295875 matches found
Microsoft Windows: CVE-2026-83588: Windows USB Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally...
Microsoft .NET: CVE-2026-70165: .NET Elevation of Privilege Vulnerability
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...
Microsoft .NET: CVE-2026-70190: .NET Elevation of Privilege Vulnerability
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...
Microsoft Visual Studio: CVE-2026-96231: .NET Elevation of Privilege Vulnerability
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...
PT-2026-113042
Name of the Vulnerable Software and Affected Versions Microsoft.NETCore.App.Runtime.linux-arm versions 8.0.0 through 8.0.31 Microsoft.NETCore.App.Runtime.linux-arm64 versions 8.0.0 through 8.0.31 Microsoft.NETCore.App.Runtime.linux-musl-arm versions 8.0.0 through 8.0.31...
PT-2026-113045
Name of the Vulnerable Software and Affected Versions Microsoft.NETCore.App.Runtime.linux-arm versions 8.0.0 through 8.0.31 Microsoft.NETCore.App.Runtime.linux-arm64 versions 8.0.0 through 8.0.31 Microsoft.NETCore.App.Runtime.linux-musl-arm versions 8.0.0 through 8.0.31...
Microsoft .NET: CVE-2026-70161: .NET Elevation of Privilege Vulnerability
Improper limitation of a pathname to a restricted directory 'path traversal' in .NET allows an authorized attacker to elevate privileges locally...
Microsoft Visual Studio: CVE-2026-96225: .NET Elevation of Privilege Vulnerability
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...
PT-2026-113150
Name of the Vulnerable Software and Affected Versions Windows Client Side Caching driver csc.sys affected versions not specified Description An issue in the Windows Client Side Caching driver csc.sys allows an authorized attacker to locally disclose sensitive information. Recommendations At the...
PT-2026-112266
Improper limitation of a pathname to a restricted directory 'path traversal' in .NET allows an authorized attacker to elevate privileges locally...
PT-2026-112270
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...
CVE-2026-103845: Uncontrolled Search Path Element
Dimension is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. A local attacker with user permissions could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user...
PT-2026-112569
Name of the Vulnerable Software and Affected Versions Windows Installer affected versions not specified Description A race condition occurs when concurrent execution using a shared resource lacks proper synchronization. This allows an authorized attacker to elevate privileges locally on the syste...
Microsoft Windows: CVE-2026-70057: Windows Routing and Remote Access Service (RRAS) Security Feature Bypass Vulnerability
Incorrect authorization in Windows Routing and Remote Access Service RRAS allows an authorized attacker to bypass a security feature locally...
Microsoft Windows: CVE-2026-83864: Windows NTFS Information Disclosure Vulnerability
Improper access control in Windows NTFS allows an authorized attacker to disclose information locally...
Microsoft Windows: CVE-2026-96854: Windows Device Association Service Information Disclosure Vulnerability
Access of resource using incompatible type 'type confusion' in Windows Device Association Service allows an authorized attacker to disclose information locally...
PT-2026-112486
Weak authentication in Microsoft PowerToys allows an authorized attacker to perform tampering locally...
PT-2026-112725
Name of the Vulnerable Software and Affected Versions Windows Device Association Service affected versions not specified Description An out-of-bounds read in the Windows Device Association Service allows an authorized attacker to disclose information locally. An out-of-bounds read occurs when a...
Microsoft Windows: CVE-2026-83499: Windows Server Update Service Elevation of Privilege Vulnerability
Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally...