33999 matches found
CVE-2026-49183
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Clipboard Server allows an authorized attacker to elevate privileges locally...
CVE-2026-49175
Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally...
CVE-2026-49176
Improper privilege management in Windows WalletService allows an authorized attacker to elevate privileges locally...
CVE-2026-49173
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-49166
Use after free in Microsoft Printer Drivers allows an authorized attacker to elevate privileges locally...
CVE-2026-49167
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-48571
Use after free in Windows App Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-49162
Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...
CVE-2026-48572
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows App Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-48581
Insufficient granularity of access control in Microsoft Surface allows an authorized attacker to elevate privileges locally...
CVE-2026-44800
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Push Notifications allows an authorized attacker to elevate privileges locally...
EUVD-2026-44304
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-50356
Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Windows App Store allows an authorized attacker to elevate privileges locally...
CVE-2026-50384
CVE-2026-50384 describes a race condition in the Windows Clip Service caused by concurrent execution over a shared resource with improper synchronization. This vulnerability allows a locally authenticated attacker to elevate privileges. The CVSS 3.1 vector is LOCAL, with HIGH impact on confidenti...
CVE-2026-50356
CVE-2026-50356 describes a race-condition in Microsoft Windows App Store caused by concurrent execution using a shared resource with improper synchronization. This allows a locally authenticated attacker to elevate privileges. The fixed details or patch versions are not provided in the connected ...
CVE-2026-50325
Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally...
CVE-2026-50325
Technical details (affected versions, root cause, remediation) are not provided in the supplied documents; monitor for updates.
CVE-2026-50296
CVE-2026-50296 is a use-after-free vulnerability in the DirectX Graphics Kernel that allows an authorized, local attacker to elevate privileges. The cited CVSS 3.1 vector is LOCAL, with HIGH impact on confidentiality, integrity, and availability, and requires LOW privileges with no user interacti...
CVE-2026-50297
CVE-2026-50297 is a Windows Win32K local privilege escalation due to improper access control. The vulnerable component is Win32K; the condition allows an authorized attacker to elevate privileges locally. Base impact is high (C, I, A) with local attack vector and no user interaction required beyo...