234646 matches found
CVE-2026-27923 Desktop Window Manager Elevation of Privilege Vulnerability
...
CVE-2026-27923 Desktop Window Manager Elevation of Privilege Vulnerability
...
CVE-2026-27923
CVE-2026-27923 is a Windows Desktop Window Manager elevation-of-privilege vulnerability (CVSS 3.1 base 7.8, HIGH). Local attacker with low privileges and no user interaction could exploit in an UNPROVEN-exploit state to achieve high confidentiality, integrity, and availability impact. The entry l...
CVE-2026-32154 Desktop Window Manager Elevation of Privilege Vulnerability
...
CVE-2026-32154
Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-32154
CVE-2026-32154 is a Desktop Window Manager elevation of privilege vulnerability. AFFECTED COMPONENT: Desktop Window Manager (Windows). The CVSS v3.1 base score is 7.8 (HIGH) with vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H; exploitation is local, with LOW privileges required and no user interactio...
CVE-2026-32154 Desktop Window Manager Elevation of Privilege Vulnerability
...
CVE-2026-32152 Desktop Window Manager Elevation of Privilege Vulnerability
...
CVE-2026-32152
Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-32152 Desktop Window Manager Elevation of Privilege Vulnerability
...
CVE-2026-32152
CVE-2026-32152 is a use-after-free in Desktop Window Manager that allows an authenticated, local attacker to elevate privileges. Microsoft has issued multiple security updates addressing this vulnerability across Windows SKUs (e.g., KB5082142 for Server 2022, KB5082052 for Windows 11 23H2, KB5083...
CVE-2026-27924 Desktop Window Manager Elevation of Privilege Vulnerability
...
CVE-2026-27924
CVE-2026-27924 is a use-after-free vulnerability in the Desktop Window Manager that allows a locally authenticated attacker to escalate privileges. The issue is tied to Desktop Window Manager (dwm) components on Windows and is described as an elevation of privilege when memory is corrupted after ...
CVE-2026-27924 Desktop Window Manager Elevation of Privilege Vulnerability
...
CVE-2026-26175
CVE-2026-26175 : Windows Boot Manager security feature bypass via use of an uninitialized resource, enabling a physical attacker to bypass protection. Affected component: Windows Boot Manager; root cause: uninitialized resource handling. Base CVSS 3.1 score 4.6 (PHYSICAL attack, LOW attack comple...
CVE-2026-26175 Windows Boot Manager Security Feature Bypass Vulnerability
...
CVE-2026-26175 Windows Boot Manager Security Feature Bypass Vulnerability
...
CVE-2025-61848
An improper neutralization of special elements used in an sql command 'sql injection' vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.8, FortiAnalyzer 7.2 all versions, FortiAnalyzer 7.0 all versions, FortiAnalyzer Cloud 7.6.2 through 7.6.3,...
CVE-2025-68649
The CVE-2025-68649 issue is a path traversal vulnerability in Fortinet products including FortiAnalyzer, FortiAnalyzer Cloud, FortiManager, and FortiManager Cloud across multiple 7.x versions (and 7.0/7.2/7.4/7.6 lines). The root cause is an improper limitation of a pathname to a restricted direc...
CVE-2025-61848
CVE-2025-61848 is an SQL injection vulnerability caused by improper neutralization of special elements in Fortinet products (FortiAnalyzer, FortiManager, and their Cloud variants) across multiple 7.x releases. The flaw may allow a privileged authenticated attacker to execute unauthorized code or ...