attacker to elevate privileges locally...
CVE-2026-83721: Use After Free
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-96316: Windows Routing and Remote Access Service (RRAS) Tampering Vulnerability
Improper access control in Windows Routing and Remote Access Service RRAS allows an authorized attacker to perform tampering locally...
CVE-2026-96926: Missing Authorization
Missing authorization in DNS Server allows an authorized attacker to perform tampering locally...
CVE-2026-88072: Improper Link Resolution Before File Access
Improper access control in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally...
CVE-2026-96925: Integer Underflow (Wrap or Wraparound)
Integer underflow wrap or wraparound in Windows NTFS allows an authorized attacker to disclose information locally...
CVE-2026-84013: Use After Free
Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally...
PT-2026-112648
Name of the Vulnerable Software and Affected Versions Windows Virtualization-Based Security VBS Enclave affected versions not specified Description Inadequate encryption strength in the Virtualization-Based Security VBS Enclave allows an authorized attacker to perform local spoofing. VBS Enclave ...
CVE-2026-70118: Use After Free
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally...
CVE-2026-97799: Improper Verification of Cryptographic Signature
Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally...
CVE-2026-81969: Insufficient Granularity of Access Control
Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally...
CVE-2026-87715: Use After Free
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-96860: Out-of-bounds Read
Out-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose information locally...
Microsoft Windows: CVE-2026-83792: Windows Device Install Service Elevation of Privilege Vulnerability
Incorrect authorization in Windows Device Install Service allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-83864: Windows NTFS Information Disclosure Vulnerability
Improper access control in Windows NTFS allows an authorized attacker to disclose information locally...