CVE-2026-61358 Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability

...

EUVD-2026-56612

No cwe for this issue in AMD Zen allows an authorized attacker to disclose information locally...

CVE-2026-59122

CVE-2026-59122 describes a race condition in Windows Telephony Service caused by concurrent access to a shared resource with improper synchronization. This allows an authorized attacker with local access and low privileges to elevate privileges (CVSS v3.1: AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H; bas...

CVE-2026-66804

Technical details about CVE-2026-66804 are not publicly available in the provided documents. Monitor for updates from Microsoft and NVD for affected products, vulnerable component, impact, and remediation.

EUVD-2026-56465

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

EUVD-2026-56461

Incomplete cleanup in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally...

CVE-2026-65678 Windows Win32k Elevation of Privilege Vulnerability

...

EUVD-2026-56434

Out-of-bounds read in Windows GDI allows an authorized attacker to disclose information locally...

EUVD-2026-56424

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally...

CVE-2026-62908

CVE-2026-62908: A race condition in the Windows Backup Engine allows local privilege escalation by an authorized attacker. Documented impact: high across confidentiality, integrity, and availability (CVSS 3.1 base score 7.0; LOCAL access; HIGH likelihood of impact). Affected component is the Wind...

CVE-2026-62892 Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability

...

CVE-2026-62890 Windows GDI+ Elevation of Privilege Vulnerability

...

CVE-2026-62797 Windows NTFS Elevation of Privilege Vulnerability

...

EUVD-2026-56389

Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally...

EUVD-2026-56387

Untrusted pointer dereference in Windows Win32K allows an authorized attacker to disclose information locally...

CVE-2026-62758 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

...

CVE-2026-62729

CVE-2026-62729 describes a race condition in Windows Telephony Service caused by concurrent execution on a shared resource with improper synchronization. This allows an authorized, local attacker to elevate privileges. The entry notes a local attack vector with high impact on confidentiality, int...

CVE-2026-62723 Windows Telephony Service Elevation of Privilege Vulnerability

...

CVE-2026-62722 Microsoft Brokering File System Elevation of Privilege Vulnerability

...

CVE-2026-62722

The CVE-2026-62722 issue affects the Windows Bind Filter Driver and is caused by a heap-based buffer overflow, enabling an authorized local attacker to achieve privilege escalation. The provided sources confirm the vulnerability and its local, high-severity impact (CVE-2026-62722 with CVSS 3.1: A...