CVE-2026-49162

Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...

CVE-2026-48571

Use after free in Windows App Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-48572

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows App Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-48581

Insufficient granularity of access control in Microsoft Surface allows an authorized attacker to elevate privileges locally...

CVE-2026-44800

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

EUVD-2026-44304

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-50356

Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Windows App Store allows an authorized attacker to elevate privileges locally...

CVE-2026-50384

CVE-2026-50384 describes a race condition in the Windows Clip Service caused by concurrent execution over a shared resource with improper synchronization. This vulnerability allows a locally authenticated attacker to elevate privileges. The CVSS 3.1 vector is LOCAL, with HIGH impact on confidenti...

CVE-2026-50356

CVE-2026-50356 describes a race-condition in Microsoft Windows App Store caused by concurrent execution using a shared resource with improper synchronization. This allows a locally authenticated attacker to elevate privileges. The fixed details or patch versions are not provided in the connected ...

CVE-2026-50325

Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-50325

Technical details (affected versions, root cause, remediation) are not provided in the supplied documents; monitor for updates.

CVE-2026-50296

CVE-2026-50296 is a use-after-free vulnerability in the DirectX Graphics Kernel that allows an authorized, local attacker to elevate privileges. The cited CVSS 3.1 vector is LOCAL, with HIGH impact on confidentiality, integrity, and availability, and requires LOW privileges with no user interacti...

CVE-2026-50297

CVE-2026-50297 is a Windows Win32K local privilege escalation due to improper access control. The vulnerable component is Win32K; the condition allows an authorized attacker to elevate privileges locally. Base impact is high (C, I, A) with local attack vector and no user interaction required beyo...

CVE-2026-50354

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-50354

CVE-2026-50354 involves a use-after-free in the Windows Kernel that enables an authorized local attacker to elevate privileges. The affected source is the Windows Kernel; the vulnerability stems from memory management misuse leading to arbitrary code execution with SYSTEM-level privileges. Exploi...

CVE-2026-50293

Use after free in Windows Internal Task Bar allows an authorized attacker to elevate privileges locally...

CVE-2026-50293

CVE-2026-50293 describes a use-after-free in the Windows Internal Task Bar that allows an authorized user to elevate privileges locally. The available data cite a CVSS v3.1 base score of 7.8 (High) with Local attack vector, Low attack complexity, and Low privileges required; outcomes include High...

CVE-2026-50342

The CVE-2026-50342 entry describes an improper access control flaw in the Windows MIDI Service Module that enables a locally authenticated attacker to elevate privileges. The CVSS3.1 base score is 8.8 (High) with Local attack vector, Low attack complexity, Low privileges required, and No user int...

CVE-2026-50351

The CVE-2026-50351 issue concerns Windows Audio Compression Manager (ACM). It describes improper access control that could let an authenticated, local attacker elevate privileges on affected Windows systems. Documented impact is local privilege escalation with high severity (CVSS v3.1 base score ...

CVE-2026-49803

CVE-2026-49803 describes a race condition in the Windows AppX Deployment Service due to improper synchronization, enabling an authorized attacker to perform local privilege escalation. The NVD entry corroborates the description: concurrent execution on a shared resource leads to elevation of priv...