146220 matches found
CVE-2026-32091 Microsoft Brokering File System Elevation of Privilege Vulnerability
...
CVE-2026-27914
CVE-2026-27914 affects the Microsoft Management Console (MMC). It is an Elevation of Privilege vulnerability where a local attacker with low privileges and no user interaction can potentially gain high impact on confidentiality, integrity, and availability due to the underlying root cause describ...
CVE-2026-27914 Microsoft Management Console Elevation of Privilege Vulnerability
...
CVE-2026-27914 Microsoft Management Console Elevation of Privilege Vulnerability
...
CVE-2026-26152 Microsoft Cryptographic Services Elevation of Privilege Vulnerability
...
CVE-2026-26143
The CVE-2026-26143 entry concerns Improper input validation in Microsoft PowerShell that allows a local attacker to bypass a security feature. The advisory set shows affected software as Microsoft PowerShell with a high impact (MITRE-style: Circumvention of security measure) and a high base score...
CVE-2026-23657 Microsoft Word Remote Code Execution Vulnerability
...
CVE-2026-23657 Microsoft Word Remote Code Execution Vulnerability
...
CVE-2026-23657
CVE-2026-23657 — Microsoft Word remote/local code execution via use-after-free . The vulnerability affects Microsoft Word (part of Microsoft 365 Apps / Office) and is caused by a use-after-free in Word processing code that can lead to arbitrary code execution when a malicious document is opened. ...
CVE-2026-33825 Microsoft Defender Elevation of Privilege Vulnerability
...
CVE-2026-33825
CVE-2026-33825 is a local EoP vulnerability in the Microsoft Defender Antimalware Platform. A TOCTOU race condition during malware remediation (in Defender’s threat remediation engine) lets an authenticated, low-privilege user pause remediation via NTFS oplocks and redirect Defender operations th...
CVE-2026-33825 Microsoft Defender Elevation of Privilege Vulnerability
...
CVE-2026-33825
Insufficient granularity of access control in Microsoft Defender allows an authorized attacker to elevate privileges locally...
CVE-2026-33822
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally...
CVE-2026-33822
CVE-2026-33822 is a Microsoft Word information disclosure vulnerability. The provided metrics indicate a CVSS v3.1 base score of 6.1 (MEDIUM) with a LOCAL attack vector, USER INTERACTION required , and a confidentiality impact LOW alongside an availability impact HIGH ; there is no noted impact o...
CVE-2026-33120 Microsoft SQL Server Remote Code Execution Vulnerability
...
CVE-2026-33822 Microsoft Word Information Disclosure Vulnerability
...
CVE-2026-33120 Microsoft SQL Server Remote Code Execution Vulnerability
...
CVE-2026-33120
CVE-2026-33120 affects Microsoft SQL Server and is a remote code execution vulnerability. The entry documents a network-based exploit with low attack complexity and low privileges required, resulting in high impact to confidentiality, integrity, and availability. The CVSS v3.1 base score is 8.8 (...