CVE-2026-59126 Windows Event Logging Service Elevation of Privilege Vulnerability

...

EUVD-2026-56611

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Event Logging Service allows an authorized attacker to elevate privileges locally...

CVE-2026-59126

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Event Logging Service allows an authorized attacker to elevate privileges locally...

CVE-2026-59126

The CVE refers to a race condition in Windows Event Logging Service where concurrent execution on a shared resource with improper synchronization can enable a local, authorized user to elevate privileges. Affected component: Windows Event Logging Service; root cause: race condition due to insuffi...

CVE-2026-59126 Windows Event Logging Service Elevation of Privilege Vulnerability

...

CVE-2026-61347

CVE-2026-61347 describes a buffer over-read in Windows Event Logging Service that allows an authorized attacker with LOW privileges and local access to disclose information. The CVSS 3.1 metrics indicate a MEDIUM base score (5.5), with LOCAL attack vector, low attack complexity, no user interacti...

CVE-2026-61347 Windows Event Logging Service Information Disclosure Vulnerability

...

EUVD-2026-56321

Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally...

CVE-2026-61347

Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally...

CVE-2026-61347 Windows Event Logging Service Information Disclosure Vulnerability

...

EUVD-2026-56316

Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally...

CVE-2026-59137

Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally...

CVE-2026-59137 Windows Event Logging Service Information Disclosure Vulnerability

...

CVE-2026-59137 Windows Event Logging Service Information Disclosure Vulnerability

...

CVE-2026-59137

Technical details about CVE-2026-59137 are not publicly provided in the supplied documents. No affected products, versions, or remediation are specified here. Monitor for updates from official sources.

Windows Event Logging Service Information Disclosure Vulnerability

Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally...

Windows Event Logging Service Information Disclosure Vulnerability

Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally...

PT-2026-70858

Name of the Vulnerable Software and Affected Versions MongoDB Server affected versions not specified Description An issue allows an authenticated user with limited, database-scoped privileges to modify diagnostic logging settings. Instead of affecting only the intended database, these changes...

PT-2026-70406

Name of the Vulnerable Software and Affected Versions Windows Event Logging Service affected versions not specified Description A race condition exists in the Windows Event Logging Service. This occurs when concurrent execution using a shared resource lacks proper synchronization, allowing an...

CVE-2026-18702: Improper Privilege Management

An issue in MongoDB Server could allow an authenticated user with limited, database-scoped privileges to modify diagnostic logging settings that affect the entire server rather than just the intended database. This could allow suppression of diagnostic logging server-wide, potentially obscuring...