CVE-2026-50351

The CVE-2026-50351 issue concerns Windows Audio Compression Manager (ACM). It describes improper access control that could let an authenticated, local attacker elevate privileges on affected Windows systems. Documented impact is local privilege escalation with high severity (CVSS v3.1 base score ...

CVE-2026-49803

CVE-2026-49803 describes a race condition in the Windows AppX Deployment Service due to improper synchronization, enabling an authorized attacker to perform local privilege escalation. The NVD entry corroborates the description: concurrent execution on a shared resource leads to elevation of priv...

CVE-2026-50323

Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally...

CVE-2026-50323

Technical details (affected products, versions, root cause, exploit specifics) are not provided in the connected documents. Monitor for updates to CVE-2026-50323.

CVE-2026-49806

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows USB Print Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-49805

CVE-2026-49805 concerns Windows: an improper access control in the Win32K subsystem could allow a locally authenticated attacker to elevate privileges. Affected software is described as Windows Win32K; the root cause cited is access-control issues within that component. The documents provide the ...

CVE-2026-49802

CVE-2026-49802 affects the Windows USB Print Driver. It arises from concurrent execution using a shared resource with improper synchronization (a race condition), enabling a locally privileged attacker to elevate privileges. The CVSS v3.1 base score is 7.0 (High) with local attack vector, high im...

CVE-2026-50333

CVE-2026-50333 affects Windows Spaceport.sys. The vulnerability is described as missing authentication for a critical function, enabling a locally authenticated attacker to escalate privileges. Affected component is Spaceport.sys; no specific product version, root cause detail, or remediation ver...

CVE-2026-50311

Improper access control in Windows Server allows an authorized attacker to elevate privileges locally...

CVE-2026-50311

CVE-2026-50311 concerns Windows Server where improper access control allows an authorized user to locally elevate privileges. Root cause: insufficient authorization checks in the affected Windows Server components, enabling privilege escalation with local access and no user interaction required. ...

CVE-2026-49795

CVE-2026-49795 is a use-after-free in the Windows Kernel that allows an authorized local attacker to elevate privileges. Affected: Windows kernel code paths implementing kernel objects referenced after free. Root cause: use-after-free leads to arbitrary code execution with SYSTEM privileges; impa...

CVE-2026-49789

CVE-2026-49789 is a Windows NTFS elevation-of-privilege vulnerability. A stack-based buffer overflow in NTFS could allow an authorized local attacker to escalate privileges. Affected component: Windows NTFS subsystem. Root cause: stack-based overflow in an NTFS operation, leading to potential cod...

CVE-2026-49183

CVE-2026-49183 describes a race condition in Windows Clipboard Server due to improper synchronization, enabling a local attacker with low privileges to elevate to higher rights. The affected component is the Windows Clipboard Server (shared resource handling) and the root cause is concurrent exec...

CVE-2026-48581

CVE-2026-48581 affects Microsoft Surface. It describes insufficient granularity of access control enabling a locally authenticated attacker to escalate privileges (Impact: high; CVSS 3.1 base 7.8, AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Connected records show the vulnerability in Surface Broker SDM...

CVE-2026-44800

CVE-2026-44800 concerns a race condition in Windows Push Notifications caused by improper synchronization of a shared resource. This vulnerability enables an authorized, local attacker to achieve privilege elevation. Documented impact is Local, with Confidentiality, Integrity, and Availability al...

CVE-2026-58636

Microsoft Windows PC Manager is affected by CVE-2026-58636 due to improper link resolution before file access ("link following"), enabling an authenticated local attacker to elevate privileges. Current records indicate a local privilege escalation with high impact, but do not specify affected ver...

CVE-2026-58602

CVE-2026-58602 is a Windows kernel-mode-driver vulnerability described as a use-after-free that enables an authorized, local attacker to achieve elevation of privilege. The public documents do not provide product/vendor specifics beyond “Windows kernel” and “kernel-mode driver,” nor details on af...

CVE-2026-58601

CVE-2026-58601 describes a heap-based buffer overflow in the Virtual Hard Disk (VHD) Miniport Driver that allows an authorized, local attacker to elevate privileges. The available description specifies a local-privelege-escalation impact, but does not provide product/version specifics, exploitati...

CVE-2026-58526

Technical details (affected product/component/root cause/versions/exploit info) are not publicly available in the provided documents. Monitor updates from NVD/CVE records and vendor advisories for any forthcoming specifics.

CVE-2026-55014

CVE-2026-55014 concerns Windows Remote Help Defense with an improper access control vulnerability that lets an authorized attacker locally elevate privileges. Documented CVSSv3.1: 7.8 (HIGH) — LOCAL, LOW complexity, LOW privileges required, NONE user interaction; impact to confidentiality, integr...