CVE-2026-61356

Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...

EUVD-2026-56320

Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges locally...

CVE-2026-61353 Windows Telephony Service Elevation of Privilege Vulnerability

...

EUVD-2026-56321

Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally...

EUVD-2026-56319

Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-61346

Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally...

EUVD-2026-56316

Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally...

CVE-2026-59130

No cwe for this issue in AMD Zen allows an authorized attacker to disclose information locally...

EUVD-2026-56311

No cwe for this issue in AMD Zen allows an authorized attacker to disclose information locally...

CVE-2026-59127

Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally...

EUVD-2026-56301

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code locally...

CVE-2026-56174

Untrusted search path in Windows Narrator Braille allows an authorized attacker to elevate privileges locally...

CVE-2026-50472

Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally...

CVE-2026-68249

A flaw was found in the Linux kernel's drm/amdgpu/sdma5.0 component. This issue occurs when certain conditions trigger a BUGON macro, which is designed to halt system execution upon detecting a critical error. A local attacker could exploit this to cause a kernel crash, leading to a denial of...

CVE-2026-68423

A flaw was found in the Linux kernel's mtd: virtconcat subsystem. The mtdvirtconcatdestroy function incorrectly calls mtdvirtconcatputmtddevices after mtdconcatdestroy has already freed the associated memory. This use-after-free vulnerability can lead to system instability or potentially enable a...

CVE-2026-68166

A flaw was found in the Linux kernel's userfaultfd mechanism. A local attacker with userfaultfd access could register on shadow stack Virtual Memory Areas VMAs. By discarding a page and injecting a page with chosen return addresses, an attacker could achieve arbitrary code execution. This...

CVE-2026-32791

Intel PCM before version tag 202604 is affected by an untrusted search path vulnerability that could allow local privilege escalation for Ring 3 user applications. An unprivileged, authenticated user with high attack complexity and passive user interaction could exploit this to impact confidentia...

CVE-2025-31938

The CVE-2025-31938 entry concerns insufficient granularity of access control in a subsystem of Intel Xeon 6 Scalable processors with Intel TDX. The description indicates an information-disclosure risk that could be exploited by an authenticated, local attacker with high complexity and no user int...

CVE-2025-31356

Insufficient verification of data authenticity for some IntelR Trust Domain Extensions IntelR TDX within Ring 0: Hypervisor may allow an information disclosure. A system software adversary with a privileged user access combined with a high complexity attack may enable data exposure. This result m...

EUVD-2026-56524

Protection mechanism failure for some LLM-on-Ray before version 1.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially...