296866 matches found
CVE-2026-88100: Use After Free
Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally...
CVE-2026-85365: Heap-based Buffer Overflow
Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally...
PT-2026-112745
Name of the Vulnerable Software and Affected Versions Servicing Stack Updates affected versions not specified Description A heap-based buffer overflow exists in Servicing Stack Updates. This flaw allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when...
Microsoft Windows: CVE-2026-88161: Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability
Use after free in Windows Local Security Authority LSA allows an authorized attacker to elevate privileges locally...
CVE-2026-96854: Access of Resource Using Incompatible Type
Access of resource using incompatible type 'type confusion' in Windows Device Association Service allows an authorized attacker to disclose information locally...
CVE-2026-96323: Use After Free
Use after free in Windows Update allows an authorized attacker to elevate privileges locally...
CVE-2026-70245: Access of Resource Using Incompatible Type
Access of resource using incompatible type 'type confusion' in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...
UBUNTU-CVE-2026-96225
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...
UBUNTU-CVE-2026-96231
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...
CVE-2026-96225: Improper Link Resolution Before File Access
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...
Microsoft Visual Studio: CVE-2026-96225: .NET Elevation of Privilege Vulnerability
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...
Microsoft Visual Studio: CVE-2026-96231: .NET Elevation of Privilege Vulnerability
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...
CVE-2026-83568: Missing Authorization
Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally...
PT-2026-112744
Name of the Vulnerable Software and Affected Versions Windows Installer affected versions not specified Description A use after free issue exists in Windows Installer. This allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs when an...
PT-2026-113131
Integer underflow wrap or wraparound in Windows NTFS allows an authorized attacker to disclose information locally...
PT-2026-112738
Name of the Vulnerable Software and Affected Versions Windows Phone Service affected versions not specified Description A race condition exists in the Windows Phone Service, where concurrent execution using a shared resource occurs without proper synchronization. This flaw allows an authorized...
PT-2026-112450
Name of the Vulnerable Software and Affected Versions Windows Sensor Data Service affected versions not specified Description A heap-based buffer overflow occurs in the Windows Sensor Data Service. This issue allows an authorized attacker to elevate privileges locally on the system. A heap-based...
PT-2026-112737
Name of the Vulnerable Software and Affected Versions Windows Volume Manager Extension Driver affected versions not specified Description An out-of-bounds read in the Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally. An out-of-bounds read occurs...
CVE-2026-110234: Insecure Temporary File
Elio through 1.13.0 contains an insecure temporary file vulnerability that allows local users to overwrite another user's files by pre-creating symbolic links at predictable capture paths. Attackers who know the victim's Elio process ID can plant a symlink so previewing media, fonts or archives...