34153 matches found
CVE-2026-42984
CVE-2026-42984 relates to a use-after-free in the Windows Kernel enabling an authorized local attacker to elevate privileges. Affected component: Windows Kernel. Underlying cause: use-after-free (exact technical details not provided here). Impact: local privilege elevation with high confidentiali...
EUVD-2026-35734
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...
EUVD-2026-35725
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Telephony Service allows an authorized attacker to elevate privileges locally...
CVE-2026-42912
The CVE-2026-42912 entry concerns a race condition in the Windows Telephony Service caused by improper synchronization. A local, low-privilege attacker could exploit this vulnerability to elevate privileges on the host (CVSSv3.1: 7.0, HIGH). Affected component: Windows Telephony Service. Root cau...
EUVD-2026-35723
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...
CVE-2026-42911
CVE-2026-42911 describes a use-after-free vulnerability in the Windows Ancillary Function Driver for WinSock. The issue permits an authorized local attacker to elevate privileges. The documented impact is local privilege elevation with high severity (CVSSv3.1: AV=L/AC=H/PR=L/UI=N/S=U/C=H/I=H/A=H,...
EUVD-2026-35600
Integer underflow wrap or wraparound in Windows NT OS Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-42916
Integer overflow or wraparound in Windows NT OS Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-42980
The CVE-2026-42980 entry describes an integer underflow (wrap or wraparound) in the Windows NT OS Kernel that allows an authorized, local attacker to elevate privileges. Affected component: Windows NT OS Kernel; root cause: numeric underflow leading to improper bounds/flow control, enabling privi...
EUVD-2026-35598
Integer underflow wrap or wraparound in Windows NT OS Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-42836
CVE-2026-42836: A race condition due to improper synchronization in the Windows Function Discovery Service (fdwsd.dll) enables a locally authenticated attacker to escalate privileges. The issue is described as a concurrency problem with a shared resource. Affected component: Function Discovery Se...
CVE-2026-48565
Windows Narrator Braille contains an untrusted search path vulnerability that can elevate privileges locally for an authorized user. Root cause is an untrusted search path in the Narrator Braille component, with an attacker able to exploit it without user interaction. CVSSv3.1 metrics indicate AV...
EUVD-2026-35585
Untrusted search path in Windows Narrator Braille allows an authorized attacker to elevate privileges locally...
EUVD-2026-35575
Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally...
CVE-2026-47293
CVE-2026-47293 describes a use-after-free vulnerability in Microsoft Office Click-To-Run that could allow an authorized, local attacker to elevate privileges. Affected component is Microsoft Office Click-To-Run; root cause is use-after-free. The published metrics indicate a high-severity impact (...
CVE-2026-42910
CVE-2026-42910 describes an out-of-bounds write in Windows Hotpatch Monitoring Service that enables a locally authenticated attacker to elevate privileges. According to the records, the impact is local with high severity (CVSS v3.1: AVLOCAL, ACLOW, PRLOW, UI NONE, S U, C I A H). The exploitation ...
EUVD-2026-35571
Time-of-check time-of-use toctou race condition in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally...
EUVD-2026-35566
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
CVE-2026-45603
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...