296847 matches found
CVE-2026-70216: Insufficient Granularity of Access Control
Insufficient granularity of access control in Windows Mobile Device Management allows an authorized attacker to perform tampering locally...
Microsoft Windows: CVE-2026-88093: Desktop Window Manager Elevation of Privilege Vulnerability
Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally...
PT-2026-112970
Name of the Vulnerable Software and Affected Versions Microsoft Windows Search Component affected versions not specified Description A race condition occurs in the Microsoft Windows Search Component due to improper synchronization when using a shared resource. This allows an authorized attacker t...
Microsoft Windows: CVE-2026-96856: Windows Management Instrumentation Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally...
CVE-2026-96855: Missing Authorization
Improper access control in Windows Modern Device Management MDM allows an authorized attacker to perform tampering locally...
Microsoft Windows: CVE-2026-96855: Windows Modern Device Management (MDM) Tampering Vulnerability
Improper access control in Windows Modern Device Management MDM allows an authorized attacker to perform tampering locally...
CVE-2026-96854: Access of Resource Using Incompatible Type
Access of resource using incompatible type 'type confusion' in Windows Device Association Service allows an authorized attacker to disclose information locally...
Microsoft Windows: CVE-2026-96854: Windows Device Association Service Information Disclosure Vulnerability
Access of resource using incompatible type 'type confusion' in Windows Device Association Service allows an authorized attacker to disclose information locally...
Microsoft Windows: CVE-2026-96853: Windows Win32 Kernel Subsystem Information Disclosure Vulnerability
Time-of-check time-of-use toctou race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...
Microsoft Windows: CVE-2026-88161: Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability
Use after free in Windows Local Security Authority LSA allows an authorized attacker to elevate privileges locally...
CVE-2026-88161: Use After Free
Use after free in Windows Local Security Authority LSA allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-88160: Microsoft Windows Search Component Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-88181: Windows DWM Core Library Elevation of Privilege Vulnerability
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-84009: Windows Projected File System Tampering Vulnerability
Time-of-check time-of-use toctou race condition in Windows Projected File System allows an authorized attacker to perform tampering locally...
PT-2026-112806
Name of the Vulnerable Software and Affected Versions Windows Background Intelligent Transfer Service BITS affected versions not specified Description An issue exists where the use of an uninitialized resource allows an authorized attacker to elevate privileges locally on the system...
Microsoft Windows: CVE-2026-96947: Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...
CVE-2026-110036: Integer Overflow or Wraparound
A flaw was found in device-mapper-persistent-data. A local attacker can cause a Denial of Service DoS by inducing a user or system tool to process crafted device metadata containing an excessively large block index. An arithmetic error in the synchronous block reading logic causes the application...
CVE-2026-108471: Untrusted Pointer Dereference
Untrusted pointer dereference in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...