33374 matches found
CVE-2026-58601
CVE-2026-58601 describes a heap-based buffer overflow in the Virtual Hard Disk (VHD) Miniport Driver that allows an authorized, local attacker to elevate privileges. The available description specifies a local-privelege-escalation impact, but does not provide product/version specifics, exploitati...
CVE-2026-58526
Technical details (affected product/component/root cause/versions/exploit info) are not publicly available in the provided documents. Monitor updates from NVD/CVE records and vendor advisories for any forthcoming specifics.
CVE-2026-55014
CVE-2026-55014 concerns Windows Remote Help Defense with an improper access control vulnerability that lets an authorized attacker locally elevate privileges. Documented CVSSv3.1: 7.8 (HIGH) — LOCAL, LOW complexity, LOW privileges required, NONE user interaction; impact to confidentiality, integr...
CVE-2026-54127
Use after free in Windows Hyper-V allows an unauthorized attacker to elevate privileges locally...
CVE-2026-54127
CVE-2026-54127 describes a use-after-free vulnerability in Windows Hyper-V that enables a local elevation of privileges. The CVSS 3.1 vector indicates a local attack, high impact on confidentiality, integrity, and availability, with no user interaction required and no privileges needed. The conne...
CVE-2026-56155
Insufficient granularity of access control in Active Directory Federation Services AD FS allows an authorized attacker to elevate privileges locally...
CVE-2026-55002
External control of file name or path in SQL Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-55009
CVE-2026-55009 describes a deserialization of untrusted data in Microsoft Exchange Server that enables a locally authenticated attacker to elevate privileges. The CVSSv3.1 details show a Local attack vector, Low attack complexity, Low privileges required, and No user interaction, with High impact...
CVE-2026-54996
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows USB Print Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-54114
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...
CVE-2026-54114
CVE-2026-54114 is a Windows Win32K use-after-free that enables a local privilege elevation for an authenticated user. The vulnerability affects Win32k functionality (Win32k.sys context) and is triggered by an improper handling of freed objects, allowing an attacker to escalate to SYSTEM level on ...
CVE-2026-55004
CVE-2026-55004 corresponds to a local privilege-elevation flaw described as a double-free in Microsoft Printer Drivers. The CVSSv3.1 score is 7.8 (High) with local attack vector, low attack complexity, and privileges required, no user interaction, impacting confidentiality, integrity, and availab...
CVE-2026-54986
NVD reports CVE-2026-54986 as a heap-based buffer overflow in Windows Win32K that enables a locally authenticated attacker to perform privilege escalation. Affected component is Windows Win32K; root cause described as heap overflow within that subsystem. The available sources do not specify vulne...
CVE-2026-54986
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally...
CVE-2026-54107
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Win32K allows an authorized attacker to elevate privileges locally...
CVE-2026-54107
The CVE-2026-54107 entry documents a race condition caused by improper synchronization in Windows Win32K, enabling a locally authenticated attacker to achieve privilege escalation. Affected software/component: Windows Win32K. Root cause: concurrent execution with shared resource lacking proper sy...
CVE-2026-54991
CVE-2026-54991 describes a race condition in the Windows USB Print Driver caused by concurrent execution with improper synchronization. The issue allows a local, authorized attacker to elevate privileges. Documents do not provide exploit details or affected version ranges beyond the Windows USB P...
CVE-2026-54111
CVE-2026-54111 affects Windows systems via the USB Print Driver. The underlying issue is a race condition caused by improper synchronization on a shared resource, enabling a locally authenticated attacker to elevate privileges. The CVSS v3.1 vector is LOCAL/ HIGH complexity, with LOW privileges r...
CVE-2026-50697
The CVE-2026-50697 entry concerns a vulnerability in the Windows Common Log File System Driver that could allow an attacker with local access to elevate privileges. The issue is described as exposure of sensitive information to an unauthorized actor, enabling local privilege escalation. Public de...