296877 matches found
Microsoft Windows: CVE-2026-88181: Windows DWM Core Library Elevation of Privilege Vulnerability
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-84009: Windows Projected File System Tampering Vulnerability
Time-of-check time-of-use toctou race condition in Windows Projected File System allows an authorized attacker to perform tampering locally...
Microsoft Windows: CVE-2026-96947: Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...
CVE-2026-110036: Integer Overflow or Wraparound
A flaw was found in device-mapper-persistent-data. A local attacker can cause a Denial of Service DoS by inducing a user or system tool to process crafted device metadata containing an excessively large block index. An arithmetic error in the synchronous block reading logic causes the application...
CVE-2026-108471: Untrusted Pointer Dereference
Untrusted pointer dereference in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...
CVE-2026-108468: Use After Free
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-108464: Use After Free
Use after free in Software Protection Platform SPP allows an authorized attacker to elevate privileges locally...
CVE-2026-108462: Exposure of Sensitive System Information to an Unauthorized Control Sphere
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally...
CVE-2026-108396: Time-of-check Time-of-use (TOCTOU) Race Condition
Time-of-check time-of-use toctou race condition in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...
CVE-2026-108398: Untrusted Search Path
Untrusted search path in .NET Framework allows an authorized attacker to bypass a security feature locally...
CVE-2026-108133: Release of Invalid Pointer or Reference
Release of invalid pointer or reference in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...
CVE-2026-107606: Missing Authentication for Critical Function
SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to retrieve a snapshot of the live feed without authentication...
CVE-2026-107605: Missing Authentication for Critical Function
SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to view live video feed without authentication...
CVE-2026-108130: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...
CVE-2026-108132: Double Free
Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally...
CVE-2026-108136: Use After Free
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
CVE-2026-85919: Heap-based Buffer Overflow
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-70085: Role: DNS Server Tampering Vulnerability
Missing authorization in DNS Server allows an authorized attacker to perform tampering locally...