297178 matches found
Microsoft Windows: CVE-2026-87706: Windows Storage Spaces Controller Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally...
CVE-2026-104587
blob42 gosuki through commit 6e2bf34 contains a Stored Cross-Site Scripting XSS vulnerability. The application uses text/template instead of html/template, failing to perform context-aware auto-escaping on the URL and DisplayURL fields of bookmarks in internal/webui/templates/bookmarks.html. An...
CVE-2026-85820: Heap-based Buffer Overflow
Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...
CVE-2026-83846: Use After Free
Use after free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...
CVE-2026-85910: Buffer Over-read
Buffer over-read in Windows StateRepository API allows an authorized attacker to disclose information locally...
CVE-2026-83933: Improper Link Resolution Before File Access
Improper link resolution before file access 'link following' in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally...
CVE-2026-83692: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally...
PT-2026-112504
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A use-after-free issue in the Now Playing Session Manager allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption flaw that occurs when an applicati...
CVE-2026-69942: Buffer Over-read
Buffer over-read in Windows Overlay Filter allows an authorized attacker to execute code locally...
CVE-2026-69959: Out-of-bounds Read
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to execute code locally...
PT-2026-112847
Name of the Vulnerable Software and Affected Versions Windows Universal Disk Format File System Driver UDFS affected versions not specified Description An out-of-bounds read in the Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to disclose sensitive informatio...
CVE-2026-83723: Use of Uninitialized Resource
Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally...
CVE-2026-69953: Buffer Over-read
Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-96948: Windows Client Side Caching driver (csc.sys) Information Disclosure Vulnerability
Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver csc.sys allows an authorized attacker to disclose information locally...
PT-2026-113211
Time-of-check time-of-use toctou race condition in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally...
PT-2026-113232
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...
PT-2026-112908
Name of the Vulnerable Software and Affected Versions Windows Installer affected versions not specified Description A use-after-free condition occurs in Windows Installer, which allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue where an...
CVE-2026-85914: Use After Free
Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-85914: Windows Embedded Mode Service Elevation of Privilege Vulnerability
Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally...