CVE-2026-56155

Insufficient granularity of access control in Active Directory Federation Services AD FS allows an authorized attacker to elevate privileges locally...

CVE-2026-55002

External control of file name or path in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-55009

CVE-2026-55009 describes a deserialization of untrusted data in Microsoft Exchange Server that enables a locally authenticated attacker to elevate privileges. The CVSSv3.1 details show a Local attack vector, Low attack complexity, Low privileges required, and No user interaction, with High impact...

CVE-2026-54996

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows USB Print Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-54114

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-54114

CVE-2026-54114 is a Windows Win32K use-after-free that enables a local privilege elevation for an authenticated user. The vulnerability affects Win32k functionality (Win32k.sys context) and is triggered by an improper handling of freed objects, allowing an attacker to escalate to SYSTEM level on ...

CVE-2026-55004

CVE-2026-55004 corresponds to a local privilege-elevation flaw described as a double-free in Microsoft Printer Drivers. The CVSSv3.1 score is 7.8 (High) with local attack vector, low attack complexity, and privileges required, no user interaction, impacting confidentiality, integrity, and availab...

CVE-2026-54986

NVD reports CVE-2026-54986 as a heap-based buffer overflow in Windows Win32K that enables a locally authenticated attacker to perform privilege escalation. Affected component is Windows Win32K; root cause described as heap overflow within that subsystem. The available sources do not specify vulne...

CVE-2026-54986

Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-54107

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-54107

The CVE-2026-54107 entry documents a race condition caused by improper synchronization in Windows Win32K, enabling a locally authenticated attacker to achieve privilege escalation. Affected software/component: Windows Win32K. Root cause: concurrent execution with shared resource lacking proper sy...

CVE-2026-54991

CVE-2026-54991 describes a race condition in the Windows USB Print Driver caused by concurrent execution with improper synchronization. The issue allows a local, authorized attacker to elevate privileges. Documents do not provide exploit details or affected version ranges beyond the Windows USB P...

CVE-2026-54111

CVE-2026-54111 affects Windows systems via the USB Print Driver. The underlying issue is a race condition caused by improper synchronization on a shared resource, enabling a locally authenticated attacker to elevate privileges. The CVSS v3.1 vector is LOCAL/ HIGH complexity, with LOW privileges r...

CVE-2026-50697

The CVE-2026-50697 entry concerns a vulnerability in the Windows Common Log File System Driver that could allow an attacker with local access to elevate privileges. The issue is described as exposure of sensitive information to an unauthorized actor, enabling local privilege escalation. Public de...

CVE-2026-54987

Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...

CVE-2026-54989

CVE-2026-54989 is a use-after-free in the Quality Windows Audio/Video Experience (QWAVE) service that enables a locally authenticated attacker to elevate privileges. The CVSS 3.1 metrics describe a Local attack with High impact on confidentiality, integrity, and availability, requiring LOW privil...

CVE-2026-54987

CVE-2026-54987 is a Windows vulnerability described as a heap-based buffer overflow in the Windows Overlay Filter, enabling a locally authenticated attacker to elevate privileges. The CVSSv3.1 score is 7.8 (HIGH) with local attack vector, low attack complexity, and requires low privileges with no...

CVE-2026-54129

Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally...

CVE-2026-54129

Technical details (affected product/version, root cause, exploit vector, and remediation) are not provided in the supplied documents. Monitor for updates.

CVE-2026-49175

CVE-2026-49175 is a Windows DNS Client vulnerability described as a heap-based buffer overflow that allows an authorized attacker to achieve local privilege escalation. The issue affects the Windows DNS client and is characterized by a LOCAL attack vector with low attack complexity and the need f...