28935 matches found
Microsoft .NET: CVE-2026-70165: .NET Elevation of Privilege Vulnerability
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...
CVE-2026-108133: Release of Invalid Pointer or Reference
Release of invalid pointer or reference in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...
CVE-2026-70142: Untrusted Search Path
Untrusted search path in Windows Update Service allows an authorized attacker to elevate privileges locally...
CVE-2026-85810: Use After Free
Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-108468: Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-70208: Out-of-bounds Read
Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to disclose information locally...
CVE-2026-88079: NULL Pointer Dereference
Null pointer dereference in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...
UBUNTU-CVE-2026-96231
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...
UBUNTU-CVE-2026-96225
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...
PT-2026-112011
Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally...
CVE-2026-70075: Time-of-check Time-of-use (TOCTOU) Race Condition
Time-of-check time-of-use toctou race condition in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to bypass a security feature locally...
CVE-2026-83916: Double Free
Double free in Windows Error Reporting allows an authorized attacker to execute code locally...
CVE-2026-103567: Buffer Over-read
Buffer over-read in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally...
CVE-2026-88191: Improper Link Resolution Before File Access
Improper link resolution before file access 'link following' in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-83715: Windows Error Reporting Tampering Vulnerability
Missing authentication for critical function in Windows Error Reporting allows an authorized attacker to perform tampering locally...
Microsoft Windows: CVE-2026-83883: Windows Win32k Elevation of Privilege Vulnerability
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-70122: Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
Time-of-check time-of-use toctou race condition in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-70293: Win32k Information Disclosure Vulnerability
Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...
vifm -- Unverified Ownership
https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/SkX7Pmiofg reports: Vifm 0.8.1-beta through 0.14.4 reuses a pre-existing IPC FIFO in the shared temporary directory without checking ownership, allowing local users to execute commands as another user. Attackers can pre-create a world-writable vifm-ipc-vi...